Skip to content

Update all dependencies - #105

Merged
renovate[bot] merged 2 commits into
mainfrom
deps/all
Aug 18, 2026
Merged

Update all dependencies#105
renovate[bot] merged 2 commits into
mainfrom
deps/all

Conversation

@renovate

@renovate renovate Bot commented Aug 18, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
behat/behat (source) ^3.17^3.32.0 age confidence
behat/mink-browserkit-driver (source) ^2.2^2.3.0 age confidence
dantleech/gherkin-lint ^0.2.3^0.2.4 age confidence
drupal/coder (source) ^8.3^8.3.31 age confidence
dvdoug/behat-code-coverage (source) ^5.3^5.5.0 age confidence
escapestudios/symfony2-coding-standard ^3.15^3.18.0 age confidence
guzzlehttp/guzzle (source) ^7.9^7.15.3 age confidence
squizlabs/php_codesniffer ^3.11.2^3.13.6 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

Behat/Behat (behat/behat)

v3.32.0

Compare Source

Added
Fixed
Internal

v3.31.0

Compare Source

Fixed

v3.30.0

Compare Source

Changed
  • Explicitly mark up interfaces, classes & methods that we consider to be the public API.
    This will not affect our backwards compatibility guarantees for the 3.x series, but from 4.0 onwards we will only
    guarantee BC for code that is explicitly marked as being part of the API.
    By @​acoulton in #​1807
  • Move gherkin configuration to dedicated GherkinOptions config object. The previous API for setting filters by
    calling ->withFilters() on Profile is deprecated and will be removed in 4.0.
    By @​acoulton in #​1798
  • Make Extension::process() explicit in the Extension interface & document Extension dependencies.
    Clarifies that extensions should declare their own dependencies on any symfony packages they interact with directly.
    By @​acoulton in #​1795 and #​1804
  • Drop PHP 8.1 support by @​carlos-granados in #​1782
Added
  • Support configuring GherkinCompatibilityMode to control how Gherkin files are parsed. The default mode behaves
    identically to legacy parser behaviour. The opt-in experimental gherkin-32 mode parses equivalent to the official
    cucumber/gherkin parsers. We expect to make gherkin-32 the default in the 4.0 release.
    See the documentation for more details.
    By @​acoulton in #​1799
  • Add deprecation collector to capture and print Behat deprecations.
    Users can opt-in to display and/or fail on deprecations using the methods on the TesterOptions config object.
    Extension developers can log their own runtime deprecations by calling DeprecationCollector::trigger().
    By @​carlos-granados in #​1794
Internal

v3.29.0

Compare Source

Changed
  • Add initial backwards-compatible return types to final classes, final methods and private methods. These changes
    should not impact end-users or extension authors.
    This is work towards the upcoming 4.0.0 release, which will add support
    for symfony8 and introduce strict types throughout.
    By @​acoulton in #​1763

v3.28.0

Compare Source

Changed
Added
  • Add printSkippedSteps option to pretty formatter (true by default) by @​carlos-granados in #​1705
  • Accept multiple path arguments on CLI
    This PR was originally contributed to a 4.x branch which was then abandoned. The feature was later implemented in 3.x
    by a different contributor, but we wanted to also credit the previous work done. The only actual change in this
    release is an internal (backwards compatible) change to the use of WrongPathsException.
    By @​adrienbrault in #​1397 and merged back to 3.x by @​acoulton in #​1693
Fixed
Internal

v3.27.0

Compare Source

Changed
Added
Internal
  • Prepare the pretty printer for future changes in the Gherkin parser by @​stof in #​1690
  • Add tests proving that multiple Examples tables are supported by @​acoulton in #​1696

v3.26.0

Compare Source

Changed
  • Support configuring how file paths are rendered by the JUnit formatter (relative or absolute, removing a prefix, etc).
    Previously, the JUnit formatter would print an absolute path unless the file was beneath the current working
    directory.
    The new default is to print paths relative to the Behat base directory - in most cases this will also be the current
    working directory and therefore the result will be the same. However, in some cases the reported file paths will change
    so you may wish to review the configuration e.g. if your tooling aggregates build results over time.
    By @​carlos-granados in #​1677
Added
Fixed
Internal

v3.25.0

Compare Source

Added
Fixed
Internal

v3.24.1

Compare Source

Fixed

v3.24.0

Compare Source

Changed
  • Throw if a step provides an unexpected PyString or Table argument, to highlight cases where step definitions do not
    match their usage causing potential false-positive passes. If users have stubbed steps with incomplete arguments (e.g.
    to throw a PendingException) these will now fail before executing. Steps generated from Behat's snippets or IDEs
    should not be affected as these should already define appropriate PyStringNode / TableNode arguments.
    By @​jdeniau in #​1614
Added
Fixed
Internal

v3.23.0

Compare Source

Added
Fixed
  • Relaxed constraints on nikic/php-parser and composer/xdebug-handler dependencies to allow wider use of newer Behat
    releases by @​acoulton in #​1650 and #​1649
Internal

v3.22.0

Compare Source

Changed
  • Suggested method names for new step definitions will no longer be transliterated to ASCII.
    Users working in languages whose characters are mostly outside the allowed UTF-8 range
    will see generic stepDefinitionX names. We have provided an extension point for custom
    suggestion implementations, and would consider providing an official extension. If this
    affects you, please open a discussion on the Behat repository.
    By @​acoulton in #​1633
  • The behat/transliterator package is no longer required and will shortly be archived.
Internal

v3.21.1

Compare Source

Fixed
  • ExceptionPresenter was causing a TypeError when constructed with a null $basePath by @​acoulton in #​1631

v3.21.0

Compare Source

Fixed
  • JUnit formatter options were being lost when converting config to PHP by @​acoulton in #​1622
  • Contexts with constructor arguments were not properly converted to PHP configuration by @​acoulton in #​1619
Added
  • New CLI and configuration option to print all paths as absolute paths by @​carlos-granados in #​1620
  • Expose PHP configuration interface for tester and error_reporting options by @​acoulton in #​1626
  • Improve config conversion to PHP to generate class references instead of string names; reference extensions by their
    fully qualified class names; convert output_verbosity values to constants; and convert tester and error_reporting
    configuration to PHP by @​acoulton in #​1619, #​1623
    and #​1626
Internal

v3.20.0

Compare Source

Changed
  • Remove dependency on file location in Gherkin package. The (internal) service container parameters gherkin.paths.lib
    and gherkin.paths.i18n are no longer defined or used. Minimum behat/gherkin version is now ^4.12.0.
    By @​carlos-granados in #​1604.
Added
Internal

v3.19.0

Compare Source

Changed
  • Remove internal wrappers for PSR Container interfaces - may affect projects using container-interop/container-interop
    < 1.2.0 (released in 2017, package now deprecated and unsupported by behat since 2021).
    By @​acoulton in #​1584
  • Remove legacy Symfony event dispatchers - these were internal wrappers to support symfony <5 and >=5, both now
    redundant. By @​carlos-granados in #​1585
Added
Fixed
Internal

v3.18.1

Compare Source

Fixed

v3.18.0

Compare Source

Changed
  • Add new methods to the Behat\Hook\Hook and Behat\Step\Definition interfaces used internally by step definition
    attributes by @​carlos-granados in #​1573
Added
Fixed
Internal
minkphp/MinkBrowserKitDriver (behat/mink-browserkit-driver)

v2.3.0

Compare Source

==================

New features:

  • Add support for Symfony 7
  • Fix deprecations triggered on PHP 8.5
  • Improve the error handling for setValue for checkboxes

Bug fixes:

  • Normalize the handling of non-breaking spaces in getText to match other drivers

Testsuite:

  • Add CI jobs running on PHP 8.4 and 8.5
dantleech/gherkin-lint-php (dantleech/gherkin-lint)

v0.2.4

Compare Source

  • Support for Symfony 8
pfrenssen/coder (drupal/coder)

v8.3.31

Compare Source

v8.3.30

Compare Source

v8.3.29

Compare Source

v8.3.28

Compare Source

v8.3.27

Compare Source

v8.3.26

Compare Source

v8.3.25

Compare Source

v8.3.24

Compare Source

v8.3.23

Compare Source

v8.3.22

Compare Source

v8.3.21

Compare Source

v8.3.20

Compare Source

v8.3.19

Compare Source

v8.3.18

Compare Source

v8.3.17

Compare Source

v8.3.16

Compare Source

v8.3.15

Compare Source

v8.3.14

Compare Source

v8.3.13

Compare Source

v8.3.12

Compare Source

v8.3.11

Compare Source

v8.3.10

Compare Source

v8.3.9

Compare Source

v8.3.8

Compare Source

v8.3.7

Compare Source

v8.3.6

Compare Source

v8.3.5

Compare Source

v8.3.4

Compare Source

v8.3.3

Compare Source

v8.3.2

Compare Source

v8.3.1

Compare Source

dvdoug/behat-code-coverage (dvdoug/behat-code-coverage)

v5.5.0

Compare Source

Added
  • Compatibility with behat v4
  • Compatibility with symfony v8

v5.4.1

Compare Source

Added
  • Compatibility with phpunit/php-code-coverage v13

v5.4.0

Compare Source

Added
  • Added openclover report option

v5.3.7

Compare Source

Added
  • Compatibility with phpunit/php-code-coverage v12

v5.3.6

Compare Source

Fixed
  • Don't show any warning messages about missing coverage driver when --no-coverage CLI option is used

v5.3.5

Compare Source

Changed
  • Use stderr instead of stdout for warnings

v5.3.4

Compare Source

Fixed
  • Better handling of relative paths

v5.3.3

Compare Source

Added
  • Compatibility with phpunit/php-code-coverage v11
Changed
  • Minimum phpunit/php-code-coverage version bumped to 10.1

v5.3.2

Compare Source

Fixed
  • Better handling of PCOV and Xdebug running side by side

v5.3.1

Compare Source

Changed
  • Stopped using some deprecated methods inside phpunit/php-code-coverage v10.1
Fixed
  • Better handling of PCOV and Xdebug running side by side
djoos/Symfony-coding-standard (escapestudios/symfony2-coding-standard)

v3.18.0

Compare Source

v3.17.0

Compare Source

v3.16.0

Compare Source

guzzle/guzzle (guzzlehttp/guzzle)

v7.15.3

Compare Source

Changed
  • Adjusted guzzlehttp/promises version constraint to ^2.5.2
Fixed
  • Fail a cURL multi handler wait with an attributable error when the transfer is no longer tracked
  • Fix StreamHandler resolving numeric IPv4 hosts differently from cURL handlers on macOS and Windows
  • Fix StreamHandler TLS peer names and proxy authorities for numeric IPv4 hosts on all platforms
  • Settle a cURL multi handler transfer displaced by a request reusing its native handle ID

v7.15.2

Compare Source

Security
Fixed
  • Preserve RequestException when the stream handler rejects a request before opening a stream

v7.15.1

Compare Source

Security

v7.15.0

Compare Source

Added
  • Added Multiplexing::NONE support as a client, cURL multi handler, and conditional request option
Changed
  • Adjusted guzzlehttp/psr7 version constraint to ^2.13
  • Use locale-independent ASCII folding for all case normalization and comparison
  • Bound cURL upload reads to the declared Content-Length
  • Sanitize the cURL error text exposed through exception handler context
  • Fail closed when a named cURL multi connection cap cannot be applied
  • Reject the request-level CURLOPT_SHARE cURL option when named connection caps are configured
  • Strengthen old-libcurl SOCKS isolation for raw CURLOPT_PRE_PROXY and opaque share handles
  • Isolate HTTP proxy tunnels from opaque shared connection caches
  • Trigger runtime deprecations for previously deprecated functionality in 7.1.0
Deprecated
  • Deprecated Utils::jsonDecode() and Utils::jsonEncode() in favor of native JSON functions
  • Deprecated passing CURLMOPT_PIPELINING in the cURL multi handler options array
  • Deprecated passing CURLOPT_PROXYHEADER without cURL proxy header separation support
Fixed
  • Defer cURL requests created from multi callbacks until native execution unwinds
  • Fail synchronous waits from native cURL callbacks promptly instead of self-deadlocking
  • Guard cURL multi handle removal against progress callbacks re-entering the handler
  • Scope promise waits on the cURL multi handler to the awaited transfer
  • Strip Content-Length and Transfer-Encoding when redirects discard the request body
  • Stop re-applying the delay request option to followed redirects

v7.14.2

Compare Source

Security

v7.14.1

Compare Source

Changed
  • Adjusted guzzlehttp/psr7 version constraint to ^2.12.5
Fixed
  • Fail closed when a proxy tunnel isolation cURL option cannot be applied
  • Normalize Stringable proxy credential values before computing connection-reuse section signatures
  • Restore conservative credential redaction for unparseable proxies with multiple @ separators
  • Redact request URI credentials from the stream handler connection error message
  • Reject enabled response streaming (stream => true) on cap-configured stream handlers
  • Distinguish CurlMultiHandler and StreamHandler outcomes in connection-cap custom-handler guidance
  • Reject raw cURL options that conflict with explicit multiplexing guarantees
  • Stop explicit multiplexing conflict checks faulting on non-array cURL multi options values
  • Reject required multiplexing when the final CURLOPT_HTTPAUTH mask permits NTLM
  • Require an integer CURLMOPT_PIPELINING when combined with explicit multiplexing
  • Check the required multiplexing cleartext proxy rule against the final cURL configuration
  • Bound cURL multi handler blocking selects by the earliest pending request delay
  • Stop synchronous cURL multi handler waits blocking on other transfers once the target has settled
  • Stop cURL multi completion processing double-settling promises canceled from completion callbacks
  • Run ready promise queue tasks before sleeping for delayed cURL multi requests
  • Avoid integer overflow in cURL multi delay timing on 32-bit platforms
  • Roll back failed cURL multi handle attachment instead of leaving requests pending
  • Release the cURL easy handle when the on_stats callback throws
  • Normalize response trailer field names to lowercase with values in wire order
  • Retain response trailers only when an on_trailers callback is configured
  • Validate the on_trailers callback before starting a cURL transfer
  • Reject the on_trailers request option on the stream handler, which cannot observe trailers
  • Match cookies, proxy schemes, auth types, and header names with locale-independent ASCII folding
  • Reject proxy option values that Guzzle cannot classify identically to ext-curl

v7.14.0

Compare Source

Added
  • Added the on_trailers request option to expose parsed HTTP response trailers
  • Added the multiplex request option with Multiplexing::* modes to control or require HTTP/2 multiplexing
  • Added rejection of explicit multiplex requests when CURLMOPT_PIPELINING disables multiplexing
  • Added the max_host_connections and max_total_connections client and cURL multi handler options
Changed
  • Redirects that discard the request body no longer require it to be rewindable
  • Synchronous cURL multi handler requests no longer wait for other queued transfers
  • Section SOCKS proxy connections by credentials on libcurl before 7.69.0
  • Reject request-level CURLOPT_SHARE when combined with authenticated SOCKS proxy configuration
  • Redact proxy userinfo containing raw control bytes in cURL errors
  • Check linked curl/libcurl NTLM support before applying NTLM auth
  • Clarify that NTLM is deprecated by both Guzzle and curl/libcurl
  • Remove deprecation for the raw cURL CURLOPT_CERTINFO option
  • Warn when a cURL multi option cannot be applied
Deprecated
  • Deprecate the raw CURLOPT_PIPEWAIT cURL option in favour of the multiplex request option
  • Deprecate unknown handler constructor options
  • Deprecate invalid select_timeout cURL multi handler option values
  • Deprecate raw cURL multi connection cap options in favour of the named options

v7.13.3

Compare Source

Changed
  • Adjusted guzzlehttp/promises version constraint to ^2.5.1
  • Adjusted guzzlehttp/psr7 version constraint to ^2.12.4
  • Pass explicit trim characters ahead of the PHP 8.6 trim default change
Fixed
  • Stop matching cookie domains against hosts with a trailing newline
  • Reject HTTP status codes and certificate type extensions with a trailing newline
  • Treat PCRE engine failures as invalid cookie names during cookie validation
  • Report PCRE engine failures when formatting log messages
  • Report PCRE engine failures when splitting no_proxy values

v7.13.2

Compare Source

Fixed
  • Stop the cURL multi handler busy-waiting on request delays shorter than one second
  • Stop cURL HEAD requests with request bodies hanging on responses that declare a content length
  • The cURL handler no longer transmits request bodies on HEAD requests
  • Preserve response headers when a response includes HTTP trailers
  • Harden cURL response header block detection when HTTP trailers are received
  • Corrected the PSR-7 class names in the Pool iterator exception
  • Redirect body rewind failures no longer leak a bare RuntimeException

v7.13.1

Compare Source

Fixed
  • Allow middleware to rewrite partial URIs before transports validate them

v7.13.0

Compare Source

Added
  • Added the crypto_method_max request option to cap the maximum TLS protocol version
  • Added HTTP QUERY redirect support, preserving method and body on 301 and 302
Changed
  • Section proxy tunnel conn

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot enabled auto-merge (squash) August 18, 2026 02:19
@renovate
renovate Bot force-pushed the deps/all branch 7 times, most recently from 56bdac6 to 4e86839 Compare August 18, 2026 08:12
…ny2 standard.

Version 5.4.0 of 'dvdoug/behat-code-coverage' raised its floor to PHP 8.3 and 'phpunit/php-code-coverage' ^12.3, neither of which this package's 'php: >=8.2' and 'phpunit/phpunit: ^11.5' allow, so the constraint is now '~5.3.7'.

'escapestudios/symfony2-coding-standard' 3.18.0 requires 'squizlabs/php_codesniffer' ^4, which conflicts with the ^3 that 'drupal/coder' 8.3 needs. No ruleset in 'phpcs.xml' references the Symfony2 standard, so the requirement is removed rather than pinned.

'constraintsFiltering' keeps Renovate from proposing releases whose own platform requirements fall outside the declared PHP range.
@renovate

renovate Bot commented Aug 18, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@github-actions

Copy link
Copy Markdown
Code Coverage Report:
  2026-08-18 08:42:37

 Summary:
  Classes: 20.00% (1/5)
  Methods: 67.57% (25/37)
  Lines:   82.31% (363/441)

DrevOps\BehatPhpServer\ApiServerContext
  Methods:  75.00% ( 9/12)   Lines:  95.90% (117/122)
DrevOps\BehatPhpServer\ApiServer\ApiServer
  Methods:  20.00% ( 1/ 5)   Lines:   7.94% (  5/ 63)
DrevOps\BehatPhpServer\ApiServer\Request
  Methods: 100.00% ( 1/ 1)   Lines: 100.00% (  1/  1)
DrevOps\BehatPhpServer\ApiServer\Response
  Methods:  66.67% ( 2/ 3)   Lines:  95.12% ( 39/ 41)
DrevOps\BehatPhpServer\PhpServerContext
  Methods:  75.00% (12/16)   Lines:  96.17% (201/209)

@codecov

codecov Bot commented Aug 18, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.02%. Comparing base (0362d42) to head (3a4244f).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #105   +/-   ##
=======================================
  Coverage   85.02%   85.02%           
=======================================
  Files           3        3           
  Lines         434      434           
=======================================
  Hits          369      369           
  Misses         65       65           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

@renovate
renovate Bot merged commit 1a8200f into main Aug 18, 2026
18 checks passed
@renovate
renovate Bot deleted the deps/all branch August 18, 2026 08:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant