Skip to content

Bump the "maintenance" group with 1 updates across multiple ecosystems#284

Merged
Sleon4 merged 1 commit into19.xfrom
dependabot/maintenance-c6bda4c341
Feb 8, 2026
Merged

Bump the "maintenance" group with 1 updates across multiple ecosystems#284
Sleon4 merged 1 commit into19.xfrom
dependabot/maintenance-c6bda4c341

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Feb 8, 2026

Bumps the maintenance group with 4 updates: lion/command, lion/database, brianium/paratest and phpunit/phpunit.

Updates lion/command from 6.1.0 to 6.2.0

Release notes

Sourced from lion/command's releases.

v6.2.0

What's Changed

Full Changelog: lion-packages/command@v6.1.0...v6.2.0

Commits
  • a9a58b0 Merge pull request #61 from lion-packages/dependabot/maintenance-b25a17b79d
  • ab99378 Merge pull request #62 from lion-packages/support
  • a7c9c53 Merge branch 'dependabot/maintenance-b25a17b79d' into support
  • 5e80544 build: The facilities have been updated
  • ebe182a build(deps-dev): bump the maintenance group with 4 updates
  • 84d594e Merge pull request #60 from lion-packages/Sleon4-patch-1
  • 4dea480 Update dependabot.yml
  • c86d515 Merge pull request #58 from lion-packages/dependabot/maintenance-bc98f7dc86
  • 1a299a1 build(deps-dev): bump the maintenance group with 4 updates
  • See full diff in compare view

Updates lion/database from 12.0.0 to 12.1.0

Release notes

Sourced from lion/database's releases.

v12.1.0

What's Changed

Full Changelog: lion-packages/database@v12.0.0...v12.1.0

Commits
  • 49e5c66 Merge pull request #127 from lion-packages/Sleon4-patch-1
  • 7ca51a1 Update dependabot.yml
  • d4ca82e Merge pull request #125 from lion-packages/dependabot/maintenance-557c548c87
  • 976ecdc Merge pull request #126 from lion-packages/support
  • 398b1a7 build: The facilities have been updated
  • 47e0bbe build(deps-dev): bump the maintenance group with 3 updates
  • See full diff in compare view

Updates brianium/paratest from 7.16.1 to 7.19.0

Release notes

Sourced from brianium/paratest's releases.

v7.19.0

What's Changed

Full Changelog: paratestphp/paratest@v7.18.0...v7.19.0

v7.18.0

What's Changed

Full Changelog: paratestphp/paratest@v7.17.0...v7.18.0

v7.17.0

What's Changed

New Contributors

Full Changelog: paratestphp/paratest@v7.16.1...v7.17.0

Commits
  • 7c6c29a Add support for --display-all-issues (#1074)
  • 0c560ff Add support for PHPUnit 13 (#1071)
  • e46449b Update dependency phpunit/php-code-coverage to ^12.5.3
  • 6ff0864 Update dependency phpunit/phpunit to ^12.5.9
  • 53cb90a Add --max-processes option (#1066)
  • fef5d50 Update dependency phpstan/phpstan to ^2.1.38
  • 7c6e3f7 Update all non-major dependencies
  • 4f6725e Update dependency phpunit/phpunit to ^12.5.7
  • eed0683 Update dependency phpstan/phpstan to ^2.1.37
  • d0ffe0b Update dependency phpstan/phpstan-phpunit to ^2.0.12
  • Additional commits viewable in compare view

Updates phpunit/phpunit from 12.5.8 to 12.5.10

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 12.5.10

Fixed

  • #6495: Source map for issue trigger identification is regenerated in process isolation child processes

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 12.5.9

Added

  • #6488: Allow disabling issue trigger identification for improved performance

Fixed

  • #6486: Incorrect file name reported for errors for test methods declared in traits
  • #6490: Incorrect test count when tests are skipped in before-class method

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

Changelog

Sourced from phpunit/phpunit's changelog.

[12.5.10] - 2026-02-08

Fixed

  • #6495: Source map for issue trigger identification is regenerated in process isolation child processes

[12.5.9] - 2026-02-05

Added

  • #6488: Allow disabling issue trigger identification for improved performance

Fixed

  • #6486: Incorrect file name reported for errors for test methods declared in traits
  • #6490: Incorrect test count when tests are skipped in before-class method
Commits
  • 1686e30 Prepare release
  • f87ca23 Merge branch '11.5' into 12.5
  • b287d32 Prepare release
  • d810b97 Merge branch '11.5' into 12.5
  • 03cfcf5 Update ChangeLog
  • 121effe Extract method
  • 463951a Ignore code from code coverage that is run when no code coverage data is coll...
  • aa76a69 Ignore code from code coverage for handling of edge cases
  • 20702bf Share source map with child processes for process isolation
  • 5aab5fb Update dependencies
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maintenance group with 4 updates: [lion/command](https://github.com/lion-packages/command), [lion/database](https://github.com/lion-packages/database), [brianium/paratest](https://github.com/paratestphp/paratest) and [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit).


Updates `lion/command` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/lion-packages/command/releases)
- [Commits](lion-packages/command@v6.1.0...v6.2.0)

Updates `lion/database` from 12.0.0 to 12.1.0
- [Release notes](https://github.com/lion-packages/database/releases)
- [Commits](lion-packages/database@v12.0.0...v12.1.0)

Updates `brianium/paratest` from 7.16.1 to 7.19.0
- [Release notes](https://github.com/paratestphp/paratest/releases)
- [Commits](paratestphp/paratest@v7.16.1...v7.19.0)

Updates `phpunit/phpunit` from 12.5.8 to 12.5.10
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/12.5.10/ChangeLog-12.5.md)
- [Commits](sebastianbergmann/phpunit@12.5.8...12.5.10)

---
updated-dependencies:
- dependency-name: lion/command
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maintenance
- dependency-name: lion/database
  dependency-version: 12.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maintenance
- dependency-name: brianium/paratest
  dependency-version: 7.19.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maintenance
- dependency-name: phpunit/phpunit
  dependency-version: 12.5.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maintenance
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Project dependencies are updated php Pull requests that update php code labels Feb 8, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Feb 8, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.
See the Details below.

License Issues

composer.lock

PackageVersionLicenseIssue Type
lion/command6.2.0NullUnknown License
lion/database12.1.0NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
composer/brianium/paratest 7.19.0 🟢 4.7
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Pinned-Dependencies⚠️ -1no dependencies found
Code-Review⚠️ 2Found 6/27 approved changesets -- score normalized to 2
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ -1No tokens found
Dangerous-Workflow⚠️ -1no workflows found
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 1branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
composer/lion/command 6.2.0 UnknownUnknown
composer/lion/database 12.1.0 UnknownUnknown
composer/phpunit/php-code-coverage 12.5.3 🟢 5.2
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ -1No tokens found
SAST⚠️ 0no SAST tool detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ -1no workflows found
Code-Review⚠️ 0Found 0/30 approved changesets -- score normalized to 0
Pinned-Dependencies⚠️ -1no dependencies found
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
composer/phpunit/php-file-iterator 6.0.1 🟢 6
Details
CheckScoreReason
SAST⚠️ 0no SAST tool detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ -1No tokens found
Maintained🟢 1014 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow⚠️ -1no workflows found
Pinned-Dependencies⚠️ -1no dependencies found
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review⚠️ 0Found 0/30 approved changesets -- score normalized to 0
Security-Policy🟢 10security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
composer/phpunit/phpunit 12.5.10 🟢 5.2
Details
CheckScoreReason
Code-Review⚠️ 0Found 2/28 approved changesets -- score normalized to 0
Security-Policy🟢 10security policy file detected
Dangerous-Workflow⚠️ -1no workflows found
Token-Permissions⚠️ -1No tokens found
Maintained🟢 1030 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ -1no dependencies found
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Branch-Protection⚠️ 0branch protection not enabled on development/release branches

Scanned Files

  • composer.lock

@Sleon4 Sleon4 self-requested a review February 8, 2026 21:11
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Feb 8, 2026

@Sleon4 Sleon4 added this to the Support and maintenance milestone Feb 8, 2026
@Sleon4 Sleon4 merged commit b7f7363 into 19.x Feb 8, 2026
8 checks passed
@Sleon4 Sleon4 deleted the dependabot/maintenance-c6bda4c341 branch February 8, 2026 21:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Project dependencies are updated php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant