Chore(deps): Bump the dependencies group across 1 directory with 6 updates #3141

dependabot · 2025-12-22T05:01:32Z

Bumps the dependencies group with 6 updates in the / directory:

Package	From	To
doctrine/orm	`2.20.9`	`3.6.0`
gedmo/doctrine-extensions	`3.21.0`	`3.22.0`
lexik/jwt-authentication-bundle	`3.1.1`	`3.2.0`
nelmio/api-doc-bundle	`4.38.6`	`5.8.2`
zircote/swagger-php	`4.11.1`	`5.7.6`
phpunit/phpunit	`12.5.3`	`12.5.4`

Updates doctrine/orm from 2.20.9 to 3.6.0

Release notes

Sourced from doctrine/orm's releases.

3.6.0

Release Notes for 3.6.0

Feature release (minor)

3.6.0

Total issues resolved: 0

Total pull requests resolved: 21

Total contributors: 13

New Feature

12268: Add hints to QueryBuilder thanks to @pmaasz

12165: Add commands for inspecting configured listeners thanks to @HypeMC

12071: Add JSON format option for orm:mapping:describe command output thanks to @stlgaits

12065: Use enum values from enumType in DiscriminatorColumn and check DiscriminatorMap values against it thanks to @whataboutpereira

Deprecation

12279: Deprecate string default expressions thanks to @greg0ire

12273: Deprecate FieldMapping::$default thanks to @greg0ire

12126: Deprecate specifying nullable on primary key columns thanks to @greg0ire

12051: Stop using QueryBuilder::getRootAlias() thanks to @greg0ire

Improvement

12232: SQLFilter: replace internal array shape with class thanks to @derrabus

12214: Stop using deprecated Collections constants thanks to @derrabus

12198: Update DQL arbitrary joins to use the ON keyword instead of WITH thanks to @stof

12110: Allow Symfony 8 thanks to @derrabus

12095: Performance optimization in ScalarColumnHydrator::hydrateAllData() thanks to @maxm86545

12068: QueryBuilder: prevent misuse of DELETE with LIMIT thanks to @janedbal

12196: Add deprecation messages for methods that were only annotated as being @deprecated thanks to @mpdude

12131: Feature: add support for ClassLocator thanks to @rela589n

Bugfixes

12138: fix pull request URL thanks to @xabbuh

Documentation

12313: doc: do not mention InverseJoinColumn since it’s only with PHP 8.0 thanks to @alexislefebvre

Test Suite

... (truncated)

Upgrade guide

Sourced from doctrine/orm's upgrade guide.

Note about upgrading: Doctrine uses static and runtime mechanisms to raise awareness about deprecated code.

Use of @deprecated docblock that is detected by IDEs (like PHPStorm) or Static Analysis tools (like Psalm, phpstan)

Use of our low-overhead runtime deprecation API, details: https://github.com/doctrine/deprecations/

Upgrade to 3.x General Notes

We recommend you upgrade to DBAL 3 first before upgrading to ORM 3. See the DBAL upgrade docs: https://github.com/doctrine/dbal/blob/3.10.x/UPGRADE.md

Rather than doing several major upgrades at once, we recommend you do the following:

upgrade to DBAL 3

deploy and monitor

upgrade to ORM 3

deploy and monitor

upgrade to DBAL 4

deploy and monitor

If you are using Symfony, the recommended minimal Doctrine Bundle version is 2.15 to run with ORM 3.

At this point, we recommend upgrading to PHP 8.4 first and then directly from ORM 2.19 to 3.5 and up so that you can skip the lazy ghost proxy generation and directly start using native lazy objects.

Upgrade to 3.6

Deprecate using string expression for default values in mappings

Using a string expression for default values in field mappings is deprecated. Use Doctrine\DBAL\Schema\DefaultExpression instances instead.

Here is how to address this deprecation when mapping entities using PHP attributes:
 use DateTime;
+use Doctrine\DBAL\Schema\DefaultExpression\CurrentDate;
+use Doctrine\DBAL\Schema\DefaultExpression\CurrentTime;
+use Doctrine\DBAL\Schema\DefaultExpression\CurrentTimestamp;
 use Doctrine\ORM\Mapping as ORM;
#[ORM\Entity]
final class TimeEntity
{
#[ORM\Id]
#[ORM\Column]
</tr></table>

... (truncated)

Commits

d4e9276 Merge pull request #12325 from doctrine/3.5.x
cee74fa Merge remote-tracking branch 'origin/2.20.x' into 3.5.x
9ae2181 Merge pull request #12165 from HypeMC/debug-events-commands
3e25efd One table
47496ed Fixes
492745d docs: add xml example for Single Table Inheritance mapping (#12169)
67419cf Bump actions/download-artifact from 6 to 7 (#12321)
1237f5c Bump actions/upload-artifact from 5 to 6 (#12322)
609e616 Merge pull request #12279 from greg0ire/deprecate-conversion
4016d6b Deprecate string default expressions
Additional commits viewable in compare view

Updates gedmo/doctrine-extensions from 3.21.0 to 3.22.0

Release notes

Sourced from gedmo/doctrine-extensions's releases.

v3.22.0

Added

Support for Symfony 8

Changelog

Sourced from gedmo/doctrine-extensions's changelog.

[3.22.0] - 2025-12-13

Added

Support for Symfony 8

Commits

e4350ee 3.22.0
c821b9a Bump isbang/compose-action from 2.4.1 to 2.4.2
5b9385d Disallow "stringable_for_to_string" CS rule
e60de54 Remove invalid "@author" annotations
01365af Run CI on PHP 8.5, use 8.5 in Docker Compose env
30661a8 Fix SA issue with AbstractAnnotationDriver::getMetaReflectionClass()
8f26a3f Allow Symfony 8.x components
f69b895 Run tests with MongoDB ODM using native laxy objects, fix other deprecations
768192a Bump actions/checkout from 5 to 6
6c0d608 Bump actions/upload-artifact from 4 to 5
Additional commits viewable in compare view

Updates lexik/jwt-authentication-bundle from 3.1.1 to 3.2.0

Release notes

Sourced from lexik/jwt-authentication-bundle's releases.

v3.2.0

What's Changed

Fixed typo in UPGRADE-3.0.md by @TimoBakx in lexik/LexikJWTAuthenticationBundle#1271

Improve JWTUser phpdoc by @VincentLanglet in lexik/LexikJWTAuthenticationBundle#1277

Remove lcobucci/clock dependency by @VincentLanglet in lexik/LexikJWTAuthenticationBundle#1278

Bump actions/checkout from 4 to 5 in the dependencies group by @dependabot[bot] in lexik/LexikJWTAuthenticationBundle#1285

feat: Support Symfony 8.x & web-token suite 4.x by @dt-thomas-durand in lexik/LexikJWTAuthenticationBundle#1300

ci: Add testruns for PHP 8.5 by @Chris53897 in lexik/LexikJWTAuthenticationBundle#1303

Allow to pass extra data when handling success authentication by @VincentLanglet in lexik/LexikJWTAuthenticationBundle#1295

New Contributors

@TimoBakx made their first contribution in lexik/LexikJWTAuthenticationBundle#1271

@VincentLanglet made their first contribution in lexik/LexikJWTAuthenticationBundle#1277

@dt-thomas-durand made their first contribution in lexik/LexikJWTAuthenticationBundle#1300

Full Changelog: lexik/LexikJWTAuthenticationBundle@v3.1.1...v3.2.0

Changelog

Sourced from lexik/jwt-authentication-bundle's changelog.

Commits

60df75d Update CHANGELOG for v3.2.0
90f68f1 feature #1295 Allow to pass extra data when handling success authentication (...
8c7fb33 feature #1303 ci: Add testruns for PHP 8.5 (Chris53897, Chris8934)
dc5bc08 Allow to pass extra data when handling success authentication
6ca102b fix: PHP 8.5 deprecation related to ArrayObject
405bed3 fix: PHP 8.5 deprecation
c9a4abb ci: Add testruns for PHP 8.5
ba86546 feature #1300 feat: Support Symfony 8.x & web-token suite 4.x (dt-thomas-durand)
570a64d feat: Support Symfony 8.x
ff16ec6 Fix readme
Additional commits viewable in compare view

Updates nelmio/api-doc-bundle from 4.38.6 to 5.8.2

Release notes

Sourced from nelmio/api-doc-bundle's releases.

v5.8.2

5.8.2 (2025-11-28)

Bug Fixes

SplObjectStorage: SplObjectStorage::detach() is deprecated since 8.5, use method SplObjectStorage::offsetUnset() instead (94f6895)

Miscellaneous Chores

deps: bump @stoplight/elements from 9.0.11 to 9.0.12 in /utils (#2625) (e54c6c2)

v5.8.1

5.8.1 (2025-11-14)

Bug Fixes

configuration: validate type_info option on Symfony 6 (#2615) (3d96b9a)

v5.8.0

5.8.0 (2025-11-14)

Features

#2502: refactor Model::$type from property-info to type-info Type (ef14213)

Bug Fixes

trigger_deprecation: incorrect & missing trigger_deprecation in Model class (#2613) (52858e6)

Miscellaneous Chores

php: bump minimum to php 8.2 (#2611) (95b2057)

symfony: bumped minimum version for Symfony 7 from ^7.1 to ^7.2 (ef14213)

v5.7.1

5.7.1 (2025-11-13)

Bug Fixes

swagger-php 5.7.0 compatatiblity (#2598) (ca4ca49)

v5.7.0

5.7.0 (2025-11-10)

... (truncated)

Changelog

Sourced from nelmio/api-doc-bundle's changelog.

5.8.2 (2025-11-28)

Bug Fixes

SplObjectStorage: SplObjectStorage::detach() is deprecated since 8.5, use method SplObjectStorage::offsetUnset() instead (94f6895)

Miscellaneous Chores

deps: bump @stoplight/elements from 9.0.11 to 9.0.12 in /utils (#2625) (e54c6c2)

5.8.1 (2025-11-14)

Bug Fixes

configuration: validate type_info option on Symfony 6 (#2615) (3d96b9a)

5.8.0 (2025-11-14)

Features

#2502: refactor Model::$type from property-info to type-info Type (ef14213)

Bug Fixes

trigger_deprecation: incorrect & missing trigger_deprecation in Model class (#2613) (52858e6)

Miscellaneous Chores

php: bump minimum to php 8.2 (#2611) (95b2057)

symfony: bumped minimum version for Symfony 7 from ^7.1 to ^7.2 (ef14213)

5.7.1 (2025-11-13)

Bug Fixes

swagger-php 5.7.0 compatatiblity (#2598) (ca4ca49)

5.7.0 (2025-11-10)

Features

Implement Ulid type description in ClassDescriber (#2556) (5666ba1)

... (truncated)

Commits

b29ed29 chore(5.x): release 5.8.2 (#2626)
94f6895 fix(SplObjectStorage): SplObjectStorage::detach()`` is deprecated since 8.5...
7069df2 ci: improve matrix & check for stable dependencies (#2632)
a214910 ci: run on Symfony 7.4 (#2631)
b11e562 ci(deps): bump actions/checkout from 4 to 6 (#2624)
e54c6c2 chore(deps): bump @stoplight/elements from 9.0.11 to 9.0.12 in /utils (#2625)
c5aa046 docs(pr-template): remove mention of CHANGELOG.md (#2622)
dd2a39f ci(php): run on php 8.5 (#2621)
0631998 docs: fix docs (#2619)
b5d0cd8 docs(customization): explain how to customize the various describers (#2618)
Additional commits viewable in compare view

Updates zircote/swagger-php from 4.11.1 to 5.7.6

Release notes

Sourced from zircote/swagger-php's releases.

5.7.6

What's Changed

[v5] Methods SplObjectStorage::attach(), detach & contains() are deprecated since PHP 8.5 by @DerManoMann in zircote/swagger-php#1866

Full Changelog: zircote/swagger-php@5.7.5...5.7.6

5.7.5

What's Changed

[v5] Allow to disable default tag descriptions by @DerManoMann in zircote/swagger-php#1859

Backport AugmentItems processor by @DerManoMann in zircote/swagger-php#1863

Full Changelog: zircote/swagger-php@5.7.4...5.7.5

5.7.4

What's Changed

Backport latest changes of LegacyTypeResolver from v6 by @DerManoMann in zircote/swagger-php#1851

(chore 5.x) Add symfony8 deps by @DerManoMann in zircote/swagger-php#1855

Full Changelog: zircote/swagger-php@5.7.3...5.7.4

5.7.3

What's Changed

Consider oneOf, allOf and anyOf when deciding on whether to modify the schema type by @DerManoMann in zircote/swagger-php#1847

Full Changelog: zircote/swagger-php@5.7.2...5.7.3

5.7.2

What's Changed

Handle Mixed union type incl. array in LegacyTypeResolver by @DerManoMann in zircote/swagger-php#1844

Allow to toggle 'merge Components' and default to false by @DerManoMann in zircote/swagger-php#1849

Full Changelog: zircote/swagger-php@5.7.1...5.7.2

5.7.1

What's Changed

Merge multiple Components into a single one by @DerManoMann in zircote/swagger-php#1836

Fix parameter name matching in method docblocks for LegacyTypeResolver by @DerManoMann in zircote/swagger-php#1843

Expand test matrix by @DerManoMann in zircote/swagger-php#1842

Handle legacy MediaType::encoding values by @DerManoMann in zircote/swagger-php#1845

Full Changelog: zircote/swagger-php@5.7.0...5.7.1

5.7.0

What's Changed

... (truncated)

Commits

e4727ba Methods SplObjectStorage::attach(), detach & contains() are deprecated since ...
9a37739 Backport AugmentItems processor (#1863)
3d83540 Allow to disable default tag descriptions (#1859)
dfd637f Merge pull request #1855 from DerManoMann/5x-add-symfony8-deps
1094427 Add symfony ^8.0 to deps list
ffe101a Backport latest changes of LegacyTypeResolver from v6 (#1851)
4d0d308 Consider oneOf, allOf and anyOf when deciding on whether to modify the ...
2b832aa Allow to toggle 'merge Components' and default to false (#1849)
9cf6abe Handle Mixed union type incl. array in LegacyTypeResolver (#1844)
374262e Handle legacy MediaType::encoding values (#1845)
Additional commits viewable in compare view

Updates phpunit/phpunit from 12.5.3 to 12.5.4

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 12.5.4

Changed

The #[AllowMockObjectsWithoutExpectations] attribute can now be used on the method level

Fixed

#6446: Test runner crashes with Timer::start() has to be called before Timer::stop()

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

You can follow @phpunit@phpc.social to stay up to date with PHPUnit's development.

You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

Changelog

Sourced from phpunit/phpunit's changelog.

[12.5.4] - 2025-12-15

Changed

The #[AllowMockObjectsWithoutExpectations] attribute can now be used on the method level

Fixed

#6446: Test runner crashes with Timer::start() has to be called before Timer::stop()

Commits

4ba0e92 Prepare release
98d145b Update dependencies
5d4e7c9 Merge branch '11.5' into 12.5
47969b6 Merge branch '10.5' into 11.5
aa5c5ea Merge branch '9.6' into 10.5
729acb9 Merge branch '8.5' into 9.6
751c15e Update tools
4e76df1 Make AllowMockObjectsWithoutExpectations usable on test methods
818e27b Closes #6446
95fb0b1 Merge branch '11.5' into 12.5
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [doctrine/orm](https://github.com/doctrine/orm) | `2.20.9` | `3.6.0` | | [gedmo/doctrine-extensions](https://github.com/doctrine-extensions/DoctrineExtensions) | `3.21.0` | `3.22.0` | | [lexik/jwt-authentication-bundle](https://github.com/lexik/LexikJWTAuthenticationBundle) | `3.1.1` | `3.2.0` | | [nelmio/api-doc-bundle](https://github.com/nelmio/NelmioApiDocBundle) | `4.38.6` | `5.8.2` | | [zircote/swagger-php](https://github.com/zircote/swagger-php) | `4.11.1` | `5.7.6` | | [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) | `12.5.3` | `12.5.4` | Updates `doctrine/orm` from 2.20.9 to 3.6.0 - [Release notes](https://github.com/doctrine/orm/releases) - [Upgrade guide](https://github.com/doctrine/orm/blob/3.6.x/UPGRADE.md) - [Commits](doctrine/orm@2.20.9...3.6.0) Updates `gedmo/doctrine-extensions` from 3.21.0 to 3.22.0 - [Release notes](https://github.com/doctrine-extensions/DoctrineExtensions/releases) - [Changelog](https://github.com/doctrine-extensions/DoctrineExtensions/blob/main/CHANGELOG.md) - [Commits](doctrine-extensions/DoctrineExtensions@v3.21.0...v3.22.0) Updates `lexik/jwt-authentication-bundle` from 3.1.1 to 3.2.0 - [Release notes](https://github.com/lexik/LexikJWTAuthenticationBundle/releases) - [Changelog](https://github.com/lexik/LexikJWTAuthenticationBundle/blob/3.x/CHANGELOG.md) - [Commits](lexik/LexikJWTAuthenticationBundle@v3.1.1...v3.2.0) Updates `nelmio/api-doc-bundle` from 4.38.6 to 5.8.2 - [Release notes](https://github.com/nelmio/NelmioApiDocBundle/releases) - [Changelog](https://github.com/nelmio/NelmioApiDocBundle/blob/5.x/CHANGELOG.md) - [Commits](nelmio/NelmioApiDocBundle@v4.38.6...v5.8.2) Updates `zircote/swagger-php` from 4.11.1 to 5.7.6 - [Release notes](https://github.com/zircote/swagger-php/releases) - [Commits](zircote/swagger-php@4.11.1...5.7.6) Updates `phpunit/phpunit` from 12.5.3 to 12.5.4 - [Release notes](https://github.com/sebastianbergmann/phpunit/releases) - [Changelog](https://github.com/sebastianbergmann/phpunit/blob/12.5.4/ChangeLog-12.5.md) - [Commits](sebastianbergmann/phpunit@12.5.3...12.5.4) --- updated-dependencies: - dependency-name: doctrine/orm dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: gedmo/doctrine-extensions dependency-version: 3.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: lexik/jwt-authentication-bundle dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: nelmio/api-doc-bundle dependency-version: 5.8.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: zircote/swagger-php dependency-version: 5.7.6 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: phpunit/phpunit dependency-version: 12.5.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Dec 22, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Chore(deps): Bump the dependencies group across 1 directory with 6 updates #3141

Chore(deps): Bump the dependencies group across 1 directory with 6 updates #3141

Uh oh!

dependabot bot commented on behalf of github Dec 22, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Chore(deps): Bump the dependencies group across 1 directory with 6 updates #3141

Are you sure you want to change the base?

Chore(deps): Bump the dependencies group across 1 directory with 6 updates #3141

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 22, 2025

3.6.0

Release Notes for 3.6.0

3.6.0

New Feature

Deprecation

Improvement

Bugfixes

Documentation

Test Suite

Upgrade to 3.x General Notes

Upgrade to 3.6

Deprecate using string expression for default values in mappings

v3.22.0

Added

[3.22.0] - 2025-12-13

Added

v3.2.0

What's Changed

New Contributors

v5.8.2

5.8.2 (2025-11-28)

Bug Fixes

Miscellaneous Chores

v5.8.1

5.8.1 (2025-11-14)

Bug Fixes

v5.8.0

5.8.0 (2025-11-14)

Features

Bug Fixes

Miscellaneous Chores

v5.7.1

5.7.1 (2025-11-13)

Bug Fixes

v5.7.0

5.7.0 (2025-11-10)

5.8.2 (2025-11-28)

Bug Fixes

Miscellaneous Chores

5.8.1 (2025-11-14)

Bug Fixes

5.8.0 (2025-11-14)

Features

Bug Fixes

Miscellaneous Chores

5.7.1 (2025-11-13)

Bug Fixes

5.7.0 (2025-11-10)

Features

5.7.6

What's Changed

5.7.5

What's Changed

5.7.4

What's Changed

5.7.3

What's Changed

5.7.2

What's Changed

5.7.1

What's Changed

5.7.0

What's Changed

PHPUnit 12.5.4

Changed

Fixed

Keep up to date with PHPUnit:

[12.5.4] - 2025-12-15

Changed

Fixed

Uh oh!

Reviewers

Assignees

Labels