Bump the dev-dependencies group across 1 directory with 2 updates

[dependabot]

Updates the requirements on yoast/phpunit-polyfills and phpcsstandards/php_codesniffer to permit the latest version.
Updates yoast/phpunit-polyfills to 4.0.0

Release notes

Sourced from yoast/phpunit-polyfills's releases.

4.0.0 - 2025-02-09

PHPUnit 12 support

This release updates the PHPUnit Polyfills to allow for "writing your tests for PHPUnit 12 and running them all the way back to PHPUnit 7". [*]

Please keep in mind that the PHPUnit Polyfills provide forward-compatibility. This means that features which PHPUnit no longer supports in PHPUnit 12.x, are also no longer supported in the 4.0 release of the PHPUnit Polyfills.

Please refer to the PHPUnit 12 release notification and PHPUnit 12 changelog to inform your decision on whether or not to upgrade (yet).

Projects which don't use any of the new or removed functionality in their test suite, can, of course, use the PHPUnit Polyfills 1.x, 2.x, 3.x and 4.x series side-by-side, like so composer require --dev yoast/phpunit-polyfills:"^1.0 || ^2.0 || ^3.0 || ^4.0".

[*]: Note: Releases from the PHPUnit Polyfills 4.x branch will support running tests on PHPUnit 7.5.0 - 9.x, 11.x and 12.x, but will not allow for running tests on PHPUnit 10 (for reasons explained in #200). In practical terms, the net effect of this is that tests on PHP 8.1 will run on PHPUnit 9 instead of PHPUnit 10. Other than that, there is no impact.

Changelog

Changed

• Composer: allow for installation of PHPUnit 12.x. PR #247
• Scalar parameter type declarations and return type declarations are now used where possible. PR #241
• General housekeeping.

Removed

• Support for PHP < 7.1. PR #238.
• Support for PHPUnit < 7.5.0. PR #239.
• The Yoast\PHPUnitPolyfills\Polyfills\AssertIsType trait which is no longer needed now support for PHPUnit < 7.5 has been dropped. PR #239.
• The Yoast\PHPUnitPolyfills\Polyfills\AssertStringContains trait which is no longer needed now support for PHPUnit < 7.5 has been dropped. PR #239.
• The Yoast\PHPUnitPolyfills\Polyfills\AssertEqualsSpecializations trait which is no longer needed now support for PHPUnit < 7.5 has been dropped. PR #239.

Changelog

Sourced from yoast/phpunit-polyfills's changelog.

[4.0.0] - 2025-02-09

PHPUnit 12 support

This release updates the PHPUnit Polyfills to allow for "writing your tests for PHPUnit 12 and running them all the way back to PHPUnit 7". [*]

Please keep in mind that the PHPUnit Polyfills provide forward-compatibility. This means that features which PHPUnit no longer supports in PHPUnit 12.x, are also no longer supported in the 4.0 release of the PHPUnit Polyfills.

Please refer to the PHPUnit 12 release notification and PHPUnit 12 changelog to inform your decision on whether or not to upgrade (yet).

Projects which don't use any of the new or removed functionality in their test suite, can, of course, use the PHPUnit Polyfills 1.x, 2.x, 3.x and 4.x series side-by-side, like so composer require --dev yoast/phpunit-polyfills:"^1.0 || ^2.0 || ^3.0 || ^4.0".

[*]: Note: Releases from the PHPUnit Polyfills 4.x branch will support running tests on PHPUnit 7.5.0 - 9.x, 11.x and 12.x, but will not allow for running tests on PHPUnit 10 (for reasons explained in #200). In practical terms, the net effect of this is that tests on PHP 8.1 will run on PHPUnit 9 instead of PHPUnit 10. Other than that, there is no impact.

Changelog

Changed

• Composer: allow for installation of PHPUnit 12.x. PR #247
• Scalar parameter type declarations and return type declarations are now used where possible. PR #241
• General housekeeping.

Removed

• Support for PHP < 7.1. PR #238.
• Support for PHPUnit < 7.5.0. PR #239.
• The Yoast\PHPUnitPolyfills\Polyfills\AssertIsType trait which is no longer needed now support for PHPUnit < 7.5 has been dropped. PR #239.
• The Yoast\PHPUnitPolyfills\Polyfills\AssertStringContains trait which is no longer needed now support for PHPUnit < 7.5 has been dropped. PR #239.
• The Yoast\PHPUnitPolyfills\Polyfills\AssertEqualsSpecializations trait which is no longer needed now support for PHPUnit < 7.5 has been dropped. PR #239.

#238: Yoast/PHPUnit-Polyfills#238 #239: Yoast/PHPUnit-Polyfills#239 #241: Yoast/PHPUnit-Polyfills#241 #247: Yoast/PHPUnit-Polyfills#247

[3.1.2] - 2025-02-09

This is a maintenance release.

Changed

• README: updated sub-section about PHPUnit version support with information about the PHPUnit Polyfills 4.x branch. PR #249
• General housekeeping.

... (truncated)

Commits

• 134921b Merge pull request #254 from Yoast/feature/4.x/changelog-v4.0.0
• 467709f Changelog for the 4.0.0 release and other documentation updates
• b7d234f Merge branch '3.x' into 4.x
• 9cf2ccd Merge pull request #253 from Yoast/feature/3.x/changelog-v3.1.2
• 59bd807 Changelog for the 3.1.2 release
• 083d158 Merge branch '3.x' into 4.x
• 615cd5b Merge branch '2.x' into 3.x
• a0e3e9a Merge pull request #252 from Yoast/feature/2.x/changelog-v2.0.4
• 0f50227 Changelog for the 2.0.4 release
• 93c9b2d Merge branch '3.x' into 4.x
• Additional commits viewable in compare view

Updates phpcsstandards/php_codesniffer to 4.0.1

Release notes

Sourced from phpcsstandards/php_codesniffer's releases.

4.0.1 - 2025-11-10

This release includes all improvements and bugfixes from PHP_CodeSniffer 3.13.5.

Added

• Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed.
  • Syntax support for new PHP 8.5 features will follow in a future release.
  • If you find any PHP 8.5 deprecation notices which were missed, please report them.

Changed

• The Squiz.ControlStructures.SwitchDeclaration sniff will now flag a PHP close tag as a "wrong opener" and will auto-fix this by inserting a colon. #1316
• Various housekeeping, including improvements to the tests and documentation.

Fixed

• 4.x regression #1277: bring back whitespace tolerance in phpcs:ignore comma-separated rule reference lists.
  • Note: this bug did not affect phpcs:disable/phpcs:enable ignore annotations.
• Fixed bug #968: Generic.WhiteSpace.ScopeIndent was reporting false positives - and making incorrect fixes - for lines following a line containing an arrow function.
  • Thanks to Soichi Sato for the patch.
• Fixed bug #1216: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 "Using null as an array offset" deprecation notices.
  • Thanks to Andrew Lyons for the patch.
• Fixed bug #1279: Tokenizer/PHP: on PHP < 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream.
  • This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.
• Fixed bug #1315: Squiz.ControlStructures.SwitchDeclaration: a number of the fixers would get into fixer conflicts with each other if the code under scan contained multiple statements on a line within a switch.
  • The sniff will now forbid - and auto-fix - multiple statements on one line for case/default and "case breaking" statements.
• Fixed bug #1316: Tokenizer/PHP: a PHP close tag after a switch case condition or after a default keyword, was not regarded as a "scope_opener" for the case/default body.
• Fixed bug #1316: PSR2.ControlStructures.SwitchDeclaration: the WrongOpener error is now also auto-fixable if the wrong opener is a PHP close tag.
• Fixed bug #1316: Squiz.PHP.NonExecutableCode would throw false positives when code within a switch control structure would move in and out of PHP.

---

New Contributors

The PHP_CodeSniffer project is happy to welcome the following new contributors: @​andrewnicols, @​Soh1121

Statistics

Closed: 2 issues Merged: 8 pull requests

Follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X to stay informed.

Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!

Changelog

Sourced from phpcsstandards/php_codesniffer's changelog.

[4.0.1] - 2025-11-10

This release includes all improvements and bugfixes from PHP_CodeSniffer 3.13.5.

Added

• Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed.
  • Syntax support for new PHP 8.5 features will follow in a future release.
  • If you find any PHP 8.5 deprecation notices which were missed, please report them.

Changed

• The Squiz.ControlStructures.SwitchDeclaration sniff will now flag a PHP close tag as a "wrong opener" and will auto-fix this by inserting a colon. #1316
• Various housekeeping, including improvements to the tests and documentation.

Fixed

• 4.x regression #1277: bring back whitespace tolerance in phpcs:ignore comma-separated rule reference lists.
  • Note: this bug did not affect phpcs:disable/phpcs:enable ignore annotations.
• Fixed bug #968: Generic.WhiteSpace.ScopeIndent was reporting false positives - and making incorrect fixes - for lines following a line containing an arrow function.
  • Thanks to [Soichi Sato][@​Soh1121] for the patch.
• Fixed bug #1216: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 "Using null as an array offset" deprecation notices.
  • Thanks to [Andrew Lyons][@​andrewnicols] for the patch.
• Fixed bug #1279: Tokenizer/PHP: on PHP < 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream.
  • This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.
• Fixed bug #1315: Squiz.ControlStructures.SwitchDeclaration: a number of the fixers would get into fixer conflicts with each other if the code under scan contained multiple statements on a line within a switch.
  • The sniff will now forbid - and auto-fix - multiple statements on one line for case/default and "case breaking" statements.
• Fixed bug #1316: Tokenizer/PHP: a PHP close tag after a switch case condition or after a default keyword, was not regarded as a "scope_opener" for the case/default body.
• Fixed bug #1316: PSR2.ControlStructures.SwitchDeclaration: the WrongOpener error is now also auto-fixable if the wrong opener is a PHP close tag.
• Fixed bug #1316: Squiz.PHP.NonExecutableCode would throw false positives when code within a switch control structure would move in and out of PHP.

#968: PHPCSStandards/PHP_CodeSniffer#968 #1216: PHPCSStandards/PHP_CodeSniffer#1216 #1277: PHPCSStandards/PHP_CodeSniffer#1277 #1279: PHPCSStandards/PHP_CodeSniffer#1279 #1315: PHPCSStandards/PHP_CodeSniffer#1315 #1316: PHPCSStandards/PHP_CodeSniffer#1316

[4.0.0] - 2025-09-16

This release contains breaking changes.

Upgrade guides for both [ruleset maintainers/end-users][wiki-upgrade-4.0-end-users], as well as for [sniff developers and integrators][wiki-upgrade-4.0-extenders], have been published to the Wiki.

You are strongly encouraged to read the upgrade guide applicable to your situation before upgrading.

This release includes all improvements and bugfixes from PHP_CodeSniffer [4.0.0-beta1], [4.0.0-RC1], [3.13.3] and [3.13.4].

Changed

• Tokenizer/PHP: fully qualified exit/die/true/false/null will be tokenized as the keyword token and the token 'content' will include the leading backslash. #1201

... (truncated)

Commits

• 0525c73 Merge pull request #1318 from PHPCSStandards/feature/changelog-4.0.1
• 4c09fb4 Changelog for the 4.0.1 release
• 7ed8ea2 Merge pull request #1316 from PHPCSStandards/feature/tokenizer-php-switch-cas...
• b80dc24 Various sniffs: update tests to safeguard handling of case/default with P...
• 6bd0af6 Squiz/NonExecutableCode: bug fix - false positive with PHP close tag after ca...
• 6d61496 Squiz/SwitchDeclaration: make implied semicolon via close tag auto-fixable
• 21c0e80 PSR2/SwitchDeclaration: make implied semicolon via close tag auto-fixable
• 6327f77 Tokenizer/PHP: PHP close tag should be regarded as scope opener for switch ca...
• 9397930 Squiz/SwitchDeclaration: bug fix - fixer conflict for single line code (#1315)
• 2c13a90 Merge pull request #1308 from Soh1121/issue-968/fix-wrong-indentation-with-ar...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Thanks for contributing to EngineScript Site Optimizer! 🎉

Before we review:

• Have you tested your changes with WordPress 6.6+?
• Are your changes compatible with PHP 7.4+?
• Have you followed WordPress coding standards?
• Did you update the CHANGELOG.md if needed?

Security Reminder:
This plugin can handle sensitive site configuration information, so please ensure:

• All user inputs are properly sanitized
• All outputs are properly escaped
• No security vulnerabilities are introduced

We'll review your PR soon! 🚀

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{TIP This summary will be updated as you push new changes. Give us feedback}