chore(deps): update composer dev tooling dependencies to v2 (major) #884

renovate · 2026-01-13T15:29:04Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
phpstan/phpstan	`^1.11.9` → `^2.1.36`
phpstan/phpstan-deprecation-rules	`^1.2.0` → `^2.0.3`
phpstan/phpstan-phpunit	`^1.4.0` → `^2.0.12`
phpstan/phpstan-strict-rules	`^1.6.0` → `^2.0.7`
rector/rector (source)	`^1.2.2` → `^2.3.4`

Release Notes

phpstan/phpstan-phar-composer-source (phpstan/phpstan)

phpstan/phpstan-deprecation-rules (phpstan/phpstan-deprecation-rules)

`v2.0.3`

Compare Source

468e02c - Remove UsageOfDeprecatedCastRule in favour of it already being implemented in PHPStan via RestrictedMethodUsageExtension
ea25caa - Fix UsageOfDeprecatedCastRule - it reported all casts, not just (string)

`v2.0.2`

Compare Source

9d8e7d4 - Implement RestrictedClassConstantUsageExtension
9e96248 - Implement RestrictedPropertyUsageExtension
3562b56 - Implement RestrictedFunctionUsageExtension
ce7a039 - Simplification
223f1ab - Replace TypeHintDeprecated*Rule with RestrictedDeprecatedClassNameUsageExtension
13d3746 - Simplification
09f067c - Fixes
e5d941d - Restore original CallToDeprecatedStaticMethodRuleTest
0deffb7 - Implement RestrictedClassNameUsageExtension
15f1d89 - RestrictedMethodUsageExtension is called for static methods too
0494a38 - Take advantage of RestrictedMethodUsageExtension
96f9357 - Update metcalfc/changelog-generator action to v4.6.2
775b713 - Readme: mention custom deprecation attribute
adf5e23 - Update metcalfc/changelog-generator action to v4.5.0
d3fb1e8 - Update LICENSE

`v2.0.1`

Compare Source

1cc1259 - Bleeding edge - CallWithDeprecatedIniOptionRule

`v2.0.0`

Compare Source

81833b5 - Removed always true PHP_VERSION_ID condition
f4a969d - Merge branch '1.2.x' into 2.0.x
0ccccb1 - selectSingle() is being deprecated
392bbe7 - Updates for PHPStan 2.0 changes
89572d5 - Merge branch '1.2.x' into 2.0.x
398e2e2 - Merge remote-tracking branch 'origin/1.2.x' into 2.0.x
4590cf6 - Update build-cs
681b2db - Stop testing PHP 7.2 and 7.3
0e1d78a - Open 2.0.x

phpstan/phpstan-phpunit (phpstan/phpstan-phpunit)

`v2.0.12`

Compare Source

e4c5a22 - TestMethodsHelper - class methods cache
80091f9 - TestMethodsHelper - speed-up by asking for immediate methods only

`v2.0.11`

Compare Source

5e30669 - Perf: Refactor PHPUnitVersionDetector to use runtime reflection
202afe9 - chore(deps): update github-actions

`v2.0.10`

Compare Source

8d61a58 - Remove checkDataProviderData and introduce reportMissingDataProviderReturnType

`v2.0.9`

Compare Source

cda423c - Implement AttributeRequiresPhpVersionRule
83b717d - ci: Add tests for PHP 8.5
75ba948 - chore(deps): update actions/checkout action to v6

`v2.0.8`

Compare Source

2fe9fbe - Fix AssertSameWithCountRule for recursive count()
d935297 - Fix "Unexpected input(s) 'extensions', valid inputs are ['php-version', 'php-extensions', 'build-infection-path']"
8532ceb - Make AssertSameNullExpectedRule auto-fixable
a4abfc1 - Use TypeSystem in AssertSameBooleanExpectedRule
36cb9a6 - Make AssertSameBooleanExpectedRule auto-fixable
450bfc0 - Added assertArrayHasKey() expectations
033f690 - PHPUnit 9.x/10.x does not at all support named arguments from data-providers
758d343 - Refactor PHPUnitVersionDetector to ease different major version checks
dd87f2e - Assert*Rules: Do cheap checks first (#247)
5c89d74 - Ignore missingType.iterableValue for data-providers
1fbc321 - move analyse-paths into phpstan.neon
11f3ada - Fix mutation testing on dev branch (#244)
53e33fc - Setup mutation testing
12676a7 - One more test
c81e395 - Fix memory consumption in DataProviderDataRule
61860a6 - Implement DataProviderDataRule
39950c7 - Preparational refactoring for DataProviderDataRule
c54a269 - Narrow too wide return type
9ec3fa9 - Modernize code examples in README.md
b1df1f5 - chore(deps): update actions/checkout action to v5
1d7eb7e - chore(deps): update eomm/why-don-t-you-tweet action to v2

`v2.0.7`

Compare Source

9a9b161 - Make AssertEqualsIsDiscouragedRule auto-fixable
2e07610 - Check isFirstClassCallable before accessing getArgs
22c6949 - Make phpunit.dataProviderStatic auto-fixable
d35895e - chore(deps): update metcalfc/changelog-generator action to v4.6.2

`v2.0.6`

Compare Source

6b92469 - Fix build
0aef32f - Improve logic MockMethodCallRule to search for method even on wrong type

`v2.0.5`

Compare Source

4d2b44b - InvocationMocker class no longer exists
1f36fc5 - Use DataProvider attribute
bf031ae - Test PHPUnit v12
40fbbc1 - chore(deps): update metcalfc/changelog-generator action to v4.5.0
1a07095 - Add non regression test for #222
eb88670 - Always install nikic/php-parser v5
19f8059 - Do not generate code coverage
630aa99 - Remove deprecated assert
342b6c1 - Data providers must be static
846d161 - Test multiple PHPUnit versions
855b82c - Remove config.platform
0f857bf - Introduce phpstan-deprecation-rules
17bbfd3 - Update LICENSE

`v2.0.4`

Compare Source

d09e152 - Fix error message for "assertNotEquals" usage referencing "assertSame" and "assertEquals"

`v2.0.3`

Compare Source

e32ac65 - Support assertNotEquals in AssertEqualsIsDiscouragedRule

`v2.0.2`

Compare Source

2cedfb7 - Merge remote-tracking branch 'origin/1.4.x' into 2.0.x
10880da - Implement AssertEqualsIsDiscouragedRule (#216)
4b6ad7f - Fix
bec49ea - Merge branch '1.4.x' into 2.0.x
3cc8554 - Fixes after PHPStan update
09e2d3b - Uncover everything behind the bleedingEdge flag
4d861e0 - Fix after TypeSpecifier BC break
3faa605 - Update build-cs
953195d - Stop testing PHP 7.2 and 7.3
7f1457f - Open 2.0.x

`v2.0.1`

Compare Source

4b6ad7f - Fix
bec49ea - Merge branch '1.4.x' into 2.0.x
3cc8554 - Fixes after PHPStan update
09e2d3b - Uncover everything behind the bleedingEdge flag
4d861e0 - Fix after TypeSpecifier BC break
3faa605 - Update build-cs
953195d - Stop testing PHP 7.2 and 7.3
7f1457f - Open 2.0.x

`v2.0.0`

Compare Source

3cc8554 - Fixes after PHPStan update
09e2d3b - Uncover everything behind the bleedingEdge flag
4d861e0 - Fix after TypeSpecifier BC break
3faa605 - Update build-cs
953195d - Stop testing PHP 7.2 and 7.3
7f1457f - Open 2.0.x
146d9c3 - Test newer PHP versions
bb6bec0 - Pin build-cs

phpstan/phpstan-strict-rules (phpstan/phpstan-strict-rules)

`v2.0.7`

Compare Source

d6211c4 - enable checkStrictPrintfPlaceholderTypes
6b78d53 - Update README.md
0435aeb - Consolidate overwriteVariablesWithLoop rule details
e861638 - Simplify tests in which checkNullables is always true
11b6403 - Simplify tests in which treatPhpDocTypesAsCertain is always true
b043bd8 - Simplify RequireParentConstructCallRule
9f76a17 - Update actions/checkout action to v5
2b69ec5 - Update Eomm/why-don-t-you-tweet action to v2

`v2.0.6`

Compare Source

f9f77ef - Add numeric check on unary plus and unary minus

`v2.0.5`

Compare Source

1f1358d - UselessCastRule: do cheaper check first
73c5baa - Update metcalfc/changelog-generator action to v4.6.2
f203fec - Match Rule Descriptions with Configuration Parameters in README.md
3ecc310 - Use relative links for rules.neon
04f299f - Update metcalfc/changelog-generator action to v4.5.0

`v2.0.4`

Compare Source

3e139cb - Check for boolean in while conditions
b20f78c - Fix build
51abacd - Fix build
342fa26 - Update LICENSE
a0e1926 - Update LICENSE

`v2.0.3`

Compare Source

8b88b5f - Deprecated parent constructor must not be called

`v2.0.2`

Compare Source

02277ce - Merge remote-tracking branch 'origin/1.6.x' into 2.0.x
ed6fea0 - Added strictRulesInstalled parameter
a4a6a08 - Remove dead test because of raised min-php version
b60bffc - Fix
5d50bde - Fix
0368403 - Fix
1721dbf - Fix after PHPStan update
e208c93 - Fix after PHPStan update
63956f7 - Moved illegalConstructorMethodCall rules from phpstan to phpstan-strict-rules
ad53bd9 - Remove options removed in PHPStan 2.0
914b5e3 - Everything from Bleeding Edge enabled
988fab9 - Add more separate rule toggles
e227ffd - Merge remote-tracking branch 'origin/1.6.x' into 2.0.x
90006f2 - Merge branch '1.6.x' into 2.0.x
1062d48 - Fix
5eec39f - Set polluteScopeWithBlock to false
8e2c8b0 - Fix deprecations
1ccec91 - Remove unnecessary dependency on nikic/php-parser
f8092f9 - Update build-cs
f647999 - Stop testing PHP 7.2 and 7.3
f6fb84e - Open 2.0.x

`v2.0.1`

Compare Source

ed6fea0 - Added strictRulesInstalled parameter

`v2.0.0`

Compare Source

a4a6a08 - Remove dead test because of raised min-php version
b60bffc - Fix
5d50bde - Fix
0368403 - Fix
1721dbf - Fix after PHPStan update
e208c93 - Fix after PHPStan update
63956f7 - Moved illegalConstructorMethodCall rules from phpstan to phpstan-strict-rules
ad53bd9 - Remove options removed in PHPStan 2.0
914b5e3 - Everything from Bleeding Edge enabled
988fab9 - Add more separate rule toggles
e227ffd - Merge remote-tracking branch 'origin/1.6.x' into 2.0.x
90006f2 - Merge branch '1.6.x' into 2.0.x
1062d48 - Fix
5eec39f - Set polluteScopeWithBlock to false
8e2c8b0 - Fix deprecations
1ccec91 - Remove unnecessary dependency on nikic/php-parser
f8092f9 - Update build-cs
f647999 - Stop testing PHP 7.2 and 7.3
f6fb84e - Open 2.0.x

rectorphp/rector (rector/rector)

`v2.3.4`: Released Rector 2.3.4

Compare Source

Bugfixes 🐛

Bump to PHPStan ^2.1.36 (#7850)
[Php81] Exclude Doctrine ODM MongoDB 2.16 Document and EmbeddedDocument from ReadOnlyPropertyRector. (#7848), Thanks @mickverm!

`v2.3.3`: Released Rector 2.3.3

Compare Source

Bugfixes 🐛

rectorphp/rector-src@61f8719 Pin PHPStan 2.1.34, as 2.1.35 introduced a complex regression breaking Rector - see rectorphp/rector-src#7847

`v2.3.2`: Released Rector 2.3.2

Compare Source

New Features 🥳

[dx] Rename DeprecatedAnnotationToDeprecatedAttributeRector for PHP 8.5 to explicit ConstAndTraitDeprecatedAttributeRector, add trait suport (#7823)

Bugfixes 🐛

Bump to PHPStan 2.1.34 and fix compatible code (rectorphp/rector-src#7844)
[perf] optimize ParamTypeByMethodCallTypeRector for speed with early checks (#7831)
make resolveClassReflection non-nullable as always passed a node (#7833)
[Php74] Skip closure in attribute on ClosureToArrowFunctionRector (#7834)
Manage named arguments when removing values (#7835), Thanks @carlos-granados!
bump to PHP 8.3 + update deps + allow it in CI (#7838)
Support array_values in ArrayFirstLastRector (#7830), Thanks @Orest-Divintari!
[Php85] Skip as assigned var/op on ArrayFirstLastRector (#7843)
Remove no longer needed tweak AlwaysRememberedExpr on Printer per PHPStan 2.1.34 (#7770)

rectorphp/rector-phpunit 🟢

fix a class name that should be string (#607)
Support array_values in ArrayFirstLastRector (#7830), Thanks @Orest-Divintari!
[Php85] Skip as assigned var/op on ArrayFirstLastRector (#7843)

`v2.3.1`: Released Rector 2.3.1

Compare Source

New Features and Changes 🥳

[tdd] Add AddReturnDocblockForDimFetchArrayFromAssignsRector (#7792)
[tdd] Add AddReturnDocblockFromMethodCallDocblockRector (#7796)
[tdd] Add AddVarArrayDocblockFromDimFetchAssignRector (#7801)
[DeadCode] Add RemoveDeadIfBlocksRector (#7528), Thanks @john-shaffer!
[dead-code] Add RemoveVoidDocblockFromMagicMethodRector (#7822) - Thanks @parijke!
[experiment] Remove leaveNode() method on AbstractRector and CallableNodeVisitor (#7767)

Bugfixes 🐛

Skip Doctrine Connection calls in AddReturnDocblockFromMethodCallDocblockRector (#7797)
add static all support to AddReturnDocblockFromMethodCallDocblockRector (#7798)
add object support to DocblockReturnArrayFromDirectArrayInstanceRector (#7795)
[TypeDeclarationDocblocks] Use FQCN return docblock for array of object types on AddReturnDocblockFromMethodCallDocblockRector (#7800), Thanks @guanguans!
[php 8.3] cover private abstract constants in AddTypeToConstRector (#7804)
Add check for append in foreach items assignment (#7815), Thanks @solverat!
Static closure rule ignores arguments with $this binding (#7721), Thanks @peterfox!
fix: skip non-native methods (#7747), Thanks @calebdw!
[Php74] Fix indentation space on ClosureToArrowFunctionRector with comment inner closure (#7779)
[DeadCode] Handle crash when parent does not has default param and child has (#7782)
fix mixed[] override with empty array in DocblockReturnArrayFromDirectArrayInstanceRector (#7793)
[ChangesReporting] Fix total changed result on JsonOutputFormatter (#7807)
Manage named arguments when replacing a value (#7784), Thanks @carlos-granados!
[DeadCode] Register RemoveNextSameValueConditionRector in dead-code set (#7790)
[DeadCode] Skip final and non-public __construct() on RemoveParentDelegatingConstructorRector (#7806)
[DeadCode][Php80] Handle crash on mix ClassPropertyAssignToConstructorPromotionRector+RemoveParentDelegatingConstructorRector (#7799)
[DeadCode] Skip with elseif/else on RemoveNextSameValueConditionRector (#7809)
[DeadCode] Merge comment on RemoveNextSameValueConditionRector (#7810)
skip marker attribute in RemoveEmptyClassMethodRector (#7813)
[DeadCode] Skip private promoted property on RemoveParentDelegatingConstructorRector (#7817)
Remove rector from rule definition title (#7820), Thanks @simonschaufi!
[experiment-next] Remove leaveNode() calls on AbstractImmutableNodeTraverser (#7778)
[DeadCode] Handle multi vars on RemoveNonExistingVarAnnotationRector (#7780)
[Php71] Try to handle no variants on RemoveExtraParametersRector (#7803)

`v2.3.0`: Released Rector 2.3

Compare Source

New Features 🥳

Introduce FileNode to handle file-level changes (#7728) to be used instead of FileWithoutNamespace node - see https://github.com/rectorphp/rector-src/blob/main/UPGRADING.md for the upgrade
Add PrivatizeFinalClassConstantRector (#7753), Thanks @simonschaufi!
[dead-code] Add RemoveParentDelegatingConstructorRector (#7769)

Bugfixes 🐛

Manage named arguments in ArgumentAdderRector rule (#7777), Thanks @carlos-granados!
[compat] Add SymplifyQuoteEscapeRector deprecated rule for BC layer (#7744)
[Php81] Skip on Param default on ArrayToFirstClassCallableRector (#7749)
[CodeQuality] Handle ternary in identical left/right on UseIdenticalOverEqualWithSameTypeRector (#7748)
fix: chained calls on static calls (#7746), Thanks @calebdw!
[code-quality] Extract standalone SortAttributeNamedArgsRector from SortNamedParamRector, to slightly different areas (#7750)
[rename] Rename SortNamedParamRector to SortCallLikeNamedArgsRector to be more clear about the intent (#7751)
[Php85] Skip under unset() on ArrayFirstLastRector (#7752)
[Php81] ArrayToFirstClassCallableRector should not skip non-public methods from owning scope (#7760), Thanks @acoulton!
[fix] wrap ternary in parenthese on string casting, if only cond is casted (#7745)
[internal] Fix inline replace block removal not removed on deep block for InlineIfToExplicitIfRector + ReplaceBlockToItsStmtsRector (#7764)
[TypeDeclaration] Skip class not found on ObjectTypedPropertyFromJMSSerializerAttributeTypeRector (#7774)
[Php85] Skip defined int or string on ArrayKeyExistsNullToEmptyStringRector (#7758)

Removed 💀

[DeadCode] Skip trait on RemoveAlwaysTrueIfConditionRector (#7759)
[internal] Remove duplicated enterNode() type check already handled in node traverser (#7717)
[dx] warn about deprecated beforeTraverse() method once FileNode is ready (#7768)
[DeadCode] Skip next assign expr has side effect inside try {} on RemoveDoubleAssignRector (#7775)
[DeadCode] Skip with different default param value child vs parent on RemoveParentDelegatingConstructorRector (#7776)

rectorphp/rector-symfony 🎵

bump (#911)
[code-quality] Add ReturnDirectJsonResponseRector (#910)
Fix scoped downgrade SymfonyClass (#909)
cover is safe (#908)
[twig] add explicit attribute name arg, to improve context (#907)
[Symfony73] Fix named arg different position crash on InvokableCommandInputAttributeRector (#905)
[CodeQuality] Skip UserInterface instance on ControllerMethodInjectionToConstructorRector (#904)
create ClassMethod directly in InvokableCommandInputAttributeRector, to keep newline per attribute (#903)
Remove InvokableCommandInputAttributeRector from set (#901)
[Validator] use constants for Email (#900), Thanks @JohJohan

rectorphp/rector-doctrine 🟠

Make use of FileNode (#474)

rectorphp/rector-phpunit 🟢

[AnnotationsToAttributes] Handle both annotation and attributes exists on DataProviderAnnotationToAttributeRector (#603)
[fix] skip AddInstanceofAssertForNullableArgumentRector on assert call (#602)
[code-quality] Add AddInstanceofAssertForNullableArgumentRector (#601)
use FileNode in DeclareStrictTypesTestsRector (#599)

`v2.2.14`: Released Rector 2.2.14

Compare Source

Bugfixes 🐛

[fix] warn early about deprecated skipped rules, as not neccessary to skip anymore + restore FirstClassCallableRector and mark as deprecated to keep BC (#7742)

`v2.2.13`: Released Rector 2.2.13

Compare Source

Bugfixes 🐛

[fix] restore missing pInterpolatedStringPart(), cover with test (#7741)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot requested review from a team as code owners January 13, 2026 15:29

renovate bot added the renovate label Jan 13, 2026

renovate bot enabled auto-merge January 13, 2026 15:29

renovate bot force-pushed the renovate/major-composer-dev-tooling branch 5 times, most recently from bda13c6 to f34050d Compare January 27, 2026 07:44

renovate bot force-pushed the renovate/major-composer-dev-tooling branch 2 times, most recently from f515013 to 4097d46 Compare January 28, 2026 06:01

renovate bot changed the title ~~chore(deps): update composer dev tooling dependencies (major)~~ chore(deps): update composer dev tooling dependencies to v2 (major) Jan 28, 2026

renovate bot force-pushed the renovate/major-composer-dev-tooling branch from 4097d46 to 1f299eb Compare January 28, 2026 15:55

chore(deps): update composer dev tooling dependencies to v2

c08537a

renovate bot force-pushed the renovate/major-composer-dev-tooling branch from 1f299eb to c08537a Compare January 29, 2026 16:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update composer dev tooling dependencies to v2 (major) #884

chore(deps): update composer dev tooling dependencies to v2 (major) #884

Uh oh!

renovate bot commented Jan 13, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

chore(deps): update composer dev tooling dependencies to v2 (major) #884

Are you sure you want to change the base?

chore(deps): update composer dev tooling dependencies to v2 (major) #884

Uh oh!

Conversation

renovate bot commented Jan 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v2.3.4: Released Rector 2.3.4

Bugfixes 🐛

v2.3.3: Released Rector 2.3.3

Bugfixes 🐛

v2.3.2: Released Rector 2.3.2

New Features 🥳

Bugfixes 🐛

rectorphp/rector-phpunit 🟢

v2.3.1: Released Rector 2.3.1

New Features and Changes 🥳

Bugfixes 🐛

v2.3.0: Released Rector 2.3

New Features 🥳

Bugfixes 🐛

Removed 💀

rectorphp/rector-symfony 🎵

rectorphp/rector-doctrine 🟠

rectorphp/rector-phpunit 🟢

v2.2.14: Released Rector 2.2.14

Bugfixes 🐛

v2.2.13: Released Rector 2.2.13

Bugfixes 🐛

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Jan 13, 2026 •

edited

Loading

`v2.3.4`: Released Rector 2.3.4

`v2.3.3`: Released Rector 2.3.3

`v2.3.2`: Released Rector 2.3.2

`v2.3.1`: Released Rector 2.3.1

`v2.3.0`: Released Rector 2.3

`v2.2.14`: Released Rector 2.2.14

`v2.2.13`: Released Rector 2.2.13