Skip to content

Update dependency php to >=8.5.4#151

Closed
AlexSkrypnyk wants to merge 1 commit intodevelopfrom
deps/php-8.x
Closed

Update dependency php to >=8.5.4#151
AlexSkrypnyk wants to merge 1 commit intodevelopfrom
deps/php-8.x

Conversation

@AlexSkrypnyk
Copy link
Copy Markdown
Member

@AlexSkrypnyk AlexSkrypnyk commented Mar 13, 2026

This PR contains the following updates:

Package Type Update Change
php require minor >=8.3 -> >=8.5.4

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

containerbase/php-prebuild (php)

v8.5.4

Compare Source

Bug Fixes
  • deps: update dependency php to v8.5.4

v8.5.3

Compare Source

Bug Fixes
  • deps: update dependency php to v8.5.3

v8.5.2

Compare Source

Bug Fixes
  • deps: update dependency php to v8.5.2

v8.5.1

Compare Source

Bug Fixes
  • deps: update dependency php to v8.5.1

v8.5.0

Compare Source

Bug Fixes
  • deps: update dependency php to v8.5.0

v8.4.19

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.19

v8.4.18

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.18

v8.4.17

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.17

v8.4.16

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.16

v8.4.15

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.15

v8.4.14

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.14

v8.4.13

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.13

v8.4.12

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.12

v8.4.11

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.11

v8.4.10

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.10

v8.4.8

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.8

v8.4.7

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.7

v8.4.6

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.6

v8.4.5

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.5

v8.4.4

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.4

v8.4.3

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.3

v8.4.2

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.2

v8.4.1

Compare Source

Bug Fixes
  • deps: update dependency php to v8.4.1

v8.3.30

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.30

v8.3.29

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.29

v8.3.28

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.28

v8.3.27

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.27

v8.3.26

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.26

v8.3.25

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.25

v8.3.24

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.24

v8.3.23

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.23

v8.3.22

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.22

v8.3.21

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.21

v8.3.20

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.20

v8.3.19

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.19

v8.3.17

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.17

v8.3.16

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.16

v8.3.15

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.15

v8.3.14

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.14

v8.3.13

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.13

v8.3.12

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.12

v8.3.11

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.11

v8.3.10

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.10

v8.3.9

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.9

v8.3.8

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.8

v8.3.7

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.7

v8.3.6

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.6

v8.3.4

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.4

v8.3.3

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.3

v8.3.2

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.2

v8.3.1

Compare Source

Bug Fixes
  • deps: update dependency php to v8.3.1

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@AlexSkrypnyk AlexSkrypnyk added the Dependencies Pull request was raised automatically by a dependency bot label Mar 13, 2026
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Mar 13, 2026

📝 Walkthrough

Walkthrough

The PHP minimum version requirement in the drevops theme's composer.json was updated from 8.3 to 8.5.4, reflecting a constraint change for the theme's PHP compatibility.

Changes

Cohort / File(s) Summary
PHP Version Requirement Update
web/themes/custom/drevops/composer.json
Updated minimum PHP requirement from >=8.3 to >=8.5.4 in the theme's composer.json configuration.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately and concisely describes the main change: updating the PHP dependency requirement from >=8.3 to >=8.5.4 in the composer.json file.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch deps/php-8.x
📝 Coding Plan
  • Generate coding plan for human review comments

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@web/themes/custom/drevops/composer.json`:
- Line 7: Replace the overly strict "php" constraint in the theme's
composer.json: change the "php": ">=8.5.4" entry to a bounded constraint (e.g.,
"php": "^8.5") to allow normal semver updates and align with the project's
intent; if you truly require a minimum patch of 8.5.4, use a bounded range like
"php": ">=8.5.4 <9.0" instead. Ensure you update the "php" key in composer.json
(the existing "php" constraint) accordingly.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 5bb03399-7018-4176-9bce-38c15cab7ac4

📥 Commits

Reviewing files that changed from the base of the PR and between 7463c54 and c6aa60a.

📒 Files selected for processing (1)
  • web/themes/custom/drevops/composer.json

"license": "proprietary",
"require": {
"php": ">=8.3"
"php": ">=8.5.4"
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== composer.json PHP constraints =="
python - <<'PY'
import json, pathlib
for p in pathlib.Path('.').rglob('composer.json'):
    try:
        data = json.loads(p.read_text())
    except Exception:
        continue
    php_req = (data.get('require') or {}).get('php')
    if php_req is not None:
        print(f"{p}\t{php_req}")
PY

echo
echo "== Referenced PHP versions in CI/docs/tooling =="
rg -n --glob '**/*.yml' --glob '**/*.yaml' --glob '**/Dockerfile*' --glob '**/.tool-versions' --glob '**/*.md' '8\.5\.4|8\.5|8\.4|8\.3|php-version|platform\.php'

Repository: drevops/website

Length of output: 380


Use a bounded PHP constraint instead of >=8.5.4.

The constraint at line 7 excludes PHP 8.5.0–8.5.3 and implicitly allows future major versions without clear justification. The root composer.json uses >=8.3, making this theme's jump to >=8.5.4 inconsistent and unnecessarily restrictive. Use ^8.5 unless 8.5.4 is explicitly required by a documented runtime fix.

Suggested constraint update
-        "php": ">=8.5.4"
+        "php": "^8.5"

If 8.5.4 patch floor is required:

-        "php": ">=8.5.4"
+        "php": "^8.5.4"
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
"php": ">=8.5.4"
"php": "^8.5"
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@web/themes/custom/drevops/composer.json` at line 7, Replace the overly strict
"php" constraint in the theme's composer.json: change the "php": ">=8.5.4" entry
to a bounded constraint (e.g., "php": "^8.5") to allow normal semver updates and
align with the project's intent; if you truly require a minimum patch of 8.5.4,
use a bounded range like "php": ">=8.5.4 <9.0" instead. Ensure you update the
"php" key in composer.json (the existing "php" constraint) accordingly.

@AlexSkrypnyk AlexSkrypnyk deleted the deps/php-8.x branch March 14, 2026 06:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull request was raised automatically by a dependency bot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant