Bump the dev-dependencies group with 5 updates by dependabot[bot] · Pull Request #153 · EngineScript/enginescript-site-exporter

dependabot · 2026-11-09T09:08:33Z

Bumps the dev-dependencies group with 5 updates:

Package	From	To
friendsofphp/php-cs-fixer	`3.95.27`	`3.95.28`
vimeo/psalm	`6.20.5`	`7.0.4`
phpstan/phpstan	`2.3.4`	`2.3.5`
rector/rector	`2.8.3`	`2.8.4`
sebastian/version	`6.0.1`	`6.0.2`

Updates friendsofphp/php-cs-fixer from 3.95.27 to 3.95.28

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.28 Adalbertus

What's Changed

fix: ComposerJsonReader - read PHP version from php-64bit requirement by @lazerg in PHP-CS-Fixer/PHP-CS-Fixer#9868

fix: NewWithParenthesesFixer - do not move parentheses past ., ?? and } by @kevin9327 in PHP-CS-Fixer/PHP-CS-Fixer#9883

fix: NumericLiteralSeparatorFixer - do not drop exponent with explicit plus sign by @SvenHerrmann in PHP-CS-Fixer/PHP-CS-Fixer#9909

fix: NumericLiteralSeparatorFixer - do not treat floats with leading zero and exponent as octal by @SvenHerrmann in PHP-CS-Fixer/PHP-CS-Fixer#9908

fix: StatementIndentationFixer - handle comment right after open tag inside block by @lazerg in PHP-CS-Fixer/PHP-CS-Fixer#9902

fix: SwitchContinueToBreakFixer - handle parentheses in loop condition by @lazerg in PHP-CS-Fixer/PHP-CS-Fixer#9872

fix: Fix SwitchCaseSpaceFixer not fixing if default case is fine by @cs278 in PHP-CS-Fixer/PHP-CS-Fixer#9912

perf: WhitespacyCommentTransformer should insert tokens as bulk slices by @live627 in PHP-CS-Fixer/PHP-CS-Fixer#9879

perf: filter BraceTransformer work by token kind by @live627 in PHP-CS-Fixer/PHP-CS-Fixer#9880

refactor: AbstractTypeTransformer - reduce logic by @keradus in PHP-CS-Fixer/PHP-CS-Fixer#9861

refactor: BraceTransformer - convert following ifs to elseifs by @keradus in PHP-CS-Fixer/PHP-CS-Fixer#9884

refactor: Transformers - use process() instead of processToken() by @live627 in PHP-CS-Fixer/PHP-CS-Fixer#9803

CI: check PHPUnit configuration only for test-related jobs by @keradus in PHP-CS-Fixer/PHP-CS-Fixer#9920

deps: bump phpstan/phpstan-phpunit by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9903

deps: bump crate-ci/typos from 1.50.2 to 1.50.3 in /.github/workflows in the all group across 1 directory by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9876

deps: bump crate-ci/typos from 1.50.3 to 1.51.1 in /.github/workflows in the all group across 1 directory by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9886

deps: bump phpstan/phpstan-phpunit from 2.0.18 to 2.0.19 in /dev-tools in the phpstan group by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9874

deps: bump shipmonk/phpstan-baseline-per-identifier from 2.3.0 to 2.4.0 in /dev-tools in the shipmonk group across 1 directory by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9875

deps: update dev deps by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9864

deps: updateergebnis/agent-detector:^2.0.0 by @localheinz in PHP-CS-Fixer/PHP-CS-Fixer#9910

deps: upgrade Symfony by @keradus in PHP-CS-Fixer/PHP-CS-Fixer#9919

New Contributors

@kevin9327 made their first contribution in PHP-CS-Fixer/PHP-CS-Fixer#9883

@SvenHerrmann made their first contribution in PHP-CS-Fixer/PHP-CS-Fixer#9909

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.27...v3.95.28

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.28

CI: check PHPUnit configuration only for test-related jobs (#9920)

deps: bump crate-ci/typos from 1.50.2 to 1.50.3 in /.github/workflows in the all group across 1 directory (#9876)

deps: bump crate-ci/typos from 1.50.3 to 1.51.1 in /.github/workflows in the all group across 1 directory (#9886)

deps: bump phpstan/phpstan-phpunit from 2.0.18 to 2.0.19 in /dev-tools in the phpstan group (#9874)

deps: bump shipmonk/phpstan-baseline-per-identifier from 2.3.0 to 2.4.0 in /dev-tools in the shipmonk group across 1 directory (#9875)

deps: bump phpstan/phpstan-phpunit (#9903)

deps: update dev deps (#9864)

deps: updateergebnis/agent-detector:^2.0.0 (#9910)

deps: upgrade Symfony (#9919)

fix: Fix SwitchCaseSpaceFixer not fixing if default case is fine (#9912)

fix: ComposerJsonReader - read PHP version from php-64bit requirement (#9868)

fix: NewWithParenthesesFixer - do not move parentheses past ., ?? and } (#9883)

fix: NumericLiteralSeparatorFixer - do not drop exponent with explicit plus sign (#9909)

fix: NumericLiteralSeparatorFixer - do not treat floats with leading zero and exponent as octal (#9908)

fix: StatementIndentationFixer - handle comment right after open tag inside block (#9902)

fix: SwitchContinueToBreakFixer - handle parentheses in loop condition (#9872)

perf: filter BraceTransformer work by token kind (#9880)

perf: WhitespacyCommentTransformer should insert tokens as bulk slices (#9879)

refactor: AbstractTypeTransformer - reduce logic (#9861)

refactor: BraceTransformer - convert following ifs to elseifs (#9884)

refactor: Transformers - use process() instead of processToken() (#9803)

Commits

de66c41 prepared the 3.95.28 release
d7fe4a2 CI: check PHPUnit configuration only for test-related jobs (#9920)
b4b6c46 deps: upgrade Symfony (#9919)
fef7491 fix: StatementIndentationFixer - handle comment right after open tag inside...
bb0fe17 fix: Fix SwitchCaseSpaceFixer not fixing if default case is fine (#9912)
2cf94cb refactor: BraceTransformer - convert following ifs to elseifs (#9884)
e61132e deps: bump crate-ci/typos from 1.50.3 to 1.51.1 in /.github/workflows in the ...
d4d0129 fix: NumericLiteralSeparatorFixer - do not treat floats with leading zero a...
7a42383 deps: updateergebnis/agent-detector:^2.0.0 (#9910)
7701532 fix: NumericLiteralSeparatorFixer - do not drop exponent with explicit plus...
Additional commits viewable in compare view

Updates vimeo/psalm from 6.20.5 to 7.0.4

Release notes

Sourced from vimeo/psalm's releases.

7.0.4

What's Changed

Fixes

fix(baseline): merge duplicated files and issue types when reading a baseline by @jirkace in vimeo/psalm#13098

fix(visibility): drop the empty context from the inaccessible method message by @jirkace in vimeo/psalm#13094

fix(psalter): replace the whole union return type by @jirkace in vimeo/psalm#13116

fix(arithmetic): don't fold a shift by a negative number or zero to a negative power by @jirkace in vimeo/psalm#13103

fix(int-range): an int range without bounds is int by @jirkace in vimeo/psalm#13091

fix(types): a negated instanceof narrows the bound of a template param by @jirkace in vimeo/psalm#12906

fix(types): keep named objects and other shapes next to an object with properties by @jirkace in vimeo/psalm#13101

Perf: skip recording code use edges that nothing reads (2–32% less memory when unused code detection is off) by @alies-dev in vimeo/psalm#13250

Evaluate the keys of array items passed by reference once by @alies-dev in vimeo/psalm#13297

Fix: constants defined in Psalm's process turn into mixed on warm runs by @alies-dev in vimeo/psalm#13302

fix(int-range): a negative int to the power of 0 is 1 by @jirkace in vimeo/psalm#13186

fix(stubs): SplDoublyLinkedList::offsetSet accepts null to append by @jirkace in vimeo/psalm#13207

fix(parser): as, of and is are keys of a shape where a colon follows by @jirkace in vimeo/psalm#13075

fix(types): $_COOKIE can have int keys by @jirkace in vimeo/psalm#12868

fix(config): count referencedFunction issue handler suppressions by @jirkace in vimeo/psalm#12854

fix(scanner): an and/or condition of unknown parts defines both branches by @jirkace in vimeo/psalm#12814

Keep the type of the elements array_splice() returns by @jirkace in vimeo/psalm#12615

fix(param-out): do not check the @param-out of a method without a body by @jirkace in vimeo/psalm#12681

Ask whether the package of an unknown plugin class is installed by @danog in vimeo/psalm#13326

Internal changes

Perf: speed up warm runs and the consolidated cache with one file per cache entry by @alies-dev in vimeo/psalm#13249

Full Changelog: vimeo/psalm@7.0.3...7.0.4

7.0.3

What's Changed

Fixes

Fix: issues found while scanning are lost with a warm cache by @alies-dev in vimeo/psalm#13156

fix(types): an array key that may be mixed is array-key by @jirkace in vimeo/psalm#13176

Fix implicit native __toString overrides and safeguard callmap generation by @orklah in vimeo/psalm#13235

Fix LSP lookup of builtin functions in files not analyzed in-process by @M393 in vimeo/psalm#13237

[6.x] Infer return types for array_first and array_last (PHP 8.5) by @alies-dev in vimeo/psalm#12157

[6.x] Infer the key parameter of array_find/array_any/array_all callbacks by @alies-dev in vimeo/psalm#13245

[6.x] Infer the exact element removed by array_pop/array_shift by @alies-dev in vimeo/psalm#13246

fix(algebra): keep every orred clause of a variable when reconciling by @jirkace in vimeo/psalm#13114

fix(types): an inherited docblock identical to the native return type keeps static of the called class by @jirkace in vimeo/psalm#12968

fix(templates): check a method call against every type of a union template bound by @jirkace in vimeo/psalm#13106

Docs

Document the Psalm GitHub actions by @danog in vimeo/psalm#13051

Document --consolidate-cache by @alies-dev in vimeo/psalm#13256

Internal changes

Add guzzle/promises to the perf corpus by @alies-dev in vimeo/psalm#12984

... (truncated)

Commits

fa5b1f6 Merge pull request #13326 from danog/plugin-not-installed-hint
7a74336 Ask whether the package of an unknown plugin class is installed
87bdf0b Merge pull request #12681 from jirkace/fix/9110-param-out-bodiless-method
cc638e9 Merge pull request #12615 from jirkace/fix/8202-array-splice-return-element-type
62414de Update the files composer build generates
ebd1970 Merge pull request #12814 from jirkace/fix/7923-conditional-class-definition-...
047c63b Merge pull request #12854 from jirkace/fix-11824
0d9d8a5 Merge pull request #12868 from jirkace/fix-11565
45cf806 Merge pull request #13075 from jirkace/fix/6067-as-array-key
ab20b2e Merge pull request #13207 from jirkace/fix/9737-spl-doubly-linked-list-append
Additional commits viewable in compare view

Updates phpstan/phpstan from 2.3.4 to 2.3.5

Commits

See full diff in compare view

Updates rector/rector from 2.8.3 to 2.8.4

Release notes

Sourced from rector/rector's releases.

Released Rector 2.8.4

PHP 8.6 set additions and faster runs 🚀

This release grows the PHP 8.6 set with deprecated function alias renames, moves ConsistentImplodeRector down to the php74 set, and ships another round of performance work across the runner, printer, and reflection refresh.

New Features ⭐

Add PHP 8.6 deprecated function alias renames to php86 set (#8905)

Remove deprecated third arg of define() in php86 set (#8906)

Move ConsistentImplodeRector from php80 to php74 (#8894) Thanks @zoliszabo

Bugfixes 🐛

Run post rectors after the rules reach a fixed point, so no rule sees an imported short name (#8909) Thanks @SanderMuller

AnnotationToAttributeRector: fold unknown named args into the attribute's $options (#8914) Thanks @kix

[Php74] Fix MbStrrposEncodingArgumentPositionRector treating mixed $offset as encoding (#8913)

[DeadCode] Skip nested conditional assign in RemoveDefaultValueFromAssignedPropertyRector (#8915)

[DeadCode] Skip with HTML on RemoveAlwaysTrueIfConditionRector (#8896)

[Printer] Keep blank lines between statements when a node list is emptied (#8886)

Performance Improvements 🚀

Reduce double traversal on promoted property lookup in AstResolver (#8903)

Reuse File::containsHTML() on AddUseStatementGuard to cut a double traverse (#8899)

Reuse collected use statements when resolving PHPDoc short names (#8901)

Skip current file lookup when a rule makes no change in RectorRunner::run() (#8891)

Optimize class reflection refresh with cheaper cache hashing and early class-name validation (#8892)

Skip wrapBinaryOpWithBrackets() for CallLike nodes in BetterStandardPrinter::p() (#8890)

Internals ⚙️

Convert Doctrine annotations from phpdoc-parser nodes, remove StaticDoctrineAnnotationParser (#8881) Thanks @ondrejmirtes

Use PHPStan Type::toNativePhpTypeNode() and Type::toPhpDocNode() instead of own type mappers (#8885) Thanks @ondrejmirtes

Remove phpdoc-parser workarounds fixed in phpdoc-parser 2.3.10 and 2.3.11 (#8898) Thanks @ondrejmirtes

Bump minimal phpstan and phpdoc-parser to latest patch versions (#8916)

Make use of PHPStan InClassNode on PHPStanNodeScopeResolver (#8902)

[Core] Remove unneeded origNode attribute get on RectorRunner (#8893)

[Printer] Remove BetterStandardPrinter::pExpr_Ternary() method (#8887)

[Printer] Remove @property for $insertionMap on BetterStandardPrinter (#8888)

Commits

55acbd9 Rector 2.8.4
5c86032 Updated Rector to commit 0ddd8e3c8de9c32e9c12396a7f50234bdba559d0
1569d5a Updated Rector to commit 16b46328085ef61f5be0cb939321a1467769109f
992becb Updated Rector to commit 91aa876773825721a9951373292663680a0ff527
43e91f8 Updated Rector to commit 91aa876773825721a9951373292663680a0ff527
445df11 Updated Rector to commit 952de48ad367ae4c515e927d85ec6697449be507
ddab345 Updated Rector to commit 95eaf6fcafac7959453a4cda8c056e8e804852dc
e1828e7 Updated Rector to commit 95eaf6fcafac7959453a4cda8c056e8e804852dc
0a64a1c Updated Rector to commit 2a02e373f0bdc57d071344821b345e408e4337eb
354949d Updated Rector to commit 01a316df023abb601788898c587c5cdb84a17687
Additional commits viewable in compare view

Updates sebastian/version from 6.0.1 to 6.0.2

Release notes

Sourced from sebastian/version's releases.

sebastian/version 6.0.2

Fixed

The version string for a release series (X.Y) ends with the name of a tag instead of the abbreviated hash of HEAD when HEAD is tagged

Changelog

Sourced from sebastian/version's changelog.

[6.0.2] - 2026-MM-DD

Fixed

The version string for a release series (X.Y) ends with the name of a tag instead of the abbreviated hash of HEAD when HEAD is tagged

Commits

a8b6643 Prepare release
61f90bd Use the abbreviated hash of HEAD for the version string of a release series a...
54d899a Update dependency phpstan/phpstan to ^2.3.5
255a4e3 Update dependency phpstan/phpstan-strict-rules to ^2.1.1
6dea3be Update dependency ergebnis/phpstan-rules to ^2.17.0
42ef0cf Update PHPStan packages
771895e Update dependency phpstan/phpstan to ^2.3.3
4ba8a41 Update dependency phpstan/phpstan to ^2.3.2
bffdeaf Update dependency ergebnis/phpstan-rules to ^2.14.2
5090b45 Update dependency phpstan/phpstan to ^2.3.1
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) | `3.95.27` | `3.95.28` | | [vimeo/psalm](https://github.com/vimeo/psalm) | `6.20.5` | `7.0.4` | | [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source) | `2.3.4` | `2.3.5` | | [rector/rector](https://github.com/rectorphp/rector) | `2.8.3` | `2.8.4` | | [sebastian/version](https://github.com/sebastianbergmann/version) | `6.0.1` | `6.0.2` | Updates `friendsofphp/php-cs-fixer` from 3.95.27 to 3.95.28 - [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases) - [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md) - [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.95.27...v3.95.28) Updates `vimeo/psalm` from 6.20.5 to 7.0.4 - [Release notes](https://github.com/vimeo/psalm/releases) - [Commits](vimeo/psalm@6.20.5...7.0.4) Updates `phpstan/phpstan` from 2.3.4 to 2.3.5 - [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits) Updates `rector/rector` from 2.8.3 to 2.8.4 - [Release notes](https://github.com/rectorphp/rector/releases) - [Commits](rectorphp/rector@2.8.3...2.8.4) Updates `sebastian/version` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/sebastianbergmann/version/releases) - [Changelog](https://github.com/sebastianbergmann/version/blob/main/ChangeLog.md) - [Commits](sebastianbergmann/version@6.0.1...6.0.2) --- updated-dependencies: - dependency-name: friendsofphp/php-cs-fixer dependency-version: 3.95.28 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: vimeo/psalm dependency-version: 7.0.4 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: phpstan/phpstan dependency-version: 2.3.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: rector/rector dependency-version: 2.8.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: sebastian/version dependency-version: 6.0.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-11-09T09:08:45Z

Thanks for contributing to EngineScript Site Exporter!

Before we review:

Have you tested your changes with WordPress 7.0+?
Are your changes compatible with PHP 8.3+?
Have you followed WordPress coding standards?
Did you update the CHANGELOG.md if needed?

Security Reminder
This plugin creates site export archives, so please ensure:

All user input is properly sanitized
All output is properly escaped
No security vulnerabilities are introduced

We'll review your PR soon.

codacy-production · 2026-11-09T09:09:40Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

dependabot Bot added automated dependencies maintenance php labels Nov 9, 2026

Navigation Menu

Repository navigation

Bump the dev-dependencies group with 5 updates - #153

Bump the dev-dependencies group with 5 updates#153
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/dev-dependencies-cdaaf3f376

dependabot Bot commented on behalf of github Nov 9, 2026

Uh oh!

github-actions Bot commented Nov 9, 2026

Uh oh!

codacy-production Bot commented Nov 9, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 9, 2026

v3.95.28 Adalbertus

What's Changed

New Contributors

Changelog for v3.95.28

7.0.4

What's Changed

Fixes

Internal changes

7.0.3

What's Changed

Fixes

Docs

Internal changes

Released Rector 2.8.4

PHP 8.6 set additions and faster runs 🚀

New Features ⭐

Bugfixes 🐛

Performance Improvements 🚀

Internals ⚙️

sebastian/version 6.0.2

Fixed

[6.0.2] - 2026-MM-DD

Fixed

Uh oh!

github-actions Bot commented Nov 9, 2026

Uh oh!

codacy-production Bot commented Nov 9, 2026

Up to standards ✅

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants