Skip to content

composer: bump nowo-tech/phpstan-frankenphp from 1.1.3 to 1.2.1 - #49

Merged
HecFranco merged 1 commit into
mainfrom
dependabot/composer/nowo-tech/phpstan-frankenphp-1.2.1
Oct 1, 2026
Merged

HecFranco merged 1 commit into
mainfrom
dependabot/composer/nowo-tech/phpstan-frankenphp-1.2.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps nowo-tech/phpstan-frankenphp from 1.1.3 to 1.2.1.

Release notes

Sourced from nowo-tech/phpstan-frankenphp's releases.

Release v1.2.1

v1.2.1

Changelog

Added

  • REQ-CS-008: igor-php/igor-php (require-dev only), root igor.json, Composer/Makefile igor target, and release-check wiring for FrankenPHP worker-state audit.

Commits

  • Release v1.2.1: REQ-CS-008 Igor FrankenPHP worker audit. (c17850a)

Release v1.2.0 - Worker kernel-reuse (no FRANKENPHP_RESET_KERNEL) compatibility

Changelog

Added

  • ruleset-worker-no-kernel-reset.neon and parameter frankenphp.flagMissingResetInterface for FrankenPHP worker with FRANKENPHP_RESET_KERNEL unset/false (kernel reused).
  • Worker rule: NoMissingResetInterfaceRule (frankenphp.worker.noMissingResetInterface) — flags $this->… mutations without ResetInterface (heuristic name skips).
  • Hardening rule: NoPosixProcessControlRule (frankenphp.hardening.noPosixProcessControl).
  • Docs: https://github.com/nowo-tech/PhpStanFrankenPhp/blob/HEAD/FRANKENPHP-WORKER-AUDIT.md, migration notes for kernel reuse, ROADMAP/UPGRADING refresh.

Changed

  • NoMbEncodingMutationRule: also flags mb_detect_order / mb_substitute_character; allows explicit null argument reads.
  • NoPersistentIniSetRule: sticky keys include mbstring.*, intl.default_locale, default_charset.

Notes

Commits

  • Release v1.2.0: worker kernel-reuse rules for FRANKENPHP_RESET_KERNEL unset/false. (7ebc8b4)
  • fix(docker): create tests/Fixtures stub before composer install. (76b2c60)
  • chore(deps): align Composer platform.php with PHP 8.2 and refresh lockfiles. (c70b2fc)
Changelog

Sourced from nowo-tech/phpstan-frankenphp's changelog.

1.2.1 - 2026-09-27

Added

  • REQ-CS-008: igor-php/igor-php (require-dev only), root igor.json, Composer/Makefile igor target, and release-check wiring for FrankenPHP worker-state audit.

[1.2.0] - 2026-09-24

Added

  • ruleset-worker-no-kernel-reset.neon and parameter frankenphp.flagMissingResetInterface for FrankenPHP worker with FRANKENPHP_RESET_KERNEL unset/false (kernel reused).
  • Worker rule: NoMissingResetInterfaceRule (frankenphp.worker.noMissingResetInterface) — flags $this->… mutations without ResetInterface (heuristic name skips).
  • Hardening rule: NoPosixProcessControlRule (frankenphp.hardening.noPosixProcessControl).
  • Docs: https://github.com/nowo-tech/PhpStanFrankenPhp/blob/main/docs/FRANKENPHP-WORKER-AUDIT.md, migration notes for kernel reuse, ROADMAP/UPGRADING refresh.

Changed

  • NoMbEncodingMutationRule: also flags mb_detect_order / mb_substitute_character; allows explicit null argument reads.
  • NoPersistentIniSetRule: sticky keys include mbstring.*, intl.default_locale, default_charset.

Notes

Commits
  • c17850a Release v1.2.1: REQ-CS-008 Igor FrankenPHP worker audit.
  • 7ebc8b4 Release v1.2.0: worker kernel-reuse rules for FRANKENPHP_RESET_KERNEL unset/f...
  • 76b2c60 fix(docker): create tests/Fixtures stub before composer install.
  • c70b2fc chore(deps): align Composer platform.php with PHP 8.2 and refresh lockfiles.
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [nowo-tech/phpstan-frankenphp](https://github.com/nowo-tech/PhpStanFrankenPhp) from 1.1.3 to 1.2.1.
- [Release notes](https://github.com/nowo-tech/PhpStanFrankenPhp/releases)
- [Changelog](https://github.com/nowo-tech/PhpStanFrankenPhp/blob/main/docs/CHANGELOG.md)
- [Commits](nowo-tech/PhpStanFrankenPhp@v1.1.3...v1.2.1)

---
updated-dependencies:
- dependency-name: nowo-tech/phpstan-frankenphp
  dependency-version: 1.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Oct 1, 2026
@dependabot
dependabot Bot requested a review from HecFranco as a code owner October 1, 2026 15:38
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Oct 1, 2026
@coderabbitai

coderabbitai Bot commented Oct 1, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: nowo-tech/HtmlToWordBundle/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: f1085a2a-8c2a-4ff8-9df8-531293b7585b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Oct 1, 2026

Copy link
Copy Markdown

@coderabbitai review

@HecFranco
HecFranco merged commit a331a8f into main Oct 1, 2026
15 of 16 checks passed
@dependabot
dependabot Bot deleted the dependabot/composer/nowo-tech/phpstan-frankenphp-1.2.1 branch October 1, 2026 20:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant