Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• composer.json (composer)
• .github/workflows/codecov.yml (github-actions)
• .github/workflows/continuous-integration.yml (github-actions)
• .github/workflows/qodana_code_quality.yml (github-actions)
• .github/workflows/static-analysis.yml (github-actions)
• .github/workflows/validate-database-schema.yml (github-actions)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title

---

What to Expect

With your current configuration, Renovate will create 7 Pull Requests:

Update actions/cache action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-cache-5.x
• Merge into: 7.0
• Upgrade actions/cache to v5

Update actions/checkout action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: 7.0
• Upgrade actions/checkout to v6

Update codecov/codecov-action action to v6

• Schedule: ["at any time"]
• Branch name: renovate/codecov-codecov-action-6.x
• Merge into: 7.0
• Upgrade codecov/codecov-action to v6

Update dependency phpunit/phpunit to v13

• Schedule: ["at any time"]
• Branch name: renovate/phpunit-phpunit-13.x
• Merge into: 7.0
• Upgrade phpunit/phpunit to ^13.0.0

Update dependency zircote/swagger-php to v6

• Schedule: ["at any time"]
• Branch name: renovate/zircote-swagger-php-6.x
• Merge into: 7.0
• Upgrade zircote/swagger-php to ^6.0.0

Update JetBrains/qodana-action action to v2026

• Schedule: ["at any time"]
• Branch name: renovate/jetbrains-qodana-action-2026.x
• Merge into: 7.0
• Upgrade JetBrains/qodana-action to v2026.1.0

Update symfony packages to v8

• Schedule: ["at any time"]
• Branch name: renovate/major-symfony
• Merge into: 7.0
• Upgrade symfony/filesystem to ^8.0.0
• Upgrade symfony/var-dumper to ^8.0.0
• Upgrade symfony/var-exporter to ^6.4 || ^7.4 || ^8.0

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Qodana for PHP

It seems all right 👌

No new problems were found according to the checks applied

💡 Qodana analysis was run in the pull request mode: only the changed files were checked
☁️ View the detailed Qodana report

Detected 108 dependencies

Third-party software list

This page lists the third-party software dependencies used in project

Dependency	Version	Licenses
brick/math	0.14.8	MIT
brick/varexporter	0.6.0	MIT
defuse/php-encryption	v2.4.0	MIT
doctrine/collections	2.6.0	MIT
doctrine/common	3.5.0	MIT
doctrine/data-fixtures	2.2.1	MIT
doctrine/dbal	4.4.3	MIT
doctrine/deprecations	1.1.6	MIT
doctrine/event-manager	2.1.1	MIT
doctrine/inflector	2.1.0	MIT
doctrine/instantiator	2.1.0	MIT
doctrine/lexer	3.0.1	MIT
doctrine/migrations	3.9.7	MIT
doctrine/orm	3.6.6	MIT
doctrine/persistence	4.2.0	MIT
dotkernel/dot-cache	4.4.0	MIT
dotkernel/dot-cli	3.10.0	MIT
dotkernel/dot-data-fixtures	1.5.0	MIT
dotkernel/dot-dependency-injection	1.3.0	MIT
dotkernel/dot-errorhandler	4.0.2	MIT
dotkernel/dot-event	4.4.0	MIT
dotkernel/dot-log	4.0.5	MIT
dotkernel/dot-mail	5.4.3	MIT
dotkernel/dot-response-header	3.6.0	MIT
dotkernel/dot-router	1.1.0	MIT
egulias/email-validator	4.0.4	MIT
fig/http-message-util	1.1.5	MIT
laminas/laminas-authentication	2.19.0	BSD-3-Clause
laminas/laminas-cli	1.15.0	BSD-3-Clause
laminas/laminas-component-installer	3.8.0	BSD-3-Clause
laminas/laminas-config-aggregator	1.19.0	BSD-3-Clause
laminas/laminas-diactoros	3.8.0	BSD-3-Clause
laminas/laminas-escaper	2.18.0	BSD-3-Clause
laminas/laminas-eventmanager	3.15.0	BSD-3-Clause
laminas/laminas-filter	2.42.0	BSD-3-Clause
laminas/laminas-httphandlerrunner	2.13.0	BSD-3-Clause
laminas/laminas-hydrator	4.19.0	BSD-3-Clause
laminas/laminas-inputfilter	2.35.0	BSD-3-Clause
laminas/laminas-permissions-acl	2.18.0	BSD-3-Clause
laminas/laminas-permissions-rbac	3.8.0	BSD-3-Clause
laminas/laminas-servicemanager	3.24.0	BSD-3-Clause
laminas/laminas-stdlib	3.21.0	BSD-3-Clause
laminas/laminas-stratigility	4.3.1	BSD-3-Clause
laminas/laminas-validator	2.65.0	BSD-3-Clause
lcobucci/clock	3.6.0	MIT
lcobucci/jwt	5.6.0	BSD-3-Clause
league/event	3.0.3	MIT
league/oauth2-server	9.3.0	MIT
league/uri-interfaces	7.8.1	MIT
league/uri	7.8.1	MIT
mezzio/mezzio-authentication-oauth2	3.0.1	BSD-3-Clause
mezzio/mezzio-authentication	1.13.0	BSD-3-Clause
mezzio/mezzio-authorization-acl	1.13.0	BSD-3-Clause
mezzio/mezzio-authorization-rbac	1.10.0	BSD-3-Clause
mezzio/mezzio-authorization	1.11.0	BSD-3-Clause
mezzio/mezzio-cors	1.16.0	BSD-3-Clause
mezzio/mezzio-fastroute	3.14.0	BSD-3-Clause
mezzio/mezzio-hal	2.13.0	BSD-3-Clause
mezzio/mezzio-helpers	5.20.0	BSD-3-Clause
mezzio/mezzio-problem-details	1.19.0	BSD-3-Clause
mezzio/mezzio-router	3.20.0	BSD-3-Clause
mezzio/mezzio-template	3.0.0	BSD-3-Clause
mezzio/mezzio	3.28.0	BSD-3-Clause
nikic/fast-route	v1.3.0	BSD-3-Clause
nikic/php-parser	v5.7.0	BSD-3-Clause
paragonie/random_compat	v9.99.100	MIT
phpstan/phpdoc-parser	2.3.2	MIT
psr/cache	3.0.0	MIT
psr/clock	1.0.0	MIT
psr/container	1.1.2	MIT
psr/event-dispatcher	1.0.0	MIT
psr/http-client	1.0.3	MIT
psr/http-factory	1.1.0	MIT
psr/http-message	2.0	MIT
psr/http-server-handler	1.0.2	MIT
psr/http-server-middleware	1.0.2	MIT
psr/link	1.1.1	MIT
psr/log	3.0.2	MIT
ramsey/collection	2.1.1	MIT
ramsey/uuid-doctrine	2.1.0	MIT
ramsey/uuid	4.9.2	MIT
roave/psr-container-doctrine	6.2.0	BSD-2-Clause
spatie/array-to-xml	3.4.4	MIT
symfony/cache-contracts	v3.7.0	MIT
symfony/cache	v7.4.12	MIT
symfony/console	v7.4.11	MIT
symfony/deprecation-contracts	v3.7.0	MIT
symfony/event-dispatcher-contracts	v3.7.0	MIT
symfony/event-dispatcher	v8.0.9	MIT
symfony/filesystem	v7.4.11	MIT
symfony/finder	v8.0.8	MIT
symfony/mailer	v7.4.12	MIT
symfony/mime	v8.0.12	MIT
symfony/polyfill-ctype	v1.37.0	MIT
symfony/polyfill-intl-grapheme	v1.37.0	MIT
symfony/polyfill-intl-idn	v1.37.0	MIT
symfony/polyfill-intl-normalizer	v1.37.0	MIT
symfony/polyfill-mbstring	v1.37.0	MIT
symfony/polyfill-php84	v1.37.0	MIT
symfony/service-contracts	v3.7.0	MIT
symfony/stopwatch	v8.0.8	MIT
symfony/string	v8.0.11	MIT
symfony/var-exporter	v7.4.9	MIT
symfony/yaml	v8.0.12	MIT
webimpress/safe-writer	2.2.0	BSD-2-Clause
webmozart/assert	1.12.1	MIT
willdurand/negotiation	3.1.0	MIT
zircote/swagger-php	5.8.3	Apache-2.0

Contact Qodana team

Contact us at qodana-support@jetbrains.com

• Or via our issue tracker: https://jb.gg/qodana-issue
• Or share your feedback: https://jb.gg/qodana-discussions