(chore): Bump the composer group with 18 updates

[dependabot]

Bumps the composer group with 18 updates:

Package	From	To
composer/ca-bundle	1.5.9	1.5.10
fruitcake/php-cors	1.3.0	1.4.0
justinrainbow/json-schema	6.6.2	6.6.3
nette/utils	4.0.9	4.0.10
symfony/console	6.4.27	6.4.30
symfony/filesystem	6.4.24	6.4.30
symfony/http-foundation	6.4.29	6.4.30
symfony/http-kernel	6.4.29	6.4.30
symfony/mime	6.4.26	6.4.30
symfony/routing	6.4.28	6.4.30
symfony/string	6.4.26	6.4.30
symfony/translation	6.4.26	6.4.30
friendsofphp/php-cs-fixer	3.91.1	3.91.3
nikic/php-parser	5.6.2	5.7.0
php-stubs/wordpress-stubs	6.8.3	6.9.0
psy/psysh	0.12.15	0.12.16
symfony/options-resolver	6.4.25	6.4.30
symfony/yaml	6.4.26	6.4.30

Updates composer/ca-bundle from 1.5.9 to 1.5.10

Release notes

Sourced from composer/ca-bundle's releases.

1.5.10

What's Changed

• Update cacert.pem to 2025-12-02 by @​github-actions[bot] in composer/ca-bundle#119

Full Changelog: composer/ca-bundle@1.5.9...1.5.10

Commits

• 961a5e4 Update cacert.pem (#119)
• bb86bce Bump actions/checkout from 5 to 6 (#118)
• See full diff in compare view

Updates fruitcake/php-cors from 1.3.0 to 1.4.0

Release notes

Sourced from fruitcake/php-cors's releases.

v1.4.0

What's Changed

• Test PHP8.3 by @​barryvdh in fruitcake/php-cors#20
• Test against php 8.4 by @​sergiy-petrov in fruitcake/php-cors#30
• Check multiple Vary headers when existing by @​barryvdh in fruitcake/php-cors#32
• Bump phpstan to 2.x and level up to 10 by @​barryvdh in fruitcake/php-cors#33
• Test against php 8.5 by @​sergiy-petrov in fruitcake/php-cors#36
• Allow Symfony v8 by @​jnoordsij in fruitcake/php-cors#38
• Update to squizlabs/php_codesniffer v4 by @​jnoordsij in fruitcake/php-cors#37
• Fix tests deprecation triggered on PHP 8.5 by @​jnoordsij in fruitcake/php-cors#39

New Contributors

• @​sergiy-petrov made their first contribution in fruitcake/php-cors#30
• @​jnoordsij made their first contribution in fruitcake/php-cors#38

Full Changelog: fruitcake/php-cors@v1.3.0...v1.4.0

Changelog

Sourced from fruitcake/php-cors's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Commits

• 38aaa6c Fix tests deprecation triggered on PHP 8.5 (#39)
• 3befa87 Update to squizlabs/php_codesniffer v4 (#37)
• 13b6569 Allow Symfony v8 (#38)
• e82ae5d Test against php 8.5 (#36)
• 0eaf5f5 Bump phpstan to 2.x and level up to 10 (#33)
• cca409b Merge pull request #32 from fruitcake/feat-multiple-vary-headers
• 69714b5 Use setVary
• 95bebd9 Check multiple Vary headers when existing
• 6d89006 Update README.md
• b330bf4 Fix badges
• Additional commits viewable in compare view

Updates justinrainbow/json-schema from 6.6.2 to 6.6.3

Release notes

Sourced from justinrainbow/json-schema's releases.

6.6.3

What's Changed

• Update php-enum dependency version to ^4.4 by @​emodric in jsonrainbow/json-schema#854

New Contributors

• @​emodric made their first contribution in jsonrainbow/json-schema#854

Full Changelog: jsonrainbow/json-schema@6.6.2...6.6.3

Changelog

Sourced from justinrainbow/json-schema's changelog.

[6.6.3] - 2025-12-02

Changed

• Restricted mark-mabe/php-enum dependency to ^4.4 due to lower versions emitting a warning on PHP 8 (#854)

Commits

• 134e989 docs: Prepare 6.6.3 release
• 3b04a58 Update php-enum dependency version to ^4.4 (#854)
• See full diff in compare view

Updates nette/utils from 4.0.9 to 4.0.10

Release notes

Sourced from nette/utils's releases.

Released version 4.0.10

• added Type::with()
• added Type::fromValue()
• added Helpers::splitClassName()
• added Iterables::repeatable()
• Finder: is_file() does not work with symlinks under Windows

Commits

• 2778deb added Type::with()
• ff1f0f6 added Type::fromValue()
• a570df6 Type::allows() accepts Type
• 70082cd Type: refactoring
• 0a14f22 added Helpers::splitClassName()
• 471a00e added Iterables::repeatable()
• ae8facb Finder: is_file() does not work with symlinks under Windows
• See full diff in compare view

Updates symfony/console from 6.4.27 to 6.4.30

Release notes

Sourced from symfony/console's releases.

v6.4.30

Changelog (symfony/console@v6.4.29...v6.4.30)

• bug symfony/symfony#61962 [Console] Handle signals on text input (@​valx76)
• bug symfony/symfony#62627 [Console] Preserve --help option when a command is not found (@​santysisi)
• bug symfony/symfony#62493 [Console] Fix exception message when abbreviation matches multiple hidden commands (@​yoeunes)
• bug symfony/symfony#62416 [Console] Fix completion for global options values (@​HypeMC)
• bug symfony/symfony#62335 [Console] Fix signal handlers not being cleared after command termination (@​yoeunes)

Commits

• 1b28130 Handle signals on text input
• 5a92ed2 [Console] Preserve --help option when a command is not found
• 18c5fd1 [Console] Fix exception message when abbreviation matches multiple hidden com...
• 7f0dd9a [Console] Fix completion for global options values
• 32d9216 [Console] Fix signal handlers not being cleared after command termination
• See full diff in compare view

Updates symfony/filesystem from 6.4.24 to 6.4.30

Release notes

Sourced from symfony/filesystem's releases.

v6.4.30

Changelog (symfony/filesystem@v6.4.29...v6.4.30)

• no significant changes

Commits

• 441c6b6 account for PHP_ZTS being a boolean value on PHP 8.4+
• See full diff in compare view

Updates symfony/http-foundation from 6.4.29 to 6.4.30

Release notes

Sourced from symfony/http-foundation's releases.

v6.4.30

Changelog (symfony/http-foundation@v6.4.29...v6.4.30)

• bug symfony/symfony#62287 [HttpFoundation] Fix AcceptHeader overwrites items with different parameters (@​yoeunes)

Commits

• 0384c62 minor #62519 [HttpFoundation] Fix Request getPathInfo docblock (bobvandevijver)
• e439d60 Fix Request getPathInfo docblock
• 716e385 [HttpFoundation] Fix RequestTest insulation
• 4f9dbbf [HttpFoundation] Fix AcceptHeader overwrites items with different parameters
• See full diff in compare view

Updates symfony/http-kernel from 6.4.29 to 6.4.30

Release notes

Sourced from symfony/http-kernel's releases.

v6.4.30

Changelog (symfony/http-kernel@v6.4.29...v6.4.30)

• bug symfony/symfony#62488 [HttpKernel] Make #[Cache] respect all explicit cache directives set in controller (@​ayyoub-afwallah)
• bug symfony/symfony#62449 [HttpKernel] Fix using MapRequestPayload on nullable arguments (@​nicolas-grekas)

Commits

• ceac681 Update VERSION for 6.4.30
• 8f9461b [HttpKernel] Make #[Cache] respect all explicit cache directives set in con...
• 8b41a8c [HttpKernel] Fix using MapRequestPayload on nullable arguments
• e65986f Bump Symfony version to 6.4.30
• See full diff in compare view

Updates symfony/mime from 6.4.26 to 6.4.30

Release notes

Sourced from symfony/mime's releases.

v6.4.30

Changelog (symfony/mime@v6.4.29...v6.4.30)

• no significant changes

Commits

• 69aeef5 [Mime] Update mime types
• e698fc2 [Mime] Remove unused variable in Email::prepareParts
• See full diff in compare view

Updates symfony/routing from 6.4.28 to 6.4.30

Release notes

Sourced from symfony/routing's releases.

v6.4.30

Changelog (symfony/routing@v6.4.29...v6.4.30)

• bug symfony/symfony#62459 [Routing] Fix case sensitivity for static host matching in compiled routes (@​yoeunes)
• bug symfony/symfony#62461 [Routing] Fix localized prefix updates breaking aliases (@​yoeunes)
• bug symfony/symfony#62460 [Routing] Fix addNamePrefix breaking aliases to external routes (@​yoeunes)

Commits

• ea50a13 [Translation][Routing] Fix typos
• 24fb53f bug #62459 [Routing] Fix case sensitivity for static host matching in compile...
• 6c11ba9 [Routing] Fix case sensitivity for static host matching in compiled routes
• 16519ed bug #62461 [Routing] Fix localized prefix updates breaking aliases (yoeunes)
• 2385f15 [Routing] Fix localized prefix updates breaking aliases
• 2d502e3 [Routing] Fix addNamePrefix breaking aliases to external routes
• See full diff in compare view

Updates symfony/string from 6.4.26 to 6.4.30

Release notes

Sourced from symfony/string's releases.

v6.4.30

Changelog (symfony/string@v6.4.29...v6.4.30)

• bug symfony/symfony#62471 [String] Fix normalization in trimPrefix/trimSuffix (@​yoeunes)

Commits

• 50590a0 [String] Fix normalization in trimPrefix/trimSuffix
• See full diff in compare view

Updates symfony/translation from 6.4.26 to 6.4.30

Release notes

Sourced from symfony/translation's releases.

v6.4.30

Changelog (symfony/translation@v6.4.29...v6.4.30)

• bug symfony/symfony#62348 [Translation][Lokalise] fix "Project too big for sync export" (@​santysisi)

Commits

• d1fdeef minor #62360 [Intl] Update data to ICU 78.1 (llupa)
• b02459d [Intl] Update data to ICU 78.1
• 27c7889 [Translation][Routing] Fix typos
• See full diff in compare view

Updates friendsofphp/php-cs-fixer from 3.91.1 to 3.91.3

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.91.3 Folding Bike

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.91.2...v3.91.3

• Revert "feat: Symfony - add stringable_for_to_string to set" (#9268)

v3.91.2 Folding Bike

What's Changed

• chore: adjust autoloader to exclude all Internal classes in classmap by @​keradus in PHP-CS-Fixer/PHP-CS-Fixer#9252
• CI: set PHP_CS_FIXER_IGNORE_ENV for PHP 8.6 by @​kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9254
• fix: fix support call-site generic variance by @​kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9253

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.91.1...v3.91.2

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.91.3

• Revert "feat: Symfony - add stringable_for_to_string to set" (#9268)

Changelog for v3.91.2

• fix: fix support call-site generic variance (#9253)
• chore: adjust autoloader to exclude all Internal classes in classmap (#9252)
• CI: set PHP_CS_FIXER_IGNORE_ENV for PHP 8.6 (#9254)

Commits

• 9f10aa6 prepared the 3.91.3 release
• dbc88d0 Revert "feat: Symfony - add stringable_for_to_string to set" (#9268)
• f171dc2 prepared the 3.91.2 release
• 1d3537f fix: fix support call-site generic variance (#9253)
• 82a17c6 CI: set PHP_CS_FIXER_IGNORE_ENV for PHP 8.6 (#9254)
• ef85d03 chore: adjust autoloader to exclude all Internal classes in classmap (#9252)
• 677faa8 bumped version
• See full diff in compare view

Updates nikic/php-parser from 5.6.2 to 5.7.0

Release notes

Sourced from nikic/php-parser's releases.

PHP-Parser 5.7.0

Fixed

• Fixed changing modifier on anonymous class with formatting preserving pretty printer.
• Emit an error for unparenthesized arrow functions in pipe operator, and print necessary parentheses in the pretty printer.
• Fix PHP 8.5 deprecation warning in php-parse binary.

Changed

• When targeting PHP 8.4 or newer, omit parentheses around immediately dereferenced new expressions.

Added

• Added shouldPrintRawValue attribute to Scalar\Int_, which makes the pretty printer use the rawValue of the node. This can be used to print integers with separators.

Changelog

Sourced from nikic/php-parser's changelog.

Version 5.7.0 (2025-12-06)

Fixed

• Fixed changing modifier on anonymous class with formatting preserving pretty printer.
• Emit an error for unparenthesized arrow functions in pipe operator, and print necessary parentheses in the pretty printer.
• Fix PHP 8.5 deprecation warning in php-parse binary.

Changed

• When targeting PHP 8.4 or newer, omit parentheses around immediately dereferenced new expressions.

Added

• Added shouldPrintRawValue attribute to Scalar\Int_, which makes the pretty printer use the rawValue of the node. This can be used to print integers with separators.

Commits

• dca41cd Release PHP-Parser 5.7.0
• 8211479 Add shouldPrintRawValue attribute to print rawValue (#1127)
• e481026 Document attributes used by pretty printer
• 24fb844 Stop using a semicolon (;) at the end of case statements for PHP 8.5
• d82749c [types] add known docblock types to traverseArray(), cleanup no relevant git ...
• c97b23d Omit new parentheses when printing for PHP 8.4
• 6b05527 Print parentheses around arrow function in pipe operator
• f01ac40 Emit error for unparenthesized arrow function in pipe operator
• 232169f Fix modifier change on anonymous class
• f174b0a Fix version reference in changelog
• See full diff in compare view

Updates php-stubs/wordpress-stubs from 6.8.3 to 6.9.0

Release notes

Sourced from php-stubs/wordpress-stubs's releases.

The Command Palette release

What's Changed

• Fix PHPStan error in Faker by @​IanDelMar in php-stubs/wordpress-stubs#395
• Rebuild wordpress-stubs.php by @​IanDelMar in php-stubs/wordpress-stubs#394
• Narrow $callback parameter type for add_shortcode() by @​IanDelMar in php-stubs/wordpress-stubs#397
• Narrow return type of current_action/filter() by @​IanDelMar in php-stubs/wordpress-stubs#398
• Narrow return type for did_filter() by @​IanDelMar in php-stubs/wordpress-stubs#399
• Narrow types for add_feed() by @​IanDelMar in php-stubs/wordpress-stubs#396
• Narrow $hook_name type in do_action/apply_filters by @​IanDelMar in php-stubs/wordpress-stubs#400
• Narrow $callback type for register_activation/deactivation/uninstall_hook() by @​IanDelMar in php-stubs/wordpress-stubs#401
• Narrow return and parameter type of several wp_robots_*() functions by @​IanDelMar in php-stubs/wordpress-stubs#402
• Narrow return type of do_meta_boxes() by @​IanDelMar in php-stubs/wordpress-stubs#403
• Remove deprecated files by @​IanDelMar in php-stubs/wordpress-stubs#404

Full Changelog: php-stubs/wordpress-stubs@v6.8.3...v6.9.0

Commits

• 5171cb6 Update stubs
• c44458e Remove wp-cron
• 2e527cc Fix the fix
• 09f2032 Fix non-negative-int
• 1a6a24b Generate stubs for WordPress 6.9.0
• b87603b Remove deprecated files (#404)
• aa2265f Narrow return type of do_meta_boxes() (#403)
• f750c20 Narrow return and parameter type of several wp_robots_*() functions (#402)
• 8335bba Narrow $callback type for register_activation/deactivation/uninstall_hook() (...
• 6ca7f78 Narrow $hook_name type in do_action/apply_filters (#400)
• Additional commits viewable in compare view

Updates psy/psysh from 0.12.15 to 0.12.16

Release notes

Sourced from psy/psysh's releases.

PsySH v0.12.16

A quick release adding support for Symfony Console v7.4+ and v8.x.

Commits

• ee6d502 Merge branch 'release/0.12.16'
• 13d4e37 Bump to v0.12.16
• f17a026 Bump actions/checkout from 6.0.0 to 6.0.1
• c2d6760 Maybe.
• 6a2d8f0 Add support for Symfony Console 8.x
• 2d86002 Bump box build deps.
• 55a0ae9 Improve devex for bumping phar composer lockfile.
• 2ce99b3 Ensure custom commands are correctly initialized in Symfony Console 7.4+
• See full diff in compare view

Updates symfony/options-resolver from 6.4.25 to 6.4.30

Release notes

Sourced from symfony/options-resolver's releases.

v6.4.30

Changelog (symfony/options-resolver@v6.4.29...v6.4.30)

• bug symfony/symfony#62344 [OptionsResolver] Fix missing prototype key in nested error paths (@​yoeunes)
• bug symfony/symfony#62347 [OptionsResolver] Ensure remove() also unsets deprecation status (@​yoeunes)

Commits

• eeaa8ca [OptionsResolver] Fix missing prototype key in nested error paths
• 50406ed [OptionsResolver] Ensure remove() also unsets deprecation status
• See full diff in compare view

Updates symfony/yaml from 6.4.26 to 6.4.30

Release notes

Sourced from symfony/yaml's releases.

v6.4.30

Changelog (symfony/yaml@v6.4.29...v6.4.30)

• bug symfony/symfony#62612 [Yaml] Fix regression handling blank lines in unquoted scalars (@​yoeunes)
• bug symfony/symfony#62409 [Yaml] Align unquoted multiline scalar parsing with spec for comments (@​yoeunes)
• bug symfony/symfony#62359 [Yaml] Fix parsing of unquoted multiline scalars with comments or blank lines (@​yoeunes)

Commits

• 8207ae8 [Yaml] Fix regression handling blank lines in unquoted scalars
• 98d73d6 [Yaml] Align unquoted multiline scalar parsing with spec for comments
• 5e7631d [Yaml] Fix parsing of unquoted multiline scalars with comments or blank lines
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @yard-bot.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[yard-bot]

@dependabot merge

[dependabot]

Beginning January 27, 2026, Dependabot will no longer support the @dependabot merge command. Please use GitHub's native pull request controls instead. Please see the changelog announcement for additional details.

[github-actions]

Composer package changes

Prod Packages	Operation	Base	Target
composer/ca-bundle	Upgraded	1.5.9	1.5.10
fruitcake/php-cors	Upgraded	v1.3.0	v1.4.0
justinrainbow/json-schema	Upgraded	6.6.2	6.6.3
nette/utils	Upgraded	v4.0.9	v4.0.10
symfony/console	Upgraded	v6.4.27	v6.4.30
symfony/filesystem	Upgraded	v6.4.24	v6.4.30
symfony/http-foundation	Upgraded	v6.4.29	v6.4.30
symfony/http-kernel	Upgraded	v6.4.29	v6.4.30
symfony/mime	Upgraded	v6.4.26	v6.4.30
symfony/routing	Upgraded	v6.4.28	v6.4.30
symfony/string	Upgraded	v6.4.26	v6.4.30
symfony/translation	Upgraded	v6.4.26	v6.4.30

Dev Packages	Operation	Base	Target
friendsofphp/php-cs-fixer	Upgraded	v3.91.1	v3.91.3
nikic/php-parser	Upgraded	v5.6.2	v5.7.0
php-stubs/wordpress-stubs	Upgraded	v6.8.3	v6.9.0
psy/psysh	Upgraded	v0.12.15	v0.12.16
symfony/options-resolver	Upgraded	v6.4.25	v6.4.30
symfony/yaml	Upgraded	v6.4.26	v6.4.30

[github-actions]

Coverage report for commit: 6dfbb51
File: coverage.xml

Cover ┌─────────────────────────┐ Freq.
   0% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  10% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  20% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  30% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  40% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  50% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  60% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  70% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  80% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  90% │ ████████░░░░░░░░░░░░░░░ │ 25.0%
 100% │ ███████████████████████ │ 75.0%
      └─────────────────────────┘
 *Legend:* █ = Current Distribution 

Summary - Lines: 91.74% | Methods: 95.45%

Files	Lines	Methods	Branches
src/Console
UserRolesCommand.php	100.00%	100.00%	100.00%
src/Facades
UserRoles.php	100.00%	100.00%	100.00%
src
UserRoles.php	90.53%	94.12%	100.00%
UserRolesServiceProvider.php	100.00%	100.00%	100.00%

_{🤖 comment via lucassabreu/comment-coverage-clover}