Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

chore(deps-dev): bump the dev-dependencies group with 3 updates - #32

#32
Open
dependabot[bot] wants to merge 1 commit into
mainRoxyAPI/sdk-wordpress:mainfrom
dependabot/composer/dev-dependencies-dc341e8435RoxyAPI/sdk-wordpress:dependabot/composer/dev-dependencies-dc341e8435Copy head branch name to clipboard
Open

chore(deps-dev): bump the dev-dependencies group with 3 updates#32
dependabot[bot] wants to merge 1 commit into
mainRoxyAPI/sdk-wordpress:mainfrom
dependabot/composer/dev-dependencies-dc341e8435RoxyAPI/sdk-wordpress:dependabot/composer/dev-dependencies-dc341e8435Copy head branch name to clipboard

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 3 updates: wp-coding-standards/wpcs, phpcsstandards/phpcsextra and phpstan/phpstan.

Updates wp-coding-standards/wpcs from 3.4.0 to 3.4.1

Release notes

Sourced from wp-coding-standards/wpcs's releases.

3.4.1 - 2026-07-27

This is a security release and all users are advised to update their WordPressCS install as soon as possible.

Changed

  • The minimum required PHPCSUtils version to 1.2.3 (was 1.2.2). #2770
  • The minimum required PHPCSExtra version to 1.5.1 (was 1.5.0). #2770
  • Various housekeeping, including documentation improvements.

Fixed

  • SECURITY FIX: Running the WordPress.WP.EnqueuedResourceParameters sniff over untrusted PHP code, for example, in a CI pipeline that lints pull requests, or on a developer machine reviewing third-party code, could lead to arbitrary command execution on the scanning host. #2771 This affects users of the WordPress and WordPress-Extra rulesets. The WordPress-Core ruleset and the WordPress-Docs ruleset are not affected. For more details, see the security advisory Thanks to @​FORIMOC for responsibly disclosing the vulnerability.
Changelog

Sourced from wp-coding-standards/wpcs's changelog.

[3.4.1] - 2026-07-27

This is a security release and all users are advised to update their WordPressCS install as soon as possible.

Changed

  • The minimum required PHPCSUtils version to 1.2.3 (was 1.2.2). #2770
  • The minimum required PHPCSExtra version to 1.5.1 (was 1.5.0). #2770
  • Various housekeeping, including documentation improvements.

Fixed

  • SECURITY FIX: Running the WordPress.WP.EnqueuedResourceParameters sniff over untrusted PHP code, for example, in a CI pipeline that lints pull requests, or on a developer machine reviewing third-party code, could lead to arbitrary command execution on the scanning host. #2771 This affects users of the WordPress and WordPress-Extra rulesets. The WordPress-Core ruleset and the WordPress-Docs ruleset are not affected. For more details, see the security advisory. Thanks to [@​FORIMOC] for responsibly disclosing the vulnerability.

#2770: WordPress/WordPress-Coding-Standards#2770 #2771: WordPress/WordPress-Coding-Standards#2771

Commits
  • ec2ff94 Merge pull request #2773 from WordPress/develop
  • b558639 Merge pull request #2772 from WordPress/feature/changelog-3.4.1
  • 1696dc8 Changelog for the release of WordPressCS 3.4.1
  • a29048d Merge pull request #2771 from WordPress/security/enqueuedresourceparams-fix-i...
  • 7262444 WP/EnqueuedResourceParameters: remove eval() from is_falsy()
  • 54719c0 Merge pull request #2770 from WordPress/feature/composer-update-versions
  • 267d84e Composer: update minimum version PHPCSUtils + PHPCSExtra
  • e8064a6 Add SECURITY.md file (#2766)
  • 7ac8973 Merge pull request #2768 from WordPress/dependabot/github_actions/action-runn...
  • 9466b4b GH Actions: Bump actions/checkout in the action-runners group
  • Additional commits viewable in compare view

Updates phpcsstandards/phpcsextra from 1.5.0 to 1.5.1

Release notes

Sourced from phpcsstandards/phpcsextra's releases.

1.5.1 - 2026-07-27

Changed

Other

  • Composer: The minimum PHPCSUtils requirement has been updated to 1.2.3 (was 1.2.0). #464
  • Various housekeeping. Including a contribution by @​rodrigoprimo.
Changelog

Sourced from phpcsstandards/phpcsextra's changelog.

[1.5.1] - 2026-07-27

Changed

Other

  • Composer: The minimum PHPCSUtils requirement has been updated to 1.2.3 (was 1.2.0). #464
  • Various housekeeping. Including a contribution by [@​rodrigoprimo].

#464: PHPCSStandards/PHPCSExtra#464

Commits
  • 3946753 Merge pull request #466 from PHPCSStandards/develop
  • 9d9a0cb Merge pull request #465 from PHPCSStandards/feature/changelog-1.5.1
  • 63d098e Changelog for PHPCSExtra 1.5.1
  • 03a0a38 Merge pull request #464 from PHPCSStandards/feature/composer-update-minimum-v...
  • 8ee5f31 Composer: update minimum version PHPCSUtils
  • 8c65b03 Merge pull request #463 from PHPCSStandards/feature/remark-config-update
  • 5cdc984 Remark: selectively skip URL patterns [update]
  • b19aaa3 Merge pull request #462 from PHPCSStandards/feature/ghactions-setup-php-fail-...
  • 53c713a GH Actions: fail "setup-php" if requested tooling could not be installed
  • 18ccd88 Merge pull request #461 from PHPCSStandards/dependabot/github_actions/action-...
  • Additional commits viewable in compare view

Updates phpstan/phpstan from 2.2.5 to 2.2.6

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the dev-dependencies group with 3 updates
ff7849c 
Bumps the dev-dependencies group with 3 updates: [wp-coding-standards/wpcs](https://github.com/WordPress/WordPress-Coding-Standards), [phpcsstandards/phpcsextra](https://github.com/PHPCSStandards/PHPCSExtra) and [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source).


Updates `wp-coding-standards/wpcs` from 3.4.0 to 3.4.1
- [Release notes](https://github.com/WordPress/WordPress-Coding-Standards/releases)
- [Changelog](https://github.com/WordPress/WordPress-Coding-Standards/blob/develop/CHANGELOG.md)
- [Commits](WordPress/WordPress-Coding-Standards@3.4.0...3.4.1)

Updates `phpcsstandards/phpcsextra` from 1.5.0 to 1.5.1
- [Release notes](https://github.com/PHPCSStandards/PHPCSExtra/releases)
- [Changelog](https://github.com/PHPCSStandards/PHPCSExtra/blob/develop/CHANGELOG.md)
- [Commits](PHPCSStandards/PHPCSExtra@1.5.0...1.5.1)

Updates `phpstan/phpstan` from 2.2.5 to 2.2.6
- [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits)

---
updated-dependencies:
- dependency-name: wp-coding-standards/wpcs
  dependency-version: 3.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: phpcsstandards/phpcsextra
  dependency-version: 1.5.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: phpstan/phpstan
  dependency-version: 2.2.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Jul 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

Morty Proxy This is a proxified and sanitized view of the page, visit original site.