Update all non-major dependencies

[benjaminjonard]

This PR contains the following updates:

Package	Change	Age	Confidence
doctrine/doctrine-bundle (source)	3.1.0 → 3.2.2
doctrine/orm (source)	3.5.8 → 3.6.0
phpunit/php-code-coverage	12.5.1 → 12.5.2
rector/rector (source)	2.2.14 → 2.3.0
stof/doctrine-extensions-bundle	1.15.1 → 1.15.2
webpack	5.103.0 → 5.104.1
zenstruck/foundry	2.8.2 → 2.8.4

---

Release Notes

doctrine/DoctrineBundle (doctrine/doctrine-bundle)

v3.2.2

Compare Source

Release Notes for 3.2.2

Fixes possible 3.2.0 BC break when XML mapping is used

3.2.2

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Bug

• 2190: Fix position of $enableXsdValidation in DoctrineOrmMappingsPass::createXmlMappingDriver thanks to @​KDederichs

v3.2.1

Compare Source

Release Notes for 3.2.1

3.2.1

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Bugfixes

• 2187: Reintroduce missing use statement thanks to @​alcohol

v3.2.0

Compare Source

Release Notes for 3.2.0

Feature release (minor)

3.2.0

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Feature

• 2172: Wire commands for inspecting configured listeners thanks to @​HypeMC

v3.1.1

Compare Source

Release Notes for 3.1.1

3.1.x bugfix release (patch)

3.1.1

• Total issues resolved: 0

• Total pull requests resolved: 3

• Total contributors: 3

• 2160: Remove VarExporter from dependencies thanks to @​derrabus

Deprecation

• 2150: clarify message to better hint which "auto_mapping" option is deprecated thanks to @​xabbuh

Documentation

• 2151: Fix DBAL documentation links and update filter link thanks to @​sad270

This release also contains the changes from https://github.com/doctrine/DoctrineBundle/releases/tag/2.18.2

doctrine/orm (doctrine/orm)

v3.6.0

Compare Source

Release Notes for 3.6.0

Feature release (minor)

3.6.0

• Total issues resolved: 0
• Total pull requests resolved: 21
• Total contributors: 13

New Feature

• 12268: Add hints to QueryBuilder thanks to @​pmaasz
• 12165: Add commands for inspecting configured listeners thanks to @​HypeMC
• 12071: Add JSON format option for orm:mapping:describe command output thanks to @​stlgaits
• 12065: Use enum values from enumType in DiscriminatorColumn and check DiscriminatorMap values against it thanks to @​whataboutpereira

Deprecation

• 12279: Deprecate string default expressions thanks to @​greg0ire
• 12273: Deprecate FieldMapping::$default thanks to @​greg0ire
• 12126: Deprecate specifying nullable on primary key columns thanks to @​greg0ire
• 12051: Stop using QueryBuilder::getRootAlias() thanks to @​greg0ire

Improvement

• 12232: SQLFilter: replace internal array shape with class thanks to @​derrabus

• 12214: Stop using deprecated Collections constants thanks to @​derrabus

• 12198: Update DQL arbitrary joins to use the ON keyword instead of WITH thanks to @​stof

• 12110: Allow Symfony 8 thanks to @​derrabus

• 12095: Performance optimization in ScalarColumnHydrator::hydrateAllData() thanks to @​maxm86545

• 12068: QueryBuilder: prevent misuse of DELETE with LIMIT thanks to @​janedbal

• 12196: Add deprecation messages for methods that were only annotated as being @deprecated thanks to @​mpdude

• 12131: Feature: add support for ClassLocator thanks to @​rela589n

Bugfixes

• 12138: fix pull request URL thanks to @​xabbuh

Documentation

• 12313: doc: do not mention InverseJoinColumn since it’s only with PHP 8.0 thanks to @​alexislefebvre

Test Suite

• 12135: Add missing assertion in test thanks to @​greg0ire

CI

• 12112: Include stability in coverage file key thanks to @​derrabus
• 12102: Run tests with Symfony 8 thanks to @​derrabus

sebastianbergmann/php-code-coverage (phpunit/php-code-coverage)

v12.5.2: phpunit/php-code-coverage 12.5.2

Compare Source

Fixed

• #​1131: Invalid XML generated when both PCOV and Xdebug are loaded

rectorphp/rector (rector/rector)

v2.3.0: Released Rector 2.3

Compare Source

New Features 🥳

• Introduce FileNode to handle file-level changes (#​7728) to be used instead of FileWithoutNamespace node - see https://github.com/rectorphp/rector-src/blob/main/UPGRADING.md for the upgrade
• Add PrivatizeFinalClassConstantRector (#​7753), Thanks @​simonschaufi!
• [dead-code] Add RemoveParentDelegatingConstructorRector (#​7769)

Bugfixes 🐛

• Manage named arguments in ArgumentAdderRector rule (#​7777), Thanks @​carlos-granados!
• [compat] Add SymplifyQuoteEscapeRector deprecated rule for BC layer (#​7744)
• [Php81] Skip on Param default on ArrayToFirstClassCallableRector (#​7749)
• [CodeQuality] Handle ternary in identical left/right on UseIdenticalOverEqualWithSameTypeRector (#​7748)
• fix: chained calls on static calls (#​7746), Thanks @​calebdw!
• [code-quality] Extract standalone SortAttributeNamedArgsRector from SortNamedParamRector, to slightly different areas (#​7750)
• [rename] Rename SortNamedParamRector to SortCallLikeNamedArgsRector to be more clear about the intent (#​7751)
• [Php85] Skip under unset() on ArrayFirstLastRector (#​7752)
• [Php81] ArrayToFirstClassCallableRector should not skip non-public methods from owning scope (#​7760), Thanks @​acoulton!
• [fix] wrap ternary in parenthese on string casting, if only cond is casted (#​7745)
• [internal] Fix inline replace block removal not removed on deep block for InlineIfToExplicitIfRector + ReplaceBlockToItsStmtsRector (#​7764)
• [TypeDeclaration] Skip class not found on ObjectTypedPropertyFromJMSSerializerAttributeTypeRector (#​7774)
• [Php85] Skip defined int or string on ArrayKeyExistsNullToEmptyStringRector (#​7758)

Removed 💀

• [DeadCode] Skip trait on RemoveAlwaysTrueIfConditionRector (#​7759)
• [internal] Remove duplicated enterNode() type check already handled in node traverser (#​7717)
• [dx] warn about deprecated beforeTraverse() method once FileNode is ready (#​7768)
• [DeadCode] Skip next assign expr has side effect inside try {} on RemoveDoubleAssignRector (#​7775)
• [DeadCode] Skip with different default param value child vs parent on RemoveParentDelegatingConstructorRector (#​7776)

rectorphp/rector-symfony 🎵

• bump (#​911)
• [code-quality] Add ReturnDirectJsonResponseRector (#​910)
• Fix scoped downgrade SymfonyClass (#​909)
• cover is safe (#​908)
• [twig] add explicit attribute name arg, to improve context (#​907)
• [Symfony73] Fix named arg different position crash on InvokableCommandInputAttributeRector (#​905)
• [CodeQuality] Skip UserInterface instance on ControllerMethodInjectionToConstructorRector (#​904)
• create ClassMethod directly in InvokableCommandInputAttributeRector, to keep newline per attribute (#​903)
• Remove InvokableCommandInputAttributeRector from set (#​901)
• [Validator] use constants for Email (#​900), Thanks @​JohJohan

rectorphp/rector-doctrine 🟠

• Make use of FileNode (#​474)

rectorphp/rector-phpunit 🟢

• [AnnotationsToAttributes] Handle both annotation and attributes exists on DataProviderAnnotationToAttributeRector (#​603)
• [fix] skip AddInstanceofAssertForNullableArgumentRector on assert call (#​602)
• [code-quality] Add AddInstanceofAssertForNullableArgumentRector (#​601)
• use FileNode in DeclareStrictTypesTestsRector (#​599)

stof/StofDoctrineExtensionsBundle (stof/doctrine-extensions-bundle)

v1.15.2: 1.15.2

Compare Source

What's Changed

• Fix: Translatable setSkipOnLoad param name on service configuration by @​BeBlood in #​521

New Contributors

• @​BeBlood made their first contribution in #​521

Full Changelog: stof/StofDoctrineExtensionsBundle@v1.15.1...v1.15.2

webpack/webpack (webpack)

v5.104.1

Compare Source

Patch Changes

• 2efd21b: Reexports runtime calculation should not accessing WEBPACK_IMPORT_KEY decl with var.
• c510070: Fixed a user information bypass vulnerability in the HttpUriPlugin plugin.

v5.104.0

Compare Source

Minor Changes

• d3dd841: Use method shorthand to render module content in __webpack_modules__ object.
• d3dd841: Enhance import.meta.env to support object access.
• 4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.
• 04cd530: Handle more at-rules for CSS modules.
• cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.
• d3dd841: Added base64url, base62, base58, base52, base49, base36, base32 and base25 digests.
• 5983843: Provide a stable runtime function variable __webpack_global__.
• d3dd841: Improved localIdentName hashing for CSS.

Patch Changes

• 22c48fb: Added module existence check for informative error message in development mode.
• 50689e1: Use the fully qualified class name (or export name) for [fullhash] placeholder in CSS modules.
• d3dd841: Support universal lazy compilation.
• d3dd841: Fixed module library export definitions when multiple runtimes.
• d3dd841: Fixed CSS nesting and CSS custom properties parsing.
• d3dd841: Don't write fragment from URL to filename and apply fragment to module URL.
• aab1da9: Fixed bugs for css/global type.
• d3dd841: Compatibility import.meta.filename and import.meta.dirname with eval devtools.
• d3dd841: Handle nested __webpack_require__.
• 728ddb7: The speed of identifier parsing has been improved.
• 0f8b31b: Improve types.
• d3dd841: Don't corrupt debugId injection when hidden-source-map is used.
• 2179fdb: Re-validate HttpUriPlugin redirects against allowedUris, restrict to http(s) and add a conservative redirect limit to prevent SSRF and untrusted content inclusion. Redirects failing policy are rejected before caching/lockfile writes.
• d3dd841: Serialize HookWebpackError.
• d3dd841: Added ability to use built-in properties in dotenv and define plugin.
• 3c4319f: Optimizing the regular expression character class by specifying ranges for runtime code.
• d3dd841: Reduce collision for local indent name in CSS.
• d3dd841: Remove CSS link tags when CSS imports are removed.

zenstruck/foundry (zenstruck/foundry)

v2.8.4

Compare Source

December 23rd, 2025 - v2.8.3...v2.8.4

• 45b6e21 fix: remove problematic "conflict" in composer.json (#​1046) by @​nikophil

v2.8.3

Compare Source

December 22nd, 2025 - v2.8.2...v2.8.3

• a102c0a fix: Allow PersistManager::refresh() to not throw in specific cases (#​1044) by @​nikophil
• d4f9997 fix: auto-refresh problem with doctrine/orm 2 (#​1042) by @​nikophil
• cace455 Update issue templates by @​nikophil
• b0a5703 fix: call inverse relatoinship callback before afterInstantiate() (#​1041) by @​nikophil

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.