Update non-major-updates - #48

Merged
pjaudiomv merged 1 commit into
mainfrom
renovate/non-major-updates
May 23, 2026
Merged

Update non-major-updates#48
pjaudiomv merged 1 commit into
mainfrom
renovate/non-major-updates

Conversation

@renovate

@renovaterenovateBot commented Nov 10, 2025•
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

PackageTypeUpdateChangeAgeConfidence
ncipollo/release-actionactionminorv1.20.0 → v1.21.0ageconfidence
squizlabs/php_codesnifferrequire-devpatch3.13.4 → 3.13.5ageconfidence
wordpressfinalminor6.8.3-php8.3-apache → 6.9.4-php8.3-apacheageconfidence
wp-coding-standards/wpcsrequire-devminor3.2.0 → 3.3.0ageconfidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

ncipollo/release-action (ncipollo/release-action)

v1.21.0

Compare Source

What's Changed

Full Changelog: ncipollo/release-action@v1...v1.21.0

PHPCSStandards/PHP_CodeSniffer (squizlabs/php_codesniffer)

v3.13.5: - 2025-11-04

Compare Source

Added
  • Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed.
    • Syntax support for new PHP 8.5 features will follow in a future release.
    • If you find any PHP 8.5 deprecation notices which were missed, please report them.
Changed
Fixed
  • Fixed bug #​1216: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 "Using null as an array offset" deprecation notices.
  • Fixed bug #​1279: Tokenizer/PHP: on PHP < 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream.
    • This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.
    • Thanks to Juliette Reinders Folmer for the patch.
Other
  • Please be aware that the master branch has been renamed to 3.x and the default branch has changed to the 4.x branch.
    • If you contribute to PHP_CodeSniffer, you will need to update your local git clone.
    • If you develop against PHP_CodeSniffer and run your tests against dev branches of PHPCS, you will need to update your workflows.
New Contributors

The PHP_CodeSniffer project is happy to welcome the following new contributors:
@​andrewnicols

Statistics

Closed: 2 issues
Merged: 36 pull requests

Follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X to stay informed.

Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!

WordPress/WordPress-Coding-Standards (wp-coding-standards/wpcs)

v3.3.0

Compare Source

Added
  • Support for attributes on anonymous classes (PHP 8.0) and readonly anonymous classes (PHP 8.3) to the WordPress.Security.EscapeOutput sniff. Props [@​rodrigoprimo]. #​2559
  • Support for handling "exit as a function call" (PHP 8.4) to the WordPress.Security.EscapeOutput sniff. #​2563
  • WordPress-Extra: the following sniffs have been added to the ruleset: Universal.Attributes.BracketSpacing and Universal.Attributes.DisallowAttributeParentheses. #​2646
Changed
  • The minimum supported PHP version is now PHP 7.2 (was PHP 5.4). #​2614
  • The minimum required PHP_CodeSniffer version to 3.13.4 (was 3.13.0). #​2630
  • The minimum required PHPCSExtra version to 1.5.0 (was 1.4.0). #​2646
  • The default value for minimum_wp_version, as used by a number of sniffs detecting usage of deprecated WP features, has been updated to 6.6. #​2656
  • WordPress.DB.DirectDatabaseQuery will now recognize more caching functions, like the wp_cache_*_multiple() functions as added in WordPress 6.0 and the wp_cache_*_salted() functions as added in WordPress 6.9. #​2654
  • WordPress.NamingConventions.PrefixAllGlobals has been updated to recognize pluggable functions introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.ClassNameCase has been updated to recognize classes introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedFunctions now detects functions deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedParameters now detects parameters deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.Security.ValidatedSanitizedInput: improved the clarity of the error message for the InputNotValidated error code. Props [@​rodrigoprimo]. #​2642
  • README: updated testVersion recommendations for PHPCompatibility. Props [@​johnjago]. #​2471
  • Example ruleset: updated the minimum_wp_version and testVersion recommendations. #​2608
  • All sniffs are now also being tested against PHP 8.5 for consistent sniff results. #​2649
  • Various housekeeping, including documentation and test improvements. Includes contributions by [@​rodrigoprimo].
Deprecated
  • The WordPress.PHP.POSIXFunctions sniff (as it is no longer relevant). #​2616
Removed
  • wp_kses_allowed_html() from the list of escaping functions. #​2566
    This affects the WordPress.Security.EscapeOutput sniff.
Fixed
  • WordPress.DB.DirectDatabaseQuery: false positive when function call to caching functions did not use the canonical function name. Props [@​rodrigoprimo]. #​2613
  • WordPress.DB.DirectDatabaseQuery: potential false negative when a class property or constant would mirror the name of one of the caching functions. Props [@​rodrigoprimo]. #​2615
  • WordPress.DB.PreparedSQL: false positive for correctly escaped SQL snippets when the function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2570
  • WordPress.DB.PreparedSQLPlaceholders: improved handling of fully qualified calls to global functions. Props [@​rodrigoprimo]. #​2569
  • WordPress.Security.EscapeOutput: expanded protection against false positives for *::class. Props [@​rodrigoprimo]. #​2605
  • WordPress.Security.NonceVerification: false positive when nonce checking function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2572
  • WordPress.WP.EnqueuedResourceParameters: the sniff could cause a PHP 8.5 deprecation notice if the code under scan contained one of the deprecated type casts. #​2573
  • WordPress.WP.EnqueuedResourceParameters: improved recognition of non-lowercase and fully qualified true/false/null when passed as the $ver parameter value. Props [@​rodrigoprimo]. #​2630

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "after 8am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovateBotforce-pushed the renovate/non-major-updates branch from 21299dd to a6388ecCompareNovember 21, 2025 05:04
@renovaterenovateBot changed the title Update dependency squizlabs/php_codesniffer to v3.13.5Update non-major-updatesNov 21, 2025
@renovate
renovateBotforce-pushed the renovate/non-major-updates branch from a6388ec to bef4f70CompareNovember 25, 2025 13:50
@renovate
renovateBotforce-pushed the renovate/non-major-updates branch 2 times, most recently from 5f23f3e to a36c598CompareDecember 10, 2025 12:55
@renovate
renovateBotforce-pushed the renovate/non-major-updates branch from a36c598 to a501790CompareFebruary 4, 2026 02:02
@renovate
renovateBotforce-pushed the renovate/non-major-updates branch from a501790 to 10f32d3CompareFebruary 13, 2026 05:11
@renovate
renovateBotforce-pushed the renovate/non-major-updates branch 3 times, most recently from 9cfcc98 to 6a4a3d9CompareMarch 15, 2026 01:09
@renovate
renovateBotforce-pushed the renovate/non-major-updates branch from 6a4a3d9 to b9367c6CompareMay 23, 2026 13:40
@pjaudiomv
pjaudiomv merged commit e5a7d48 into mainMay 23, 2026
1 check passed
@pjaudiomv
pjaudiomv deleted the renovate/non-major-updates branch May 23, 2026 14:33
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@pjaudiomv
, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
Update non-major-updates - #48
Merged
pjaudiomv merged 1 commit into
mainfrom 
renovate/non-major-updates
May 23, 2026
Merged
Update non-major-updates#48
pjaudiomv merged 1 commit into
mainfrom 
renovate/non-major-updates
Conversation
@renovate
@renovaterenovateBot
commented
Nov 10, 2025•

edited

Loading

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChangeAgeConfidence
ncipollo/release-actionactionminorv1.20.0 → v1.21.0ageconfidence
squizlabs/php_codesnifferrequire-devpatch3.13.4 → 3.13.5ageconfidence
wordpressfinalminor6.8.3-php8.3-apache → 6.9.4-php8.3-apacheageconfidence
wp-coding-standards/wpcsrequire-devminor3.2.0 → 3.3.0ageconfidence
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
ncipollo/release-action (ncipollo/release-action)
v1.21.0
Compare Source
What's Changed
Full Changelog: ncipollo/release-action@v1...v1.21.0
PHPCSStandards/PHP_CodeSniffer (squizlabs/php_codesniffer)
v3.13.5: - 2025-11-04
Compare Source
Added
  • Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed.

    • Syntax support for new PHP 8.5 features will follow in a future release.
    • If you find any PHP 8.5 deprecation notices which were missed, please report them.
Changed
Fixed
  • Fixed bug #​1216: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 "Using null as an array offset" deprecation notices.

  • Fixed bug #​1279: Tokenizer/PHP: on PHP < 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream.

    • This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.
    • Thanks to Juliette Reinders Folmer for the patch.
Other
  • Please be aware that the master branch has been renamed to 3.x and the default branch has changed to the 4.x branch.

    • If you contribute to PHP_CodeSniffer, you will need to update your local git clone.
    • If you develop against PHP_CodeSniffer and run your tests against dev branches of PHPCS, you will need to update your workflows.
New Contributors
The PHP_CodeSniffer project is happy to welcome the following new contributors:
@​andrewnicols
Statistics
Closed: 2 issues
Merged: 36 pull requests
Follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X to stay informed.
Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!
WordPress/WordPress-Coding-Standards (wp-coding-standards/wpcs)
v3.3.0
Compare Source
Added
  • Support for attributes on anonymous classes (PHP 8.0) and readonly anonymous classes (PHP 8.3) to the WordPress.Security.EscapeOutput sniff. Props [@​rodrigoprimo]. #​2559
  • Support for handling "exit as a function call" (PHP 8.4) to the WordPress.Security.EscapeOutput sniff. #​2563
  • WordPress-Extra: the following sniffs have been added to the ruleset: Universal.Attributes.BracketSpacing and Universal.Attributes.DisallowAttributeParentheses. #​2646
Changed
  • The minimum supported PHP version is now PHP 7.2 (was PHP 5.4). #​2614
  • The minimum required PHP_CodeSniffer version to 3.13.4 (was 3.13.0). #​2630
  • The minimum required PHPCSExtra version to 1.5.0 (was 1.4.0). #​2646
  • The default value for minimum_wp_version, as used by a number of sniffs detecting usage of deprecated WP features, has been updated to 6.6. #​2656
  • WordPress.DB.DirectDatabaseQuery will now recognize more caching functions, like the wp_cache_*_multiple() functions as added in WordPress 6.0 and the wp_cache_*_salted() functions as added in WordPress 6.9. #​2654
  • WordPress.NamingConventions.PrefixAllGlobals has been updated to recognize pluggable functions introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.ClassNameCase has been updated to recognize classes introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedFunctions now detects functions deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedParameters now detects parameters deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.Security.ValidatedSanitizedInput: improved the clarity of the error message for the InputNotValidated error code. Props [@​rodrigoprimo]. #​2642
  • README: updated testVersion recommendations for PHPCompatibility. Props [@​johnjago]. #​2471
  • Example ruleset: updated the minimum_wp_version and testVersion recommendations. #​2608
  • All sniffs are now also being tested against PHP 8.5 for consistent sniff results. #​2649
  • Various housekeeping, including documentation and test improvements. Includes contributions by [@​rodrigoprimo].
Deprecated
  • The WordPress.PHP.POSIXFunctions sniff (as it is no longer relevant). #​2616
Removed
  • wp_kses_allowed_html() from the list of escaping functions. #​2566
    
This affects the WordPress.Security.EscapeOutput sniff.
Fixed
  • WordPress.DB.DirectDatabaseQuery: false positive when function call to caching functions did not use the canonical function name. Props [@​rodrigoprimo]. #​2613
  • WordPress.DB.DirectDatabaseQuery: potential false negative when a class property or constant would mirror the name of one of the caching functions. Props [@​rodrigoprimo]. #​2615
  • WordPress.DB.PreparedSQL: false positive for correctly escaped SQL snippets when the function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2570
  • WordPress.DB.PreparedSQLPlaceholders: improved handling of fully qualified calls to global functions. Props [@​rodrigoprimo]. #​2569
  • WordPress.Security.EscapeOutput: expanded protection against false positives for *::class. Props [@​rodrigoprimo]. #​2605
  • WordPress.Security.NonceVerification: false positive when nonce checking function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2572
  • WordPress.WP.EnqueuedResourceParameters: the sniff could cause a PHP 8.5 deprecation notice if the code under scan contained one of the deprecated type casts. #​2573
  • WordPress.WP.EnqueuedResourceParameters: improved recognition of non-lowercase and fully qualified true/false/null when passed as the $ver parameter value. Props [@​rodrigoprimo]. #​2630
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • "after 8am on Monday"
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
  •  If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
21299dd to
a6388ecCompareNovember 21, 2025 05:04
@renovaterenovateBot
changed the title
Update dependency squizlabs/php_codesniffer to v3.13.5Update non-major-updatesNov 21, 2025
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a6388ec to
bef4f70CompareNovember 25, 2025 13:50
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
2 times, most recently
from
5f23f3e to
a36c598CompareDecember 10, 2025 12:55
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a36c598 to
a501790CompareFebruary 4, 2026 02:02
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a501790 to
10f32d3CompareFebruary 13, 2026 05:11
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
3 times, most recently
from
9cfcc98 to
6a4a3d9CompareMarch 15, 2026 01:09
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
6a4a3d9 to
b9367c6CompareMay 23, 2026 13:40
@pjaudiomv
pjaudiomv
merged commit e5a7d48
into
mainMay 23, 2026

1 check passed

@pjaudiomv
pjaudiomv
deleted the

renovate/non-major-updates

branch
May 23, 2026 14:33
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@pjaudiomv

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Update non-major-updates - #48
Merged
pjaudiomv merged 1 commit into
mainfrom 
renovate/non-major-updates
May 23, 2026
Merged
Update non-major-updates#48
pjaudiomv merged 1 commit into
mainfrom 
renovate/non-major-updates
Conversation
@renovate
@renovaterenovateBot
commented
Nov 10, 2025•

edited

Loading

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChangeAgeConfidence
ncipollo/release-actionactionminorv1.20.0 → v1.21.0ageconfidence
squizlabs/php_codesnifferrequire-devpatch3.13.4 → 3.13.5ageconfidence
wordpressfinalminor6.8.3-php8.3-apache → 6.9.4-php8.3-apacheageconfidence
wp-coding-standards/wpcsrequire-devminor3.2.0 → 3.3.0ageconfidence
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
ncipollo/release-action (ncipollo/release-action)
v1.21.0
Compare Source
What's Changed
Full Changelog: ncipollo/release-action@v1...v1.21.0
PHPCSStandards/PHP_CodeSniffer (squizlabs/php_codesniffer)
v3.13.5: - 2025-11-04
Compare Source
Added
  • Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed.

    • Syntax support for new PHP 8.5 features will follow in a future release.
    • If you find any PHP 8.5 deprecation notices which were missed, please report them.
Changed
Fixed
  • Fixed bug #​1216: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 "Using null as an array offset" deprecation notices.

  • Fixed bug #​1279: Tokenizer/PHP: on PHP < 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream.

    • This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.
    • Thanks to Juliette Reinders Folmer for the patch.
Other
  • Please be aware that the master branch has been renamed to 3.x and the default branch has changed to the 4.x branch.

    • If you contribute to PHP_CodeSniffer, you will need to update your local git clone.
    • If you develop against PHP_CodeSniffer and run your tests against dev branches of PHPCS, you will need to update your workflows.
New Contributors
The PHP_CodeSniffer project is happy to welcome the following new contributors:
@​andrewnicols
Statistics
Closed: 2 issues
Merged: 36 pull requests
Follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X to stay informed.
Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!
WordPress/WordPress-Coding-Standards (wp-coding-standards/wpcs)
v3.3.0
Compare Source
Added
  • Support for attributes on anonymous classes (PHP 8.0) and readonly anonymous classes (PHP 8.3) to the WordPress.Security.EscapeOutput sniff. Props [@​rodrigoprimo]. #​2559
  • Support for handling "exit as a function call" (PHP 8.4) to the WordPress.Security.EscapeOutput sniff. #​2563
  • WordPress-Extra: the following sniffs have been added to the ruleset: Universal.Attributes.BracketSpacing and Universal.Attributes.DisallowAttributeParentheses. #​2646
Changed
  • The minimum supported PHP version is now PHP 7.2 (was PHP 5.4). #​2614
  • The minimum required PHP_CodeSniffer version to 3.13.4 (was 3.13.0). #​2630
  • The minimum required PHPCSExtra version to 1.5.0 (was 1.4.0). #​2646
  • The default value for minimum_wp_version, as used by a number of sniffs detecting usage of deprecated WP features, has been updated to 6.6. #​2656
  • WordPress.DB.DirectDatabaseQuery will now recognize more caching functions, like the wp_cache_*_multiple() functions as added in WordPress 6.0 and the wp_cache_*_salted() functions as added in WordPress 6.9. #​2654
  • WordPress.NamingConventions.PrefixAllGlobals has been updated to recognize pluggable functions introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.ClassNameCase has been updated to recognize classes introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedFunctions now detects functions deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedParameters now detects parameters deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.Security.ValidatedSanitizedInput: improved the clarity of the error message for the InputNotValidated error code. Props [@​rodrigoprimo]. #​2642
  • README: updated testVersion recommendations for PHPCompatibility. Props [@​johnjago]. #​2471
  • Example ruleset: updated the minimum_wp_version and testVersion recommendations. #​2608
  • All sniffs are now also being tested against PHP 8.5 for consistent sniff results. #​2649
  • Various housekeeping, including documentation and test improvements. Includes contributions by [@​rodrigoprimo].
Deprecated
  • The WordPress.PHP.POSIXFunctions sniff (as it is no longer relevant). #​2616
Removed
  • wp_kses_allowed_html() from the list of escaping functions. #​2566
    
This affects the WordPress.Security.EscapeOutput sniff.
Fixed
  • WordPress.DB.DirectDatabaseQuery: false positive when function call to caching functions did not use the canonical function name. Props [@​rodrigoprimo]. #​2613
  • WordPress.DB.DirectDatabaseQuery: potential false negative when a class property or constant would mirror the name of one of the caching functions. Props [@​rodrigoprimo]. #​2615
  • WordPress.DB.PreparedSQL: false positive for correctly escaped SQL snippets when the function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2570
  • WordPress.DB.PreparedSQLPlaceholders: improved handling of fully qualified calls to global functions. Props [@​rodrigoprimo]. #​2569
  • WordPress.Security.EscapeOutput: expanded protection against false positives for *::class. Props [@​rodrigoprimo]. #​2605
  • WordPress.Security.NonceVerification: false positive when nonce checking function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2572
  • WordPress.WP.EnqueuedResourceParameters: the sniff could cause a PHP 8.5 deprecation notice if the code under scan contained one of the deprecated type casts. #​2573
  • WordPress.WP.EnqueuedResourceParameters: improved recognition of non-lowercase and fully qualified true/false/null when passed as the $ver parameter value. Props [@​rodrigoprimo]. #​2630
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • "after 8am on Monday"
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
  •  If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
21299dd to
a6388ecCompareNovember 21, 2025 05:04
@renovaterenovateBot
changed the title
Update dependency squizlabs/php_codesniffer to v3.13.5Update non-major-updatesNov 21, 2025
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a6388ec to
bef4f70CompareNovember 25, 2025 13:50
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
2 times, most recently
from
5f23f3e to
a36c598CompareDecember 10, 2025 12:55
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a36c598 to
a501790CompareFebruary 4, 2026 02:02
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a501790 to
10f32d3CompareFebruary 13, 2026 05:11
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
3 times, most recently
from
9cfcc98 to
6a4a3d9CompareMarch 15, 2026 01:09
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
6a4a3d9 to
b9367c6CompareMay 23, 2026 13:40
@pjaudiomv
pjaudiomv
merged commit e5a7d48
into
mainMay 23, 2026

1 check passed

@pjaudiomv
pjaudiomv
deleted the

renovate/non-major-updates

branch
May 23, 2026 14:33
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@pjaudiomv

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Update non-major-updates - #48
Merged
pjaudiomv merged 1 commit into
mainfrom 
renovate/non-major-updates
May 23, 2026
Merged
Update non-major-updates#48
pjaudiomv merged 1 commit into
mainfrom 
renovate/non-major-updates
Conversation
@renovate
@renovaterenovateBot
commented
Nov 10, 2025•

edited

Loading

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChangeAgeConfidence
ncipollo/release-actionactionminorv1.20.0 → v1.21.0ageconfidence
squizlabs/php_codesnifferrequire-devpatch3.13.4 → 3.13.5ageconfidence
wordpressfinalminor6.8.3-php8.3-apache → 6.9.4-php8.3-apacheageconfidence
wp-coding-standards/wpcsrequire-devminor3.2.0 → 3.3.0ageconfidence
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
ncipollo/release-action (ncipollo/release-action)
v1.21.0
Compare Source
What's Changed
Full Changelog: ncipollo/release-action@v1...v1.21.0
PHPCSStandards/PHP_CodeSniffer (squizlabs/php_codesniffer)
v3.13.5: - 2025-11-04
Compare Source
Added
  • Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed.

    • Syntax support for new PHP 8.5 features will follow in a future release.
    • If you find any PHP 8.5 deprecation notices which were missed, please report them.
Changed
Fixed
  • Fixed bug #​1216: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 "Using null as an array offset" deprecation notices.

  • Fixed bug #​1279: Tokenizer/PHP: on PHP < 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream.

    • This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.
    • Thanks to Juliette Reinders Folmer for the patch.
Other
  • Please be aware that the master branch has been renamed to 3.x and the default branch has changed to the 4.x branch.

    • If you contribute to PHP_CodeSniffer, you will need to update your local git clone.
    • If you develop against PHP_CodeSniffer and run your tests against dev branches of PHPCS, you will need to update your workflows.
New Contributors
The PHP_CodeSniffer project is happy to welcome the following new contributors:
@​andrewnicols
Statistics
Closed: 2 issues
Merged: 36 pull requests
Follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X to stay informed.
Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!
WordPress/WordPress-Coding-Standards (wp-coding-standards/wpcs)
v3.3.0
Compare Source
Added
  • Support for attributes on anonymous classes (PHP 8.0) and readonly anonymous classes (PHP 8.3) to the WordPress.Security.EscapeOutput sniff. Props [@​rodrigoprimo]. #​2559
  • Support for handling "exit as a function call" (PHP 8.4) to the WordPress.Security.EscapeOutput sniff. #​2563
  • WordPress-Extra: the following sniffs have been added to the ruleset: Universal.Attributes.BracketSpacing and Universal.Attributes.DisallowAttributeParentheses. #​2646
Changed
  • The minimum supported PHP version is now PHP 7.2 (was PHP 5.4). #​2614
  • The minimum required PHP_CodeSniffer version to 3.13.4 (was 3.13.0). #​2630
  • The minimum required PHPCSExtra version to 1.5.0 (was 1.4.0). #​2646
  • The default value for minimum_wp_version, as used by a number of sniffs detecting usage of deprecated WP features, has been updated to 6.6. #​2656
  • WordPress.DB.DirectDatabaseQuery will now recognize more caching functions, like the wp_cache_*_multiple() functions as added in WordPress 6.0 and the wp_cache_*_salted() functions as added in WordPress 6.9. #​2654
  • WordPress.NamingConventions.PrefixAllGlobals has been updated to recognize pluggable functions introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.ClassNameCase has been updated to recognize classes introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedFunctions now detects functions deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedParameters now detects parameters deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.Security.ValidatedSanitizedInput: improved the clarity of the error message for the InputNotValidated error code. Props [@​rodrigoprimo]. #​2642
  • README: updated testVersion recommendations for PHPCompatibility. Props [@​johnjago]. #​2471
  • Example ruleset: updated the minimum_wp_version and testVersion recommendations. #​2608
  • All sniffs are now also being tested against PHP 8.5 for consistent sniff results. #​2649
  • Various housekeeping, including documentation and test improvements. Includes contributions by [@​rodrigoprimo].
Deprecated
  • The WordPress.PHP.POSIXFunctions sniff (as it is no longer relevant). #​2616
Removed
  • wp_kses_allowed_html() from the list of escaping functions. #​2566
    
This affects the WordPress.Security.EscapeOutput sniff.
Fixed
  • WordPress.DB.DirectDatabaseQuery: false positive when function call to caching functions did not use the canonical function name. Props [@​rodrigoprimo]. #​2613
  • WordPress.DB.DirectDatabaseQuery: potential false negative when a class property or constant would mirror the name of one of the caching functions. Props [@​rodrigoprimo]. #​2615
  • WordPress.DB.PreparedSQL: false positive for correctly escaped SQL snippets when the function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2570
  • WordPress.DB.PreparedSQLPlaceholders: improved handling of fully qualified calls to global functions. Props [@​rodrigoprimo]. #​2569
  • WordPress.Security.EscapeOutput: expanded protection against false positives for *::class. Props [@​rodrigoprimo]. #​2605
  • WordPress.Security.NonceVerification: false positive when nonce checking function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2572
  • WordPress.WP.EnqueuedResourceParameters: the sniff could cause a PHP 8.5 deprecation notice if the code under scan contained one of the deprecated type casts. #​2573
  • WordPress.WP.EnqueuedResourceParameters: improved recognition of non-lowercase and fully qualified true/false/null when passed as the $ver parameter value. Props [@​rodrigoprimo]. #​2630
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • "after 8am on Monday"
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
  •  If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
21299dd to
a6388ecCompareNovember 21, 2025 05:04
@renovaterenovateBot
changed the title
Update dependency squizlabs/php_codesniffer to v3.13.5Update non-major-updatesNov 21, 2025
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a6388ec to
bef4f70CompareNovember 25, 2025 13:50
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
2 times, most recently
from
5f23f3e to
a36c598CompareDecember 10, 2025 12:55
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a36c598 to
a501790CompareFebruary 4, 2026 02:02
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a501790 to
10f32d3CompareFebruary 13, 2026 05:11
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
3 times, most recently
from
9cfcc98 to
6a4a3d9CompareMarch 15, 2026 01:09
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
6a4a3d9 to
b9367c6CompareMay 23, 2026 13:40
@pjaudiomv
pjaudiomv
merged commit e5a7d48
into
mainMay 23, 2026

1 check passed

@pjaudiomv
pjaudiomv
deleted the

renovate/non-major-updates

branch
May 23, 2026 14:33
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@pjaudiomv

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
Update non-major-updates - #48
Merged
pjaudiomv merged 1 commit into
mainfrom 
renovate/non-major-updates
May 23, 2026
Merged
Update non-major-updates#48
pjaudiomv merged 1 commit into
mainfrom 
renovate/non-major-updates
Conversation
@renovate
@renovaterenovateBot
commented
Nov 10, 2025•

edited

Loading

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChangeAgeConfidence
ncipollo/release-actionactionminorv1.20.0 → v1.21.0ageconfidence
squizlabs/php_codesnifferrequire-devpatch3.13.4 → 3.13.5ageconfidence
wordpressfinalminor6.8.3-php8.3-apache → 6.9.4-php8.3-apacheageconfidence
wp-coding-standards/wpcsrequire-devminor3.2.0 → 3.3.0ageconfidence
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
ncipollo/release-action (ncipollo/release-action)
v1.21.0
Compare Source
What's Changed
Full Changelog: ncipollo/release-action@v1...v1.21.0
PHPCSStandards/PHP_CodeSniffer (squizlabs/php_codesniffer)
v3.13.5: - 2025-11-04
Compare Source
Added
  • Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed.

    • Syntax support for new PHP 8.5 features will follow in a future release.
    • If you find any PHP 8.5 deprecation notices which were missed, please report them.
Changed
Fixed
  • Fixed bug #​1216: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 "Using null as an array offset" deprecation notices.

  • Fixed bug #​1279: Tokenizer/PHP: on PHP < 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream.

    • This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.
    • Thanks to Juliette Reinders Folmer for the patch.
Other
  • Please be aware that the master branch has been renamed to 3.x and the default branch has changed to the 4.x branch.

    • If you contribute to PHP_CodeSniffer, you will need to update your local git clone.
    • If you develop against PHP_CodeSniffer and run your tests against dev branches of PHPCS, you will need to update your workflows.
New Contributors
The PHP_CodeSniffer project is happy to welcome the following new contributors:
@​andrewnicols
Statistics
Closed: 2 issues
Merged: 36 pull requests
Follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X to stay informed.
Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!
WordPress/WordPress-Coding-Standards (wp-coding-standards/wpcs)
v3.3.0
Compare Source
Added
  • Support for attributes on anonymous classes (PHP 8.0) and readonly anonymous classes (PHP 8.3) to the WordPress.Security.EscapeOutput sniff. Props [@​rodrigoprimo]. #​2559
  • Support for handling "exit as a function call" (PHP 8.4) to the WordPress.Security.EscapeOutput sniff. #​2563
  • WordPress-Extra: the following sniffs have been added to the ruleset: Universal.Attributes.BracketSpacing and Universal.Attributes.DisallowAttributeParentheses. #​2646
Changed
  • The minimum supported PHP version is now PHP 7.2 (was PHP 5.4). #​2614
  • The minimum required PHP_CodeSniffer version to 3.13.4 (was 3.13.0). #​2630
  • The minimum required PHPCSExtra version to 1.5.0 (was 1.4.0). #​2646
  • The default value for minimum_wp_version, as used by a number of sniffs detecting usage of deprecated WP features, has been updated to 6.6. #​2656
  • WordPress.DB.DirectDatabaseQuery will now recognize more caching functions, like the wp_cache_*_multiple() functions as added in WordPress 6.0 and the wp_cache_*_salted() functions as added in WordPress 6.9. #​2654
  • WordPress.NamingConventions.PrefixAllGlobals has been updated to recognize pluggable functions introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.ClassNameCase has been updated to recognize classes introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedFunctions now detects functions deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedParameters now detects parameters deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.Security.ValidatedSanitizedInput: improved the clarity of the error message for the InputNotValidated error code. Props [@​rodrigoprimo]. #​2642
  • README: updated testVersion recommendations for PHPCompatibility. Props [@​johnjago]. #​2471
  • Example ruleset: updated the minimum_wp_version and testVersion recommendations. #​2608
  • All sniffs are now also being tested against PHP 8.5 for consistent sniff results. #​2649
  • Various housekeeping, including documentation and test improvements. Includes contributions by [@​rodrigoprimo].
Deprecated
  • The WordPress.PHP.POSIXFunctions sniff (as it is no longer relevant). #​2616
Removed
  • wp_kses_allowed_html() from the list of escaping functions. #​2566
    
This affects the WordPress.Security.EscapeOutput sniff.
Fixed
  • WordPress.DB.DirectDatabaseQuery: false positive when function call to caching functions did not use the canonical function name. Props [@​rodrigoprimo]. #​2613
  • WordPress.DB.DirectDatabaseQuery: potential false negative when a class property or constant would mirror the name of one of the caching functions. Props [@​rodrigoprimo]. #​2615
  • WordPress.DB.PreparedSQL: false positive for correctly escaped SQL snippets when the function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2570
  • WordPress.DB.PreparedSQLPlaceholders: improved handling of fully qualified calls to global functions. Props [@​rodrigoprimo]. #​2569
  • WordPress.Security.EscapeOutput: expanded protection against false positives for *::class. Props [@​rodrigoprimo]. #​2605
  • WordPress.Security.NonceVerification: false positive when nonce checking function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2572
  • WordPress.WP.EnqueuedResourceParameters: the sniff could cause a PHP 8.5 deprecation notice if the code under scan contained one of the deprecated type casts. #​2573
  • WordPress.WP.EnqueuedResourceParameters: improved recognition of non-lowercase and fully qualified true/false/null when passed as the $ver parameter value. Props [@​rodrigoprimo]. #​2630
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • "after 8am on Monday"
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
  •  If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
21299dd to
a6388ecCompareNovember 21, 2025 05:04
@renovaterenovateBot
changed the title
Update dependency squizlabs/php_codesniffer to v3.13.5Update non-major-updatesNov 21, 2025
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a6388ec to
bef4f70CompareNovember 25, 2025 13:50
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
2 times, most recently
from
5f23f3e to
a36c598CompareDecember 10, 2025 12:55
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a36c598 to
a501790CompareFebruary 4, 2026 02:02
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a501790 to
10f32d3CompareFebruary 13, 2026 05:11
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
3 times, most recently
from
9cfcc98 to
6a4a3d9CompareMarch 15, 2026 01:09
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
6a4a3d9 to
b9367c6CompareMay 23, 2026 13:40
@pjaudiomv
pjaudiomv
merged commit e5a7d48
into
mainMay 23, 2026

1 check passed

@pjaudiomv
pjaudiomv
deleted the

renovate/non-major-updates

branch
May 23, 2026 14:33
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@pjaudiomv

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Update non-major-updates - #48
Merged
pjaudiomv merged 1 commit into
mainfrom 
renovate/non-major-updates
May 23, 2026
Merged
Update non-major-updates#48
pjaudiomv merged 1 commit into
mainfrom 
renovate/non-major-updates
Conversation
@renovate
@renovaterenovateBot
commented
Nov 10, 2025•

edited

Loading

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChangeAgeConfidence
ncipollo/release-actionactionminorv1.20.0 → v1.21.0ageconfidence
squizlabs/php_codesnifferrequire-devpatch3.13.4 → 3.13.5ageconfidence
wordpressfinalminor6.8.3-php8.3-apache → 6.9.4-php8.3-apacheageconfidence
wp-coding-standards/wpcsrequire-devminor3.2.0 → 3.3.0ageconfidence
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
ncipollo/release-action (ncipollo/release-action)
v1.21.0
Compare Source
What's Changed
Full Changelog: ncipollo/release-action@v1...v1.21.0
PHPCSStandards/PHP_CodeSniffer (squizlabs/php_codesniffer)
v3.13.5: - 2025-11-04
Compare Source
Added
  • Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed.

    • Syntax support for new PHP 8.5 features will follow in a future release.
    • If you find any PHP 8.5 deprecation notices which were missed, please report them.
Changed
Fixed
  • Fixed bug #​1216: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 "Using null as an array offset" deprecation notices.

  • Fixed bug #​1279: Tokenizer/PHP: on PHP < 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream.

    • This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.
    • Thanks to Juliette Reinders Folmer for the patch.
Other
  • Please be aware that the master branch has been renamed to 3.x and the default branch has changed to the 4.x branch.

    • If you contribute to PHP_CodeSniffer, you will need to update your local git clone.
    • If you develop against PHP_CodeSniffer and run your tests against dev branches of PHPCS, you will need to update your workflows.
New Contributors
The PHP_CodeSniffer project is happy to welcome the following new contributors:
@​andrewnicols
Statistics
Closed: 2 issues
Merged: 36 pull requests
Follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X to stay informed.
Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!
WordPress/WordPress-Coding-Standards (wp-coding-standards/wpcs)
v3.3.0
Compare Source
Added
  • Support for attributes on anonymous classes (PHP 8.0) and readonly anonymous classes (PHP 8.3) to the WordPress.Security.EscapeOutput sniff. Props [@​rodrigoprimo]. #​2559
  • Support for handling "exit as a function call" (PHP 8.4) to the WordPress.Security.EscapeOutput sniff. #​2563
  • WordPress-Extra: the following sniffs have been added to the ruleset: Universal.Attributes.BracketSpacing and Universal.Attributes.DisallowAttributeParentheses. #​2646
Changed
  • The minimum supported PHP version is now PHP 7.2 (was PHP 5.4). #​2614
  • The minimum required PHP_CodeSniffer version to 3.13.4 (was 3.13.0). #​2630
  • The minimum required PHPCSExtra version to 1.5.0 (was 1.4.0). #​2646
  • The default value for minimum_wp_version, as used by a number of sniffs detecting usage of deprecated WP features, has been updated to 6.6. #​2656
  • WordPress.DB.DirectDatabaseQuery will now recognize more caching functions, like the wp_cache_*_multiple() functions as added in WordPress 6.0 and the wp_cache_*_salted() functions as added in WordPress 6.9. #​2654
  • WordPress.NamingConventions.PrefixAllGlobals has been updated to recognize pluggable functions introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.ClassNameCase has been updated to recognize classes introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedFunctions now detects functions deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedParameters now detects parameters deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.Security.ValidatedSanitizedInput: improved the clarity of the error message for the InputNotValidated error code. Props [@​rodrigoprimo]. #​2642
  • README: updated testVersion recommendations for PHPCompatibility. Props [@​johnjago]. #​2471
  • Example ruleset: updated the minimum_wp_version and testVersion recommendations. #​2608
  • All sniffs are now also being tested against PHP 8.5 for consistent sniff results. #​2649
  • Various housekeeping, including documentation and test improvements. Includes contributions by [@​rodrigoprimo].
Deprecated
  • The WordPress.PHP.POSIXFunctions sniff (as it is no longer relevant). #​2616
Removed
  • wp_kses_allowed_html() from the list of escaping functions. #​2566
    
This affects the WordPress.Security.EscapeOutput sniff.
Fixed
  • WordPress.DB.DirectDatabaseQuery: false positive when function call to caching functions did not use the canonical function name. Props [@​rodrigoprimo]. #​2613
  • WordPress.DB.DirectDatabaseQuery: potential false negative when a class property or constant would mirror the name of one of the caching functions. Props [@​rodrigoprimo]. #​2615
  • WordPress.DB.PreparedSQL: false positive for correctly escaped SQL snippets when the function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2570
  • WordPress.DB.PreparedSQLPlaceholders: improved handling of fully qualified calls to global functions. Props [@​rodrigoprimo]. #​2569
  • WordPress.Security.EscapeOutput: expanded protection against false positives for *::class. Props [@​rodrigoprimo]. #​2605
  • WordPress.Security.NonceVerification: false positive when nonce checking function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2572
  • WordPress.WP.EnqueuedResourceParameters: the sniff could cause a PHP 8.5 deprecation notice if the code under scan contained one of the deprecated type casts. #​2573
  • WordPress.WP.EnqueuedResourceParameters: improved recognition of non-lowercase and fully qualified true/false/null when passed as the $ver parameter value. Props [@​rodrigoprimo]. #​2630
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • "after 8am on Monday"
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
  •  If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
21299dd to
a6388ecCompareNovember 21, 2025 05:04
@renovaterenovateBot
changed the title
Update dependency squizlabs/php_codesniffer to v3.13.5Update non-major-updatesNov 21, 2025
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a6388ec to
bef4f70CompareNovember 25, 2025 13:50
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
2 times, most recently
from
5f23f3e to
a36c598CompareDecember 10, 2025 12:55
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a36c598 to
a501790CompareFebruary 4, 2026 02:02
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a501790 to
10f32d3CompareFebruary 13, 2026 05:11
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
3 times, most recently
from
9cfcc98 to
6a4a3d9CompareMarch 15, 2026 01:09
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
6a4a3d9 to
b9367c6CompareMay 23, 2026 13:40
@pjaudiomv
pjaudiomv
merged commit e5a7d48
into
mainMay 23, 2026

1 check passed

@pjaudiomv
pjaudiomv
deleted the

renovate/non-major-updates

branch
May 23, 2026 14:33
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@pjaudiomv

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Update non-major-updates - #48
Merged
pjaudiomv merged 1 commit into
mainfrom 
renovate/non-major-updates
May 23, 2026
Merged
Update non-major-updates#48
pjaudiomv merged 1 commit into
mainfrom 
renovate/non-major-updates
Conversation
@renovate
@renovaterenovateBot
commented
Nov 10, 2025•

edited

Loading

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChangeAgeConfidence
ncipollo/release-actionactionminorv1.20.0 → v1.21.0ageconfidence
squizlabs/php_codesnifferrequire-devpatch3.13.4 → 3.13.5ageconfidence
wordpressfinalminor6.8.3-php8.3-apache → 6.9.4-php8.3-apacheageconfidence
wp-coding-standards/wpcsrequire-devminor3.2.0 → 3.3.0ageconfidence
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
ncipollo/release-action (ncipollo/release-action)
v1.21.0
Compare Source
What's Changed
Full Changelog: ncipollo/release-action@v1...v1.21.0
PHPCSStandards/PHP_CodeSniffer (squizlabs/php_codesniffer)
v3.13.5: - 2025-11-04
Compare Source
Added
  • Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed.

    • Syntax support for new PHP 8.5 features will follow in a future release.
    • If you find any PHP 8.5 deprecation notices which were missed, please report them.
Changed
Fixed
  • Fixed bug #​1216: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 "Using null as an array offset" deprecation notices.

  • Fixed bug #​1279: Tokenizer/PHP: on PHP < 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream.

    • This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.
    • Thanks to Juliette Reinders Folmer for the patch.
Other
  • Please be aware that the master branch has been renamed to 3.x and the default branch has changed to the 4.x branch.

    • If you contribute to PHP_CodeSniffer, you will need to update your local git clone.
    • If you develop against PHP_CodeSniffer and run your tests against dev branches of PHPCS, you will need to update your workflows.
New Contributors
The PHP_CodeSniffer project is happy to welcome the following new contributors:
@​andrewnicols
Statistics
Closed: 2 issues
Merged: 36 pull requests
Follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X to stay informed.
Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!
WordPress/WordPress-Coding-Standards (wp-coding-standards/wpcs)
v3.3.0
Compare Source
Added
  • Support for attributes on anonymous classes (PHP 8.0) and readonly anonymous classes (PHP 8.3) to the WordPress.Security.EscapeOutput sniff. Props [@​rodrigoprimo]. #​2559
  • Support for handling "exit as a function call" (PHP 8.4) to the WordPress.Security.EscapeOutput sniff. #​2563
  • WordPress-Extra: the following sniffs have been added to the ruleset: Universal.Attributes.BracketSpacing and Universal.Attributes.