Update all non-major dependencies

[benjaminjonard]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/core (source)	7.28.6 → 7.29.0
@babel/preset-env (source)	7.28.6 → 7.29.0
api-platform/core (source)	4.2.13 → 4.2.16
brianium/paratest	7.16.1 → 7.19.0
core-js (source)	3.47.0 → 3.48.0
dama/doctrine-test-bundle	8.5.0 → 8.6.0
doctrine/orm (source)	3.6.1 → 3.6.2
friendsofphp/php-cs-fixer	3.92.5 → 3.94.0
intl-messageformat	11.1.1 → 11.1.2
justinrainbow/json-schema	6.6.4 → 6.7.2
phpunit/php-code-coverage	12.5.2 → 12.5.3
phpunit/phpunit (source)	12.5.8 → 12.5.12
rector/rector (source)	2.3.2 → 2.3.6
sortablejs	1.15.6 → 1.15.7
symfony/asset (source)	8.0.0 → 8.0.4
symfony/browser-kit (source)	8.0.3 → 8.0.4
symfony/cache (source)	8.0.3 → 8.0.5
symfony/console (source)	8.0.3 → 8.0.4
symfony/dependency-injection (source)	8.0.3 → 8.0.5
symfony/error-handler (source)	8.0.0 → 8.0.4
symfony/event-dispatcher (source)	8.0.0 → 8.0.4
symfony/expression-language (source)	8.0.0 → 8.0.4
symfony/finder (source)	8.0.3 → 8.0.5
symfony/form (source)	8.0.3 → 8.0.4
symfony/framework-bundle (source)	8.0.3 → 8.0.5
symfony/http-client (source)	8.0.3 → 8.0.5
symfony/http-foundation (source)	8.0.3 → 8.0.5
symfony/http-kernel (source)	8.0.3 → 8.0.5
symfony/intl (source)	8.0.1 → 8.0.4
symfony/maker-bundle (source)	1.65.1 → 1.66.0
symfony/mime (source)	8.0.0 → 8.0.5
symfony/property-access (source)	8.0.3 → 8.0.4
symfony/property-info (source)	8.0.3 → 8.0.5
symfony/routing (source)	8.0.3 → 8.0.4
symfony/security-bundle (source)	8.0.0 → 8.0.4
symfony/security-core (source)	8.0.3 → 8.0.4
symfony/security-http (source)	8.0.3 → 8.0.4
symfony/serializer (source)	8.0.3 → 8.0.5
symfony/string (source)	8.0.1 → 8.0.4
symfony/translation (source)	8.0.3 → 8.0.4
symfony/twig-bridge (source)	8.0.3 → 8.0.5
symfony/twig-bundle (source)	8.0.3 → 8.0.4
symfony/uid (source)	8.0.0 → 8.0.4
symfony/validator (source)	8.0.3 → 8.0.5
symfony/var-dumper (source)	8.0.3 → 8.0.4
symfony/web-link (source)	8.0.0 → 8.0.4
symfony/web-profiler-bundle (source)	8.0.3 → 8.0.4
twig/extra-bundle (source)	3.22.2 → 3.23.0
twig/intl-extra (source)	3.22.1 → 3.23.0
twig/string-extra (source)	3.22.1 → 3.23.0
twig/twig (source)	3.22.2 → 3.23.0
webpack	5.104.1 → 5.105.2
zenstruck/foundry	2.8.5 → 2.9.1

---

Release Notes

babel/babel (@​babel/core)

v7.29.0

Compare Source

v7.29.0 (2026-01-31)

Thanks @​simbahax for your first PR!

🚀 New Feature

• babel-types
  • #​17750 [7.x backport] Add attributes import declaration builder (@​JLHwung)
• babel-standalone
  • #​17663 [7.x backport] feat(standalone): export async transform (@​JLHwung)
  • #​17725 [7.x backport] feat: read standalone targets from data-targets (@​JLHwung)

🐛 Bug Fix

• babel-parser
  • #​17765 fix(parser): correctly parse type assertions in extends clause (@​nicolo-ribaudo)
  • #​17723 [7.x backport] fix(parser): improve super type argument parsing (@​JLHwung)
• babel-traverse
  • #​17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@​simbahax)
• babel-plugin-transform-block-scoping, babel-traverse
  • #​17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@​magic-akari)

🏃‍♀️ Performance

• babel-generator, babel-runtime-corejs3
  • #​17642 [Babel 7] Improve generator performance (@​liuxingbaoyu)

Committers: 6

• David (@​simbahax)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu
• @​magic-akari

api-platform/core (api-platform/core)

v4.2.16

Compare Source

Bug fixes

• 07100d501 fix(hydra): use standard xsd prefix and remove duplicate context namespaces (#​7740)
• 3d8e4fb05 fix(laravel): support numeric float types in eloquent metadata factory (#​7730)
• 4f307d3ce fix(doctrine): skip uninitialized properties in handleLazyObjectRelations (#​7738)
• 6f85f2aa3 fix(metadata): use entity class from stateOptions for filter property resolution (#​7739)
• 70b17ce56 fix(doctrine): allow both uppercase and lowercase order direction in OrderFilter schema (#​7741) (#​7742)
• d70eec574 fix(serializer): prevent context leakage with service-based entity resolution (#​7756)

v4.2.15

Compare Source

Bug fixes

• 2de06db1d fix(jsonapi): output null on a to-one relationship (#​7686)
• 5577f07bf fix(openapi): change payload type from array to free-form object (#​7694)
• 5d860bdec fix(hydra): memory persistent cache during schema generation (#​7718)
• 696d31597 fix(metadata): issues with extending xml/yaml resources (#​5956)
• 773289658 fix(laravel): properly transform invokable service to route action (#​7720)
• 881812926 fix(symfony): declare api_platform.normalizer.object fixes #​7705 (#​7717)
• cc2f88558 fix(doctrine): post with mapped relation
• f3c2b1a56 fix(symfony): prevent symfony name converter service pollution (#​7691)

v4.2.14

Compare Source

Bug fixes

• 0dc7ec348 fix(doctrine): useless generateParameterName call (#​7679)
• 1c6fae536 fix(symfony): fix for symfony/json_streamer 8.0 with enable_json_streamer (#​7684)
• 83a3cacfb fix(laravel): use controller if declared (#​7687)
• 9f46eef05 fix(jsonschema): call to an undefined method Symfony\Component\TypeInfo\Type::getClassName() (#​7685)
• f5ba97460 fix(doctrine): PartialSearchFilter on multibyte characters (#​7688)
• 1706c3c58 fix(doctrine): throw exception if parameter property is not provided

paratestphp/paratest (brianium/paratest)

v7.19.0

Compare Source

What's Changed

• Add support for --display-all-issues by @​Slamdunk in #​1074

Full Changelog: paratestphp/paratest@v7.18.0...v7.19.0

v7.18.0

Compare Source

What's Changed

• Add support for PHPUnit 13 by @​Slamdunk in #​1071

Full Changelog: paratestphp/paratest@v7.17.0...v7.18.0

v7.17.0

Compare Source

What's Changed

• Add renovate.json to export-ignore list by @​sasezaki in #​1063
• Add --max-processes option by @​HypeMC in #​1066

New Contributors

• @​sasezaki made their first contribution in #​1063

Full Changelog: paratestphp/paratest@v7.16.1...v7.17.0

zloirock/core-js (core-js)

v3.48.0

Compare Source

• Changes v3.47.0...v3.48.0 (126 commits)
• Map upsert proposal:
  • Built-ins:
    • Map.prototype.getOrInsert
    • Map.prototype.getOrInsertComputed
    • WeakMap.prototype.getOrInsert
    • WeakMap.prototype.getOrInsertComputed
  • Moved to stable ES, January 2026 TC39 meeting
  • Added es. namespace modules, /es/ and /stable/ namespaces entries
• Use CreateDataProperty / CreateDataPropertyOrThrow in some missed cases, #​1497
• Minor fix / optimization in the RegExp constructor (NCG and dotAll) polyfill
• Added some more workarounds for a Safari < 13 bug with silent ignore of non-writable array .length
• Added detection of a Webkit bug: Iterator.prototype.flatMap throws on iterator without return method
• Added detection of a V8 ~ Chromium < 144 bug: Uint8Array.prototype.setFromHex throws an error on length-tracking views over ResizableArrayBuffer
• Compat data improvements:
  • Map upsert proposal features marked as shipped in V8 ~ Chrome 145
  • Joint iteration proposal features marked as shipped in FF148
  • Iterator.concat marked as shipped in Bun 1.3.7
  • Added Rhino 1.9.0 compat data
  • Added Deno 2.6 compat data mapping
  • Added Opera Android 93 and 94 compat data mapping
  • Added Electron 41 compat data mapping
  • Iterator.prototype.flatMap marked as supported from Safari 26.2 and Bun 1.2.21 because of a bug: throws on iterator without return method
  • Uint8Array.prototype.setFromHex marked as supported from V8 ~ Chromium 144 because of a bug: throws an error on length-tracking views over ResizableArrayBuffer

dmaicher/doctrine-test-bundle (dama/doctrine-test-bundle)

v8.6.0

Compare Source

What's Changed

• add support for SkipDatabaseRollback attribute on parent test classes by @​dmaicher in #​342

Full Changelog: dmaicher/doctrine-test-bundle@v8.5.0...v8.6.0

doctrine/orm (doctrine/orm)

v3.6.2

Compare Source

Release Notes for 3.6.2

3.6.x bugfix release (patch)

3.6.2

• Total issues resolved: 0
• Total pull requests resolved: 2
• Total contributors: 2

Bugfix

• 12366: fix: update index to be serialized in __sleep() thanks to @​vvaswani

Improvement

• 12343: Update phpstan-dbal2 to phpstan-dbal3 in .gitattributes thanks to @​sasezaki

PHP-CS-Fixer/PHP-CS-Fixer (friendsofphp/php-cs-fixer)

v3.94.0

Compare Source

• UX: enable parallel runner by default (#​9408)
• feat: Add option case to phpdoc_line_span fixer (#​9391)
• feat: PhpdocLineSpanFixer - support docs for classes, trait usages and other code lines (#​8832)
• feat: VoidReturnFixer - allow to skip lambdas (#​9417)
• chore: fix comment (#​9404)
• chore: Linter tests for Schrodinger's validity (#​9398)
• chore: ModernizeStrposFixer - no need for configuration hooks (#​9419)
• chore: VoidReturnFixer - better describe exceptions (#​9418)
• CI: no need for special handling of MacOS (#​9403)
• CI: run tests using PHPUnit 13 (#​9410)
• deps: bump crate-ci/typos from 1.42.1 to 1.42.3 (#​9395)
• deps: bump crate-ci/typos from 1.42.3 to 1.43.2 (#​9405)
• deps: bump ergebnis/composer-normalize from 2.48.2 to 2.49.0 in /dev-tools (#​9396)
• deps: bump the phpstan group in /dev-tools with 2 updates (#​9394)
• deps: upgrade dev-deps (#​9411)
• DX: use custom name for custom config (#​9402)
• fix: absolute path in reports (#​9399)
• fix: indentation for backed enum with multiline assignment (#​9362)
• fix: Runner - fix occasional sub-process freeze on parallel execution with --stop-on-violation (#​9393)
• fix: NoUnreachableDefaultArgumentValueFixer - fix for closures (#​9409)
• fix: UseArrowFunctionsFixer - do not convert closure in attribute (#​9416)
• test: create PHP 8.5 risky compat test (#​9420)
• UX: Do not run interactive configurator when rules are passed explicitly (#​9378)

v3.93.1

Compare Source

• fix: ErrorOutput - do not show "begin diff"/"end diff" when there is no diff (#​9361)
• fix: UseArrowFunctionsFixer - don't convert lambda with use($var) clause if it includes another file (#​9389)
• DX: use null coalescing operator (#​9380)

v3.93.0

Compare Source

• feat: add ModernSerializationMethodsFixer (#​9108)
• feat: Add NoRedundantReadonlyPropertyFixer (#​9339)
• feat: add PhpdocTypesNoDuplicatesFixer (#​9312)
• feat: do not suggest config file creation if config explicitly skipped with --config=- (#​9379)
• feat: improve handling of @see tags in FullyQualifiedStrictTypesFixer (#​9350)
• feat: PER attribute block no spaces (#​9264)
• feat: php_unit_test_case_static_method_calls - change default 'call_type' to 'this' for v4 (#​9328)
• feat: protected_to_private - add to@Symfony set (#​9303)
• feat: PSR/PER-CS - adjust braces_position rule (#​9329)
• feat: remove php_unit_test_case_static_method_calls from PHPUnit sets (#​9341)
• feat: @PHP7x0MigrationRisky - update configuration of RandomApiMigrationFixer to match it's newly updated v4 defaults (#​9368)
• feat: @Symfony:risky - extend set with modern_serialization_methods (#​9366)
• feat: @Symfony:risky - extend set with static_lambda (#​9365)
• feat: @Symfony - enable no_unneeded_control_parentheses.statements.negative_instanceof (#​9336)
• feat: @Symfony - extend set with no_useless_else (#​9363)
• feat: @Symfony - extend set with no_useless_return (#​9364)
• feat: RandomApiMigrationFixer - allow to convert mt_getrandmax and mt_srand (#​9367)
• fix: properly expose memory usage while running parallel mode (#​9352)
• fix: ModifierKeywordsFixer - closure in attribute (#​9358)
• fix: NoUselessElseFixer - handle conditional symbol declarations (#​9347)
• fix: OrderedClassElementsFixer - closure in attribute (#​9357)
• fix: PhpUnitAttributesFixer - do not add for annotation @testWith when attribute TestWith already present (#​9354)
• refactor: add base key-existence check for cross-process communication in parallel runner (#​9360)
• refactor: FixerDocumentGenerator - limit the scope to create rule instance in future mode only (#​9359)
• test: fix compatibility towards Symfony 8 (#​9370)
• test: update PHP 8.5 compat test to cover closure in attribute and prevent conversion to empty arrow function (#​9373)
• chore: add clarifying @return annotations to Config (#​9337)
• chore: fix assign.propertyType error from PHPStan (#​9332)
• chore: PHPUnit sets - cleanup test, update docs/comments (#​9342)
• chore: simplify phpstan:baseline command (#​9346)
• deps: bump crate-ci/typos from 1.41.0 to 1.42.0 (#​9338)
• deps: bump crate-ci/typos from 1.42.0 to 1.42.1 (#​9376)
• deps: bump dev deps (#​9369)
• deps: bump the phpstan group in /dev-tools with 3 updates (#​9375)
• docs: show default value for future mode (#​9355)
• DX: add env for easier finding which fixer break a PHP syntax (#​9356)

formatjs/formatjs (intl-messageformat)

v11.1.2

Compare Source

jsonrainbow/json-schema (justinrainbow/json-schema)

v6.7.2

Compare Source

Fixed

• Fix idn_to_ascii deprecation warning by using INTL_IDNA_VARIANT_UTS46 (#​887)

v6.7.1

Compare Source

Fixed

• Fix TypeError in pattern property validation with integer keys (#​880)

v6.7.0

Compare Source

Fixed

• Enforce RFC 1035 hostname label length limits in draft 3/4 (#​878)
• UriRetriever: Include actual media type in InvalidSchemaMediaTypeException message (#​872)
• docs: Correct trailing spaces in Markdown (#​873)

Added

• Feat: Add Draft-07 support (#​847)
• Automate changelog updates on PR merge (#​874)

Changed

• Add automated release workflow with changelog integration (#​879)
• Fix welcome workflow permission errors from forked PRs (#​875)

sebastianbergmann/php-code-coverage (phpunit/php-code-coverage)

v12.5.3: phpunit/php-code-coverage 12.5.3

Compare Source

Fixed

• #​1135: Internal methods driverIs*() must not assume that CodeCoverage::$driver is set

sebastianbergmann/phpunit (phpunit/phpunit)

v12.5.12: PHPUnit 12.5.12

Compare Source

Fixed

• #​6511: TestDox variables out of order with named arguments
• #​6514: <ini /> can silently fail

---

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

v12.5.11: PHPUnit 12.5.11

Compare Source

Deprecated

• #​6510: Deprecate using with*() on test stubs

Fixed

• #​6503: Temporary file used by SourceMapper may be deleted prematurely when multiple PHPUnit processes run in parallel
• #​6509: "No expectations were configured for the mock object ..." notice is emitted when with() is used without expects()

---

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

v12.5.10: PHPUnit 12.5.10

Compare Source

Fixed

• #​6495: Source map for issue trigger identification is regenerated in process isolation child processes

---

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

v12.5.9: PHPUnit 12.5.9

Compare Source

Added

• #​6488: Allow disabling issue trigger identification for improved performance

Fixed

• #​6486: Incorrect file name reported for errors for test methods declared in traits
• #​6490: Incorrect test count when tests are skipped in before-class method

---

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

rectorphp/rector (rector/rector)

v2.3.6: Released Rector 2.3.6

Compare Source

New Features 🥳

• Allow using a canonical rector.dist.php dist file (#​7845), Thanks @​carlos-granados!

Bugfixes 🐛

• [Php83] Handle parent class consume trait on AddOverrideAttributeToOverriddenMethodsRector (#​7868)
• Fix fixture source warning on AddOverrideAttributeToOverriddenMethodsRector (missing TestCase suffix) (#​7869)
• add JSON_THROW_ON_ERROR even if there is already a flag (#​7867), Thanks @​Lenny4!
• [DeadCode] No need additional parentheses () on multiply to function call (#​7883)
• [Php80] Handle crash on empty name attribute field value on AnnotationToAttributeRector (#​7864)
• Fix JsonValidateRector: remove associative argument not supported by json_validate (#​7865), Thanks @​carlos-granados!
• Fix deep ArrayItem scope filling on Foreach_ value (#​7873)
• Fix StaticCallOnNonStaticToInstanceCallRector for same-class calls (#​7876), Thanks @​carlos-granados!
• Bump PHPStan to 2.1.38 (#​7879)
• [DeadCode] Allow remove @​var on expression assign on RemoveUselessVarTagRector (#​7871)
• [DeadCode] Handle multiply to parenthesized on RemoveDeadZeroAndOneOperationRector (#​7882)

rectorphp/rector-symfony 🎵

• Update set usage in readme (#​919), Thanks @​MrYamous

rectorphp/rector-phpunit 🟢

• [phpunit 12] Add CreateStubInCoalesceArgRector (#​650)
• [code-quality] Add DecorateWillReturnMapWithExpectsMockRector (#​649)
• [code-quality] Add RemoveStandaloneCreateMockRector (#​648)
• add class method (#​647)
• improve check for used mock property (#​646)
• skip if used in array (#​645)
• [code-quality] Add RemoveNeverUsedMockPropertyRector (#​644)
• [phpunit 12] Add AllowMockObjectsForDataProviderRector (#​643)
• add to setUp with only variables (#​642)
• [phpunit 12] Add AllowMockObjectsWhereParentClassRector (#​641)
• improve AllowMockObjectsWithoutExpectationsAttributeRector (#​639)
• add fixture (#​638)
• handle in call likes as well (#​637)
• [code-quality] Add InlineStubPropertyToCreateStubMethodCallRector (#​636)
• skip property fetch in CreateStubOverCreateMockArgRector (#​635)
• [phpunit 12] Add PropertyCreateMockToCreateStubRector (#​634)
• add variable support to CreateStubOverCreateMockArgRector (#​633)
• [CodeQuality] Add failing fixture crash on deep ArrayItem as Foreach_ value on DirectInstanceOverMockArgRector (#​632)
• skip abstract entity and interface, as cannot be instantiated (#​630)
• [code-quality] Add ConfiguredMockEntityToSetterObjectRector (#​629)
• [code-quality] Add AssertThatToDirectAssertRector (#​627)
• [phpunit 12] Add ExpressionCreateMockToCreateStubRector (#​626)
• cover interfaces in BareCreateMockAssignToDirectUseRector (#​625)
• [code-quality] Add SuffixMockObjectPropertyRector, not enabled (#​622)
• [phpunit 12] Add ExplicitMockExpectsCallRector (#​621)

v2.3.5: Released Rector 2.3.5

Compare Source

New Features 🥳

• feat: create new SafeDeclareStrictTypesRector (#​7814), Thanks @​calebdw!

Bugfixes 🐛

• Fix ArrayItem scope filling on Foreach_ value (#​7858)
• Fix use of deprecated Node\Expr\ArrayItem over Node\ArrayItem (#​7859)
• make PropertyF

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.