Chore(deps): Bump the dependencies group across 1 directory with 5 updates #3122

dependabot · 2025-12-05T16:42:02Z

Bumps the dependencies group with 5 updates in the / directory:

Package	From	To
doctrine/orm	`2.20.9`	`3.5.8`
nelmio/api-doc-bundle	`4.38.6`	`5.8.2`
zircote/swagger-php	`4.11.1`	`5.7.6`
doctrine/doctrine-fixtures-bundle	`4.3.0`	`4.3.1`
phpunit/phpunit	`12.4.5`	`12.5.0`

Updates doctrine/orm from 2.20.9 to 3.5.8

Release notes

Sourced from doctrine/orm's releases.

3.5.8

Release Notes for 3.5.8

3.5.x bugfix release (patch)

3.5.8

Total issues resolved: 0

Total pull requests resolved: 6

Total contributors: 2

Test Suite

12309: Remove obsolete VarExporter feature detection thanks to @derrabus

12307: Explicitly set a cache in testDisablingXmlValidationIsPossible thanks to @derrabus

12287: Add ORDER BY clause to more test cases thanks to @greg0ire

Improvement

12308: Allow Symfony 8 thanks to @derrabus

CI

12303: Removes Guides from our dependencies thanks to @derrabus

Static Analysis,Test Suite

12301: Fix PHPStan and test errors after DBAL 4.4 and Symfony 7.4 releases thanks to @derrabus

3.5.7

Release Notes for 3.5.7

3.5.x bugfix release (patch)

3.5.7

Total issues resolved: 0

Total pull requests resolved: 1

Total contributors: 1

Bugfixes

12269: Undo merge from 3.6.x into 3.5.x thanks to @greg0ire

3.5.6

Release Notes for 3.5.6

3.5.x bugfix release (patch)

3.5.6

... (truncated)

Upgrade guide

Sourced from doctrine/orm's upgrade guide.

Note about upgrading: Doctrine uses static and runtime mechanisms to raise awareness about deprecated code.

Use of @deprecated docblock that is detected by IDEs (like PHPStorm) or Static Analysis tools (like Psalm, phpstan)

Use of our low-overhead runtime deprecation API, details: https://github.com/doctrine/deprecations/

Upgrade to 3.x General Notes

We recommend you upgrade to DBAL 3 first before upgrading to ORM 3. See the DBAL upgrade docs: https://github.com/doctrine/dbal/blob/3.10.x/UPGRADE.md

Rather than doing several major upgrades at once, we recommend you do the following:

upgrade to DBAL 3

deploy and monitor

upgrade to ORM 3

deploy and monitor

upgrade to DBAL 4

deploy and monitor

If you are using Symfony, the recommended minimal Doctrine Bundle version is 2.15 to run with ORM 3.

At this point, we recommend upgrading to PHP 8.4 first and then directly from ORM 2.19 to 3.5 and up so that you can skip the lazy ghost proxy generation and directly start using native lazy objects.

Upgrade to 3.5

See the General notes to upgrading to 3.x versions above.

Deprecate not using native lazy objects on PHP 8.4+

Having native lazy objects disabled on PHP 8.4+ is deprecated and will not be possible in 4.0.

You can enable them through configuration:
$config->enableNativeLazyObjects(true);
As a consequence, methods, parameters and commands related to userland lazy objects have been deprecated on PHP 8.4+:

Doctrine\ORM\Tools\Console\Command\GenerateProxiesCommand

Doctrine\ORM\Configuration::getAutoGenerateProxyClasses()

Doctrine\ORM\Configuration::getProxyDir()

... (truncated)

Commits

78dd074 Remove obsolete VarExporter feature detection (#12309)
ff22a00 Allow Symfony 8 (#12308)
02e8ff9 Explicitly set a cache in testDisablingXmlValidationIsPossible (#12307)
2e75a7f Merge branch '2.20.x' into 3.5.x
152b0e3 Removes Guides from our dependencies (#12303)
9d11fdd Fix PHPStan and test errors after DBAL 4.4 and Symfony 7.4 releases (#12301)
ee70178 Merge pull request #12287 from greg0ire/more-order-by
01c178b Add ORDER BY clause to more test cases
ffa50a7 Merge pull request #12286 from greg0ire/3.5.x
649048f Merge remote-tracking branch 'origin/2.20.x' into 3.5.x
Additional commits viewable in compare view

Updates nelmio/api-doc-bundle from 4.38.6 to 5.8.2

Release notes

Sourced from nelmio/api-doc-bundle's releases.

v5.8.2

5.8.2 (2025-11-28)

Bug Fixes

SplObjectStorage: SplObjectStorage::detach() is deprecated since 8.5, use method SplObjectStorage::offsetUnset() instead (94f6895)

Miscellaneous Chores

deps: bump @stoplight/elements from 9.0.11 to 9.0.12 in /utils (#2625) (e54c6c2)

v5.8.1

5.8.1 (2025-11-14)

Bug Fixes

configuration: validate type_info option on Symfony 6 (#2615) (3d96b9a)

v5.8.0

5.8.0 (2025-11-14)

Features

#2502: refactor Model::$type from property-info to type-info Type (ef14213)

Bug Fixes

trigger_deprecation: incorrect & missing trigger_deprecation in Model class (#2613) (52858e6)

Miscellaneous Chores

php: bump minimum to php 8.2 (#2611) (95b2057)

symfony: bumped minimum version for Symfony 7 from ^7.1 to ^7.2 (ef14213)

v5.7.1

5.7.1 (2025-11-13)

Bug Fixes

swagger-php 5.7.0 compatatiblity (#2598) (ca4ca49)

v5.7.0

5.7.0 (2025-11-10)

... (truncated)

Changelog

Sourced from nelmio/api-doc-bundle's changelog.

5.8.2 (2025-11-28)

Bug Fixes

SplObjectStorage: SplObjectStorage::detach() is deprecated since 8.5, use method SplObjectStorage::offsetUnset() instead (94f6895)

Miscellaneous Chores

deps: bump @stoplight/elements from 9.0.11 to 9.0.12 in /utils (#2625) (e54c6c2)

5.8.1 (2025-11-14)

Bug Fixes

configuration: validate type_info option on Symfony 6 (#2615) (3d96b9a)

5.8.0 (2025-11-14)

Features

#2502: refactor Model::$type from property-info to type-info Type (ef14213)

Bug Fixes

trigger_deprecation: incorrect & missing trigger_deprecation in Model class (#2613) (52858e6)

Miscellaneous Chores

php: bump minimum to php 8.2 (#2611) (95b2057)

symfony: bumped minimum version for Symfony 7 from ^7.1 to ^7.2 (ef14213)

5.7.1 (2025-11-13)

Bug Fixes

swagger-php 5.7.0 compatatiblity (#2598) (ca4ca49)

5.7.0 (2025-11-10)

Features

Implement Ulid type description in ClassDescriber (#2556) (5666ba1)

... (truncated)

Commits

b29ed29 chore(5.x): release 5.8.2 (#2626)
94f6895 fix(SplObjectStorage): SplObjectStorage::detach()`` is deprecated since 8.5...
7069df2 ci: improve matrix & check for stable dependencies (#2632)
a214910 ci: run on Symfony 7.4 (#2631)
b11e562 ci(deps): bump actions/checkout from 4 to 6 (#2624)
e54c6c2 chore(deps): bump @stoplight/elements from 9.0.11 to 9.0.12 in /utils (#2625)
c5aa046 docs(pr-template): remove mention of CHANGELOG.md (#2622)
dd2a39f ci(php): run on php 8.5 (#2621)
0631998 docs: fix docs (#2619)
b5d0cd8 docs(customization): explain how to customize the various describers (#2618)
Additional commits viewable in compare view

Updates zircote/swagger-php from 4.11.1 to 5.7.6

Release notes

Sourced from zircote/swagger-php's releases.

5.7.6

What's Changed

[v5] Methods SplObjectStorage::attach(), detach & contains() are deprecated since PHP 8.5 by @DerManoMann in zircote/swagger-php#1866

Full Changelog: zircote/swagger-php@5.7.5...5.7.6

5.7.5

What's Changed

[v5] Allow to disable default tag descriptions by @DerManoMann in zircote/swagger-php#1859

Backport AugmentItems processor by @DerManoMann in zircote/swagger-php#1863

Full Changelog: zircote/swagger-php@5.7.4...5.7.5

5.7.4

What's Changed

Backport latest changes of LegacyTypeResolver from v6 by @DerManoMann in zircote/swagger-php#1851

(chore 5.x) Add symfony8 deps by @DerManoMann in zircote/swagger-php#1855

Full Changelog: zircote/swagger-php@5.7.3...5.7.4

5.7.3

What's Changed

Consider oneOf, allOf and anyOf when deciding on whether to modify the schema type by @DerManoMann in zircote/swagger-php#1847

Full Changelog: zircote/swagger-php@5.7.2...5.7.3

5.7.2

What's Changed

Handle Mixed union type incl. array in LegacyTypeResolver by @DerManoMann in zircote/swagger-php#1844

Allow to toggle 'merge Components' and default to false by @DerManoMann in zircote/swagger-php#1849

Full Changelog: zircote/swagger-php@5.7.1...5.7.2

5.7.1

What's Changed

Merge multiple Components into a single one by @DerManoMann in zircote/swagger-php#1836

Fix parameter name matching in method docblocks for LegacyTypeResolver by @DerManoMann in zircote/swagger-php#1843

Expand test matrix by @DerManoMann in zircote/swagger-php#1842

Handle legacy MediaType::encoding values by @DerManoMann in zircote/swagger-php#1845

Full Changelog: zircote/swagger-php@5.7.0...5.7.1

5.7.0

What's Changed

... (truncated)

Commits

e4727ba Methods SplObjectStorage::attach(), detach & contains() are deprecated since ...
9a37739 Backport AugmentItems processor (#1863)
3d83540 Allow to disable default tag descriptions (#1859)
dfd637f Merge pull request #1855 from DerManoMann/5x-add-symfony8-deps
1094427 Add symfony ^8.0 to deps list
ffe101a Backport latest changes of LegacyTypeResolver from v6 (#1851)
4d0d308 Consider oneOf, allOf and anyOf when deciding on whether to modify the ...
2b832aa Allow to toggle 'merge Components' and default to false (#1849)
9cf6abe Handle Mixed union type incl. array in LegacyTypeResolver (#1844)
374262e Handle legacy MediaType::encoding values (#1845)
Additional commits viewable in compare view

Updates doctrine/doctrine-fixtures-bundle from 4.3.0 to 4.3.1

Release notes

Sourced from doctrine/doctrine-fixtures-bundle's releases.

4.3.1

Release Notes for 4.3.1

4.3.x bugfix release (patch)

4.3.1

Total issues resolved: 0

Total pull requests resolved: 2

Total contributors: 2

CI

549: ci: add testrun for PHP 8.5 thanks to @Chris53897

Improvement

542: allow Symfony 8 components thanks to @xabbuh

Changes from lower branches

This release contains all changes from the 3.7.3 release.

Commits

9e013ed Merge remote-tracking branch 'origin/3.7.x' into 4.3.x
4c3dfcc Bump doctrine/.github/.github/workflows/composer-lint.yml (#558)
5f9ff2f Merge pull request #559 from doctrine/dependabot/github_actions/3.7.x/doctrin...
c185db7 Merge pull request #560 from doctrine/dependabot/github_actions/3.7.x/doctrin...
1a32518 Merge pull request #557 from doctrine/dependabot/github_actions/3.7.x/doctrin...
b5707d5 Bump doctrine/.github/.github/workflows/release-on-milestone-closed.yml
f1d6398 Bump doctrine/.github/.github/workflows/coding-standards.yml
4eb20fd Bump doctrine/.github/.github/workflows/phpstan.yml
5987e4e Merge pull request #555 from doctrine/dependabot/github_actions/3.7.x/doctrin...
08c2d4b Merge pull request #554 from doctrine/dependabot/github_actions/3.7.x/doctrin...
Additional commits viewable in compare view

Updates phpunit/phpunit from 12.4.5 to 12.5.0

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 12.5.0

Added

#6376: --all CLI option to ignore test selection configured in XML configuration file

#6422: Make <source> element in XML code coverage report optional

Changed

#6380: Allow Throwable in expectExceptionObject()

A PHPUnit notice is now emitted for test methods that create a mock object but do not configure an expectation for it

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

You can follow @phpunit@phpc.social to stay up to date with PHPUnit's development.

You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

Changelog

Sourced from phpunit/phpunit's changelog.

12.5.0 - 2025-12-05

Added

#6376: --all CLI option to ignore test selection configured in XML configuration file

#6422: Make <source> element in XML code coverage report optional

Changed

#6380: Allow Throwable in expectExceptionObject()

A PHPUnit notice is now emitted for test methods that create a mock object but do not configure an expectation for it

Commits

fef037f Prepare release
be0d85a Merge branch '11.5' into 12.5
24fb87d Merge branch '10.5' into 11.5
55d9e26 Remove code that was needed back when phpunit/php-code-coverage supported PHP...
4741324 Simplify
a56df41 Merge branch '12.4' into 12.5
8b59eb7 Update sponsors
ec9440b Merge branch '12.4' into 12.5
6e46f34 Merge branch '11.5' into 12.4
0ec030d Fix CS/WS issue
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [doctrine/orm](https://github.com/doctrine/orm) | `2.20.9` | `3.5.8` | | [nelmio/api-doc-bundle](https://github.com/nelmio/NelmioApiDocBundle) | `4.38.6` | `5.8.2` | | [zircote/swagger-php](https://github.com/zircote/swagger-php) | `4.11.1` | `5.7.6` | | [doctrine/doctrine-fixtures-bundle](https://github.com/doctrine/DoctrineFixturesBundle) | `4.3.0` | `4.3.1` | | [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) | `12.4.5` | `12.5.0` | Updates `doctrine/orm` from 2.20.9 to 3.5.8 - [Release notes](https://github.com/doctrine/orm/releases) - [Upgrade guide](https://github.com/doctrine/orm/blob/3.5.x/UPGRADE.md) - [Commits](doctrine/orm@2.20.9...3.5.8) Updates `nelmio/api-doc-bundle` from 4.38.6 to 5.8.2 - [Release notes](https://github.com/nelmio/NelmioApiDocBundle/releases) - [Changelog](https://github.com/nelmio/NelmioApiDocBundle/blob/5.x/CHANGELOG.md) - [Commits](nelmio/NelmioApiDocBundle@v4.38.6...v5.8.2) Updates `zircote/swagger-php` from 4.11.1 to 5.7.6 - [Release notes](https://github.com/zircote/swagger-php/releases) - [Commits](zircote/swagger-php@4.11.1...5.7.6) Updates `doctrine/doctrine-fixtures-bundle` from 4.3.0 to 4.3.1 - [Release notes](https://github.com/doctrine/DoctrineFixturesBundle/releases) - [Commits](doctrine/DoctrineFixturesBundle@4.3.0...4.3.1) Updates `phpunit/phpunit` from 12.4.5 to 12.5.0 - [Release notes](https://github.com/sebastianbergmann/phpunit/releases) - [Changelog](https://github.com/sebastianbergmann/phpunit/blob/12.5.0/ChangeLog-12.5.md) - [Commits](sebastianbergmann/phpunit@12.4.5...12.5.0) --- updated-dependencies: - dependency-name: doctrine/orm dependency-version: 3.5.8 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: nelmio/api-doc-bundle dependency-version: 5.8.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: zircote/swagger-php dependency-version: 5.7.6 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: doctrine/doctrine-fixtures-bundle dependency-version: 4.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: phpunit/phpunit dependency-version: 12.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Dec 5, 2025

dependabot bot force-pushed the dependabot/composer/dependencies-d94bf49646 branch from aaf9767 to 066ceb6 Compare December 8, 2025 05:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Chore(deps): Bump the dependencies group across 1 directory with 5 updates #3122

Chore(deps): Bump the dependencies group across 1 directory with 5 updates #3122

Uh oh!

dependabot bot commented on behalf of github Dec 5, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Chore(deps): Bump the dependencies group across 1 directory with 5 updates #3122

Are you sure you want to change the base?

Chore(deps): Bump the dependencies group across 1 directory with 5 updates #3122

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.5.8

Release Notes for 3.5.8

3.5.8

Test Suite

Improvement

CI

Static Analysis,Test Suite

3.5.7

Release Notes for 3.5.7

3.5.7

Bugfixes

3.5.6

Release Notes for 3.5.6

3.5.6

Upgrade to 3.x General Notes

Upgrade to 3.5

Deprecate not using native lazy objects on PHP 8.4+

v5.8.2

5.8.2 (2025-11-28)

Bug Fixes

Miscellaneous Chores

v5.8.1

5.8.1 (2025-11-14)

Bug Fixes

v5.8.0

5.8.0 (2025-11-14)

Features

Bug Fixes

Miscellaneous Chores

v5.7.1

5.7.1 (2025-11-13)

Bug Fixes

v5.7.0

5.7.0 (2025-11-10)

5.8.2 (2025-11-28)

Bug Fixes

Miscellaneous Chores

5.8.1 (2025-11-14)

Bug Fixes

5.8.0 (2025-11-14)

Features

Bug Fixes

Miscellaneous Chores

5.7.1 (2025-11-13)

Bug Fixes

5.7.0 (2025-11-10)

Features

5.7.6

What's Changed

5.7.5

What's Changed

5.7.4

What's Changed

5.7.3

What's Changed

5.7.2

What's Changed

5.7.1

What's Changed

5.7.0

What's Changed

4.3.1

Release Notes for 4.3.1

4.3.1

CI

Improvement

Changes from lower branches

PHPUnit 12.5.0

Added

Changed

Keep up to date with PHPUnit:

12.5.0 - 2025-12-05

Added

dependabot bot commented on behalf of github Dec 5, 2025 •

edited

Loading