Bump the composer-non-major group across 1 directory with 3 updates

[dependabot]

Bumps the composer-non-major group with 3 updates in the / directory: symfony/webpack-encore-bundle, phpunit/phpunit and rector/rector.

Updates symfony/webpack-encore-bundle from 2.4.0 to 2.4.1

Release notes

Sourced from symfony/webpack-encore-bundle's releases.

v2.4.1

What's Changed

• Fix Symfony 8.1 DependencyInjection deprecation warning by @​30Sana in symfony/webpack-encore-bundle#258
• Update .gitattributes by @​gharlan in symfony/webpack-encore-bundle#256
• Add Zizmor, Dependabot, and upgrade+pin actions by @​Kocal in symfony/webpack-encore-bundle#259
• Don't let Composer advisory blocking break CI by @​Kocal in symfony/webpack-encore-bundle#261

New Contributors

• @​30Sana made their first contribution in symfony/webpack-encore-bundle#258
• @​gharlan made their first contribution in symfony/webpack-encore-bundle#256

Full Changelog: symfony/webpack-encore-bundle@v2.4.0...v2.4.1

Commits

• cac8d6c minor #261 Don't let Composer advisory blocking break CI (Kocal)
• cb3dd07 Don't let Composer advisory blocking break CI
• 9edab87 minor #259 Add Zizmor, Dependabot, and upgrade+pin actions (Kocal)
• 42e1d0c Add Zizmor, Dependabot, and upgrade+pin actions
• fee5542 minor #256 Update .gitattributes (gharlan)
• c1c96dd bug #258 Fix Symfony 8.1 DependencyInjection deprecation warning (30Sana)
• 2bee63b Fix Symfony 8.1 DependencyInjection deprecation warning
• 4286633 Update .gitattributes
• See full diff in compare view

Updates phpunit/phpunit from 13.2.0 to 13.2.1

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.2.1

Fixed

• #6741: Test is not run when --filter matches the name of a data set but not the name of the test method
• #6743: Improve error message for invalid version constraint in attribute
• #6744: Environment variable attributes reject empty-string values since PHPUnit 13.2.0

---

Learn how to install or update PHPUnit 13.2 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

Changelog

Sourced from phpunit/phpunit's changelog.

[13.2.1] - 2026-06-15

Fixed

• #6741: Test is not run when --filter matches the name of a data set but not the name of the test method
• #6743: Improve error message for invalid version constraint in attribute
• #6744: Environment variable attributes reject empty-string values since PHPUnit 13.2.0

Commits

• 60da0ff Prepare release
• a625c2a Merge branch '12.5' into 13.2
• 900400a Prepare release
• 4b16590 Fix CS/WS issues
• 073298c Closes #6744
• 9147606 Merge branch '12.5' into 13.2
• cbabf21 Update ChangeLog
• d651dab Improve error message for invalid version constraint in attribute
• 059594d Add test showing current behaviour
• 8330ffa Closes #6741
• Additional commits viewable in compare view

Updates rector/rector from 2.4.5 to 2.5.2

Release notes

Sourced from rector/rector's releases.

Released Rector 2.5.2

Bugfixes 🐛

• Match class + path in unused-skip reporting — fix combined class => [paths] skips being wrongly flagged as unused (#8073)
• Mark skip used only when rule would change the file — a class/path skip counts as "used" only if the rule would actually touch that file, killing false "used" hits (#8076)
• Improve unused-skip resolver methods — cleaner resolution internals (#8072)
• Track used skips as class => [paths] map — richer per-path skip tracking backing the report (#8074)

Released Rector 2.5.1

Bugfixes 🐛

• Skip unused-skip reporting on narrowed runs - no more false "unused skip" noise when running Rector on a subset of paths (#8069)
• Display skips only on uncached run - skip report shows on real runs, not when results come from cache (#8071)
• RemoveAlwaysTrueIfConditionRector — avoid scanning whole new statements on dynamic variable checks; moved logic to ExprAnalyzer and bail early on defined variables (#8057)

Released Rector 2.5

New Features 🥳 🎉 🎉 🎉

This release has 3 interesting new features. Let's look at them:

[dx] Report skips that never matched (#8058)

• What? - like PHPStan's reportUnusedIgnores, but for Rector ->withSkip(). Flags skip entries that never matched anything during the run, so you can delete stale skips.

• Why? - skips rot. You skip a path/rule to dodge a problem, later the file moves or the rule stops firing there — the skip lingers forever, silently masking nothing. This surfaces dead skips so config stays honest.

// rector.php
return RectorConfig::configure()
    ->withSkip([
        SimplifyUselessVariableRector::class => [
            '*/src/Legacy/*',          // still matches — fine
            '*/NonexistentUnused/*',   // matches nothing — stale
        ],
    ])
    ->reportUnusedSkips();

Run output:

 [OK] Rector is done!
[WARNING] This skip is unused, it never matched any element.
You can remove it from "->withSkip()"

Rector\CodeQuality\Rector\FunctionLike\SimplifyUselessVariableRector => /NonexistentUnused/

... (truncated)

Commits

• 49ff633 Rector 2.5.2
• 56d179b Updated Rector to commit dd21759b1194fe28cd266337124fd3035c62ead9
• 228203d Updated Rector to commit 2328ea6338d2496c409aaf2d8a001052e323feda
• d7cb788 Updated Rector to commit 19dcdb7816f10cb502a1b2ef5a6628185f74e49d
• 76d81c5 Updated Rector to commit aea1570424613c9a0acbf80c3abeb41d7dd33dbe
• 34a9124 Rector 2.5.1
• 6502d60 Updated Rector to commit df98b3b4e5f024d2260edc233dc9cb4adfe6a3e0
• b74237c Updated Rector to commit 84ab911ef53267aa1c4a9466064def614e486eea
• e3c4ee7 Updated Rector to commit 3893ea422afa3fb801ae64fa546c8a2cb24b0f97
• bdd26a9 Updated Rector to commit 580b374ea3638fd50cf9b98b84445cd9fe53768e
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions