chore(deps): bump the composer-all group across 1 directory with 4 updates by dependabot[bot] · Pull Request #92 · soderlind/vmfa-ai-organizer

dependabot · 2026-08-18T19:44:11Z

Bumps the composer-all group with 4 updates in the / directory: yahnis-elsts/plugin-update-checker, dealerdirect/phpcodesniffer-composer-installer, mockery/mockery and wp-coding-standards/wpcs.

Updates yahnis-elsts/plugin-update-checker from 5.6 to 5.7

Release notes

Sourced from yahnis-elsts/plugin-update-checker's releases.

5.7

Added optional support for the "autoupdate" field that allows triggering unattended plugin updates. To enable it, you need to both set autoupdate to true in plugin update metadata and call $updateChceker->allowAutoupdateField() in your plugin. Props to @hisman for part of the implementation.

BitBucket: Added support for basic auth with API tokens. Props to @cristianozanca for part of the implementation.

BitBucket: Removed OAuth 1 support since it's no longer supported by BitBucket.

Replaced all htmlentities() calls with esc_html(). This takes advantage of automatic character set detection in WP core, and should eliminate some static analysis warnings. See #597.

Replaced all wp_redirect() calls with wp_safe_redirect(). This shouldn't matter in practice since PUC only ever does internal redirects, but it pacifies some static analysis tools. See #597.

Added and updated translations:

Persian (@aljvdi)

Simplified Chinese (zh_CN, @seatonjiang)

Traditional Chinese (zh_TW, @alexclassroom)

Commits

275a96a Bump version number to 5.7
8b2396f Minor: Update year in the license block
299a869 Minor: Update docs for BitBucket auth
c31b762 Remove OAuth 1 support for the BitBucket integration.
eceb677 BitBucket support: Support basic auth with API tokens.
3ceae95 Don't allow autoupdate = true unless you call $checked->allowAutoupdateField(...
b0acf15 Minor: Typo
9c044de Update README with regex filtering for GitHub release assets
68a70bf Merge pull request #602 from hisman/add-autoupdate-field-to-plugininfo
36f3c2b Add default value to the autoupdate field
Additional commits viewable in compare view

Updates dealerdirect/phpcodesniffer-composer-installer from 1.2.0 to 1.2.1

Release notes

Sourced from dealerdirect/phpcodesniffer-composer-installer's releases.

v1.2.1

Changed

Various housekeeping, including improvements to CI.

Fixed

Fix potential error when running composer install with an open_basedir restriction in effect. Thanks @srebb ! #271, #272

New Contributors

@srebb made their first contribution

Full Changelog: PHPCSStandards/composer-installer@v1.2.0...v1.2.1

Changelog

Sourced from dealerdirect/phpcodesniffer-composer-installer's changelog.

[v1.2.1] - 2026-05-06

Changed

Various housekeeping, including improvements to CI.

Fixed

Fix potential error when running composer install with an open_basedir restriction in effect. Thanks [@srebb] ! #271, #272

#271: PHPCSStandards/composer-installer#271 #272: PHPCSStandards/composer-installer#272

Commits

963f0c6 Merge pull request #284 from PHPCSStandards/feature/changelog-for-release-1.2.1
b1bf91e Changelog for the 1.2.1 release
0ded545 Resolve relative paths to absolute before validation to avoid open_basedir wa...
467286b Merge pull request #283 from PHPCSStandards/dependabot/github_actions/ramsey/...
83c65e6 Merge pull request #282 from PHPCSStandards/dependabot/github_actions/action-...
d384a67 GH Actions: Bump ramsey/composer-install from 3.1.1 to 4.0.0
c3f9878 GH Actions: Bump shivammathur/setup-php in the action-runners group
7e6a7a3 Merge pull request #275 from PHPCSStandards/feature/tests-phpcsversions-updat...
4a03570 Merge pull request #274 from PHPCSStandards/feature/dependabot-every-two-weeks
375c41d Merge pull request #276 from PHPCSStandards/dependabot/github_actions/action-...
Additional commits viewable in compare view

Updates mockery/mockery from 1.6.12 to 1.6.13

Release notes

Sourced from mockery/mockery's releases.

1.6.13

What's Changed

Separate tests and fixtures by PHP versions by @ghostwriter in mockery/mockery#1422

Properly Handle Initialization Errors and Ensure Accurate 'Failed Expectation' Messages by @hschletz in mockery/mockery#1423

Add test and fixture for PR #1423 by @ghostwriter in mockery/mockery#1424

Bump requests from 2.31.0 to 2.32.0 by @ghostwriter in mockery/mockery#1428

Bump certifi from 2024.2.2 to 2024.07.04 by @ghostwriter in mockery/mockery#1429

Bump urllib3 from 2.2.1 to 2.2.2 by @ghostwriter in mockery/mockery#1430

Bump infection from 0.28.1 to 0.29.6 by @ghostwriter in mockery/mockery#1431

Bump phpdocumentor from 3.4.3 to 3.5.3 by @ghostwriter in mockery/mockery#1432

Bump phpunit from 11.1.3 to 11.2.9 by @ghostwriter in mockery/mockery#1433

Bump psalm from 5.24.0 to 5.25.0 by @ghostwriter in mockery/mockery#1434

Bump setuptools from 69.2.0 to 70.0.0 by @ghostwriter in mockery/mockery#1435

Upload test results to Codecov by @ghostwriter in mockery/mockery#1437

Refactor \Mockery\Container::mock by @ghostwriter in mockery/mockery#1436

Fix Undefined Array Key in Mockery withArgs for PHP 8.2 by @ghostwriter in mockery/mockery#1441

Bump psalm phar from 5.25.0 to 5.26.1 by @ghostwriter in mockery/mockery#1443

Bump phive phar from 0.15.2 to 0.15.3 by @ghostwriter in mockery/mockery#1444

Bump phpunit from 11.2.9 to 11.3.6 by @ghostwriter in mockery/mockery#1445

Bump symplify/easy-coding-standard from 12.1.14 to 12.3.5 by @ghostwriter in mockery/mockery#1446

[PHP/8.0] Resolve issue with named parameters by @lukeroot in mockery/mockery#1448

Handle ReflectionException when resolving named arguments by @ghostwriter in mockery/mockery#1449

Add withAndOthers expectation shorthand by @bert-w in mockery/mockery#1451

Fixed invalid variadic $args parameters by @lrotermund in mockery/mockery#1454

Bump jinja2 from 3.1.4 to 3.1.5 by @ghostwriter in mockery/mockery#1455

Update composer dependencies by @ghostwriter in mockery/mockery#1456

Update phive dependencies by @ghostwriter in mockery/mockery#1457

Update psalm baseline by @ghostwriter in mockery/mockery#1458

Fixes CVE-2025-27516 by @dustin-scott in mockery/mockery#1460

Bump requests from 2.32.0 to 2.32.4 by @ghostwriter in mockery/mockery#1466

Bump setuptools from 70.0.0 to 78.1.1 by @ghostwriter in mockery/mockery#1467

Bump urllib3 from 2.2.2 to 2.5.0 by @ghostwriter in mockery/mockery#1468

Update .gitattributes: add docs/ by @mfn in mockery/mockery#1475

Update urllib3 version requirement in docs by @ghostwriter in mockery/mockery#1476

Mock demeter chains and fluent interface methods with static return type by @kirkbushell in mockery/mockery#1474

Update wheel version requirement for docs by @ghostwriter in mockery/mockery#1477

Bump PHPUnit from 9.6.22 to 9.6.34 by @ghostwriter in mockery/mockery#1478

Update Psalm scripts and baseline by @ghostwriter in mockery/mockery#1479

Bump Pygments from 2.17.2 to 2.20.0 by @ghostwriter in mockery/mockery#1481

Bump requests from 2.32.4 to 2.33.0 by @ghostwriter in mockery/mockery#1482

Docs: add alternative approaches for mocking final classes by @amyavari in mockery/mockery#1463

Add export-ignore rules to .gitattributes by @sasezaki in mockery/mockery#1483

Bump urllib3 from 2.6.3 to 2.7.0 by @ghostwriter in mockery/mockery#1484

Bump idna from 3.7 to 3.15 by @ghostwriter in mockery/mockery#1487

Add PHP 8.4, 8.5, and 8.6 to bug report template by @ADmad in mockery/mockery#1497

Do not return from constructors/destructors by @lazerg in mockery/mockery#1495

Bump setuptools from 78.1.1 to 83.0.0 by @ghostwriter in mockery/mockery#1499

Update GitHub Actions workflows by @ghostwriter in mockery/mockery#1498

Bump PHIVE tool versions by @ghostwriter in mockery/mockery#1500

Fix Mock::shouldNotReceive() silently ignoring all but the first argument by @gr8man in mockery/mockery#1489

... (truncated)

Changelog

Sourced from mockery/mockery's changelog.

[1.6.13] - 2026-08-14

Added

1505: Add PHPUnit extension for Mockery

1451: Add withAndOthers expectation shorthand

Changed

1495: Do not return from constructors/destructors

Fixed

1506: Fix Mock::shouldNotReceive() ignoring additional arguments

1503: Fix mocking a class with an overridden return type

1502: Fixed Generics DocComments & readonly class mock handling

1474: Mock demeter chains and fluent interface methods with static return type

1454: Fixed invalid variadic $args parameters

1450: Phpunit integration test listener false positive

1449: Handle ReflectionException when resolving named arguments

[1448: [PHP/8.0] Resolve issue with named parameters](mockery/mockery#1448)

1441: Fix Undefined Array Key in Mockery withArgs for PHP 8.2

1423: Properly Handle Initialization Errors and Ensure Accurate 'Failed Expectation' Messages

Commits

9cb5441 Changelog v1.6.13 (#1508)
8f28a25 Fix psalm issues and bump RTD to Ubuntu 24.04 (#1507)
7b65b4f Fix Mock::shouldNotReceive() ignoring additional arguments (#1506)
4bc305a Add PHPUnit extension for Mockery (#1505)
396bc47 Add PHPUnit EndToEnd Tests (#1504)
6e5c18c Fix mocking a class with an overridden return type (#1503)
d95e8e1 Fixed Generics DocComments & readonly class mock handling (#1502)
c03e1d9 Updates Composer constraints and autoload setup (#1501)
aa6495a Bump PHIVE tool versions (#1500)
80d4840 Update GitHub Actions workflows (#1498)
Additional commits viewable in compare view

Updates wp-coding-standards/wpcs from 3.3.0 to 3.4.1

Release notes

Sourced from wp-coding-standards/wpcs's releases.

3.4.1 - 2026-07-27

This is a security release and all users are advised to update their WordPressCS install as soon as possible.

Changed

The minimum required PHPCSUtils version to 1.2.3 (was 1.2.2). #2770

The minimum required PHPCSExtra version to 1.5.1 (was 1.5.0). #2770

Various housekeeping, including documentation improvements.

Fixed

SECURITY FIX: Running the WordPress.WP.EnqueuedResourceParameters sniff over untrusted PHP code, for example, in a CI pipeline that lints pull requests, or on a developer machine reviewing third-party code, could lead to arbitrary command execution on the scanning host. #2771 This affects users of the WordPress and WordPress-Extra rulesets. The WordPress-Core ruleset and the WordPress-Docs ruleset are not affected. For more details, see the security advisory Thanks to @FORIMOC for responsibly disclosing the vulnerability.

3.4.0

We're happy to welcome @rodrigoprimo as co-maintainer of WordPressCS as of this release.

Added

WordPress.Arrays.ArrayDeclarationSpacing: new allow_single_item_single_line_explicit_key_arrays property to replace the, now deprecated, allow_single_item_single_line_associative_arrays property. #2696

End-user documentation to the following existing sniffs: WordPress.Arrays.ArrayDeclarationSpacing (props @RafaelFunchal, @mattgaldino and @rodrigoprimo, #2489, #2593, #2682), WordPress.CodeAnalysis.AssignmentInTernaryCondition (props @Nic-Sevic and @rodrigoprimo, #2488, #2678), WordPress.DB.RestrictedClasses (props @paulgibbs and @rodrigoprimo, #2455, #2689), WordPress.DB.DirectDatabaseQuery (props @jaymcp and @rodrigoprimo, #2458, #2697), WordPress.DB.RestrictedFunctions (props @paulgibbs and @rodrigoprimo, #2453, #2676), WordPress.DB.SlowDBQuery (props @petitphp and @rodrigoprimo, #2464, #2699), WordPress.PHP.DevelopmentFunctions (props @gogdzl and @rodrigoprimo, #2490, #2690), WordPress.PHP.NoSilencedErrors (props @gogdzl and @rodrigoprimo, #2495, #2694), WordPress.PHP.PregQuoteDelimiter (props @tikifez and @rodrigoprimo, #2487, #2677), WordPress.PHP.RestrictedPHPFunctions (props @gogdzl and @rodrigoprimo, #2491, #2693), WordPress.Security.PluginMenuSlug (props @jasonkenison, #2592), WordPress.WP.AlternativeFunctions (props @pamprn09, @bhubbard and @rodrigoprimo, #2496, #2588, #2687), WordPress.WP.DiscouragedConstants (props @RafaelFunchal, @paulopmt1 and @rodrigoprimo, #2493, #2589, #2680), WordPress.WP.GlobalVariablesOverride (props @paulopmt1 and @rodrigoprimo, #2586, #2679). This documentation can be exposed via the PHP_CodeSniffer --generator=... command-line argument.

Changed

The minimum required PHP_CodeSniffer version to 3.13.5 (was 3.13.4). #2761

The minimum required PHPCSUtils version to 1.2.2 (was 1.1.0). #2761

The default value for minimum_wp_version, as used by a number of sniffs detecting usage of deprecated WP features, has been updated to 6.7. #2757

WordPress.NamingConventions.PrefixAllGlobals has been updated to recognize pluggable functions introduced in WP up to WP 7.0.0. #2747

WordPress.WP.ClassNameCase has been updated to recognize classes introduced in WP up to WP 7.0.0. #2747

WordPress.WP.DeprecatedFunctions now detects functions deprecated in WordPress up to WP 7.0.0. #2747

The ConstantsHelper::is_use_of_global_constant() method will no longer flag a constant alias created via an import use statement as it were the use of a global constant. #2579

The ConstantsHelper::is_in_function_call() method will now act fully case-agnostic for the function names being checked. #2706 Previously, the $valid_functions parameter would need to be passed with the function names as keys in lowercase.

WordPress.PHP.NoSilencedErrors: error silencing is no longer accepted for the parse_url() function. #2701

Improved the wording of the error message for WordPress.Arrays.ArrayDeclarationSpacing.AssociativeArrayFound. #2688

Improved the wording of the error message for WordPress.PHP.RestrictedPHPFunctions. #2702

Various housekeeping, including documentation and test improvements. Includes a contribution by @dd32.

Deprecated

WordPress.Arrays.ArrayDeclarationSpacing: the allow_single_item_single_line_associative_arrays property has been deprecated in favor of the new allow_single_item_single_line_explicit_key_arrays property. #2696 This is a name change only. The functionality of these properties is the same.

Fixed

WordPress.DB.PreparedSQL and WordPress.DB.PreparedSQLPlaceholders: false positive for static method calls to a non-global class named wpdb. #2753

WordPress.Security.EscapeOutput: false positive for get_search_query() when the $escaped parameter was passed as fully qualified or non-lowercase true. #2618

WordPress.Security.EscapeOutput: false negative for _deprecated_file() calls when the basename( __FILE__ ) pattern used non-standard casing for either basename() and/or __FILE__. #2729

WordPress.WP.AlternativeFunctions: false negative when class functions/constants/properties use the same name as select global WP constants/functions. #2617

WordPress.WP.AlternativeFunctions: false positive for fully qualified references to the global PHP stream constants \STDIN, \STDOUT, and \STDERR. #2617

WordPress.WP.CronInterval: false positive when the callback function reference used a different case than the function declaration, even though they are in the same file. #2730

Changelog

Sourced from wp-coding-standards/wpcs's changelog.

[3.4.1] - 2026-07-27

This is a security release and all users are advised to update their WordPressCS install as soon as possible.

Changed

The minimum required PHPCSUtils version to 1.2.3 (was 1.2.2). #2770

The minimum required PHPCSExtra version to 1.5.1 (was 1.5.0). #2770

Various housekeeping, including documentation improvements.

Fixed

SECURITY FIX: Running the WordPress.WP.EnqueuedResourceParameters sniff over untrusted PHP code, for example, in a CI pipeline that lints pull requests, or on a developer machine reviewing third-party code, could lead to arbitrary command execution on the scanning host. #2771 This affects users of the WordPress and WordPress-Extra rulesets. The WordPress-Core ruleset and the WordPress-Docs ruleset are not affected. For more details, see the security advisory. Thanks to [@FORIMOC] for responsibly disclosing the vulnerability.

#2770: WordPress/WordPress-Coding-Standards#2770 #2771: WordPress/WordPress-Coding-Standards#2771

[3.4.0] - 2026-07-16

We're happy to welcome [@rodrigoprimo] as co-maintainer of WordPressCS as of this release.

Added

WordPress.Arrays.ArrayDeclarationSpacing: new allow_single_item_single_line_explicit_key_arrays property to replace the, now deprecated, allow_single_item_single_line_associative_arrays property. #2696

End-user documentation to the following existing sniffs: WordPress.Arrays.ArrayDeclarationSpacing (props [@RafaelFunchal], [@mattgaldino] and [@rodrigoprimo], #2489, #2593, #2682), WordPress.CodeAnalysis.AssignmentInTernaryCondition (props [@Nic-Sevic] and [@rodrigoprimo], #2488, #2678), WordPress.DB.RestrictedClasses (props [@paulgibbs] and [@rodrigoprimo], #2455, #2689), WordPress.DB.DirectDatabaseQuery (props [@jaymcp] and [@rodrigoprimo], #2458, #2697), WordPress.DB.RestrictedFunctions (props [@paulgibbs] and [@rodrigoprimo], #2453, #2676), WordPress.DB.SlowDBQuery (props [@petitphp] and [@rodrigoprimo], #2464, #2699), WordPress.PHP.DevelopmentFunctions (props [@gogdzl] and [@rodrigoprimo], #2490, #2690), WordPress.PHP.NoSilencedErrors (props [@gogdzl] and [@rodrigoprimo], #2495, #2694), WordPress.PHP.PregQuoteDelimiter (props [@tikifez] and [@rodrigoprimo], #2487, #2677), WordPress.PHP.RestrictedPHPFunctions (props [@gogdzl] and [@rodrigoprimo], #2491, #2693), WordPress.Security.PluginMenuSlug (props [@jasonkenison], #2592), WordPress.WP.AlternativeFunctions (props [@pamprn09], [@bhubbard] and [@rodrigoprimo], #2496, #2588, #2687), WordPress.WP.DiscouragedConstants (props [@RafaelFunchal], [@paulopmt1] and [@rodrigoprimo], #2493, #2589, #2680), WordPress.WP.GlobalVariablesOverride (props [@paulopmt1] and [@rodrigoprimo], #2586, #2679). This documentation can be exposed via the PHP_CodeSniffer --generator=... command-line argument.

Changed

The minimum required PHP_CodeSniffer version to 3.13.5 (was 3.13.4). #2761

The minimum required PHPCSUtils version to 1.2.2 (was 1.1.0). #2761

The default value for minimum_wp_version, as used by a number of sniffs detecting usage of deprecated WP features, has been updated to 6.7. #2757

WordPress.NamingConventions.PrefixAllGlobals has been updated to recognize pluggable functions introduced in WP up to WP 7.0.0. #2747

WordPress.WP.ClassNameCase has been updated to recognize classes introduced in WP up to WP 7.0.0. #2747

WordPress.WP.DeprecatedFunctions now detects functions deprecated in WordPress up to WP 7.0.0. #2747

The ConstantsHelper::is_use_of_global_constant() method will no longer flag a constant alias created via an import use statement as it were the use of a global constant. #2579

The ConstantsHelper::is_in_function_call() method will now act fully case-agnostic for the function names being checked. #2706 Previously, the $valid_functions parameter would need to be passed with the function names as keys in lowercase.

WordPress.PHP.NoSilencedErrors: error silencing is no longer accepted for the parse_url() function. #2701

Improved the wording of the error message for WordPress.Arrays.ArrayDeclarationSpacing.AssociativeArrayFound. #2688

Improved the wording of the error message for WordPress.PHP.RestrictedPHPFunctions. #2702

Various housekeeping, including documentation and test improvements. Includes a contribution by [@dd32].

Deprecated

WordPress.Arrays.ArrayDeclarationSpacing: the allow_single_item_single_line_associative_arrays property has been deprecated in favor of the new allow_single_item_single_line_explicit_key_arrays property. #2696 This is a name change only. The functionality of these properties is the same.

Fixed

... (truncated)

Commits

ec2ff94 Merge pull request #2773 from WordPress/develop
b558639 Merge pull request #2772 from WordPress/feature/changelog-3.4.1
1696dc8 Changelog for the release of WordPressCS 3.4.1
a29048d Merge pull request #2771 from WordPress/security/enqueuedresourceparams-fix-i...
7262444 WP/EnqueuedResourceParameters: remove eval() from is_falsy()
54719c0 Merge pull request #2770 from WordPress/feature/composer-update-versions
267d84e Composer: update minimum version PHPCSUtils + PHPCSExtra
e8064a6 Add SECURITY.md file (#2766)
7ac8973 Merge pull request #2768 from WordPress/dependabot/github_actions/action-runn...
9466b4b GH Actions: Bump actions/checkout in the action-runners group
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the composer-all group with 4 updates in the / directory: [yahnis-elsts/plugin-update-checker](https://github.com/YahnisElsts/plugin-update-checker), [dealerdirect/phpcodesniffer-composer-installer](https://github.com/PHPCSStandards/composer-installer), [mockery/mockery](https://github.com/mockery/mockery) and [wp-coding-standards/wpcs](https://github.com/WordPress/WordPress-Coding-Standards). Updates `yahnis-elsts/plugin-update-checker` from 5.6 to 5.7 - [Release notes](https://github.com/YahnisElsts/plugin-update-checker/releases) - [Commits](YahnisElsts/plugin-update-checker@v5.6...v5.7) Updates `dealerdirect/phpcodesniffer-composer-installer` from 1.2.0 to 1.2.1 - [Release notes](https://github.com/PHPCSStandards/composer-installer/releases) - [Changelog](https://github.com/PHPCSStandards/composer-installer/blob/main/CHANGELOG.md) - [Commits](PHPCSStandards/composer-installer@v1.2.0...v1.2.1) Updates `mockery/mockery` from 1.6.12 to 1.6.13 - [Release notes](https://github.com/mockery/mockery/releases) - [Changelog](https://github.com/mockery/mockery/blob/1.6.x/CHANGELOG.md) - [Commits](mockery/mockery@1.6.12...1.6.13) Updates `wp-coding-standards/wpcs` from 3.3.0 to 3.4.1 - [Release notes](https://github.com/WordPress/WordPress-Coding-Standards/releases) - [Changelog](https://github.com/WordPress/WordPress-Coding-Standards/blob/develop/CHANGELOG.md) - [Commits](WordPress/WordPress-Coding-Standards@3.3.0...3.4.1) --- updated-dependencies: - dependency-name: yahnis-elsts/plugin-update-checker dependency-version: '5.7' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: composer-all - dependency-name: dealerdirect/phpcodesniffer-composer-installer dependency-version: 1.2.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: composer-all - dependency-name: mockery/mockery dependency-version: 1.6.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: composer-all - dependency-name: wp-coding-standards/wpcs dependency-version: 3.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: composer-all ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-08-18T19:46:46Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
composer/yahnis-elsts/plugin-update-checker@5.6.0.0 ⏵ 5.7.0.0
composer/dealerdirect/phpcodesniffer-composer-installer@1.2.0.0 ⏵ 1.2.1.0
composer/mockery/mockery@1.6.12.0 ⏵ 1.6.13.0	N/A	N/A	N/A	N/A	N/A
composer/wp-coding-standards/wpcs@3.3.0.0 ⏵ 3.4.1.0	N/A	N/A	N/A	N/A	N/A

View full report

dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Aug 18, 2026

Navigation Menu

Uh oh!

chore(deps): bump the composer-all group across 1 directory with 4 updates - #92

chore(deps): bump the composer-all group across 1 directory with 4 updates#92
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/composer-all-433513b682

dependabot Bot commented on behalf of github Aug 18, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

5.7

v1.2.1

Changed

Fixed

New Contributors

[v1.2.1] - 2026-05-06

Changed

Fixed

1.6.13

What's Changed

[1.6.13] - 2026-08-14

Added

Changed

Fixed

3.4.1 - 2026-07-27

Changed

Fixed

3.4.0

Added

Changed

Deprecated

Fixed

[3.4.1] - 2026-07-27

Changed

Fixed

[3.4.0] - 2026-07-16

Added

Changed

Deprecated

Fixed

Uh oh!

socket-security Bot commented Aug 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 18, 2026 •

edited

Loading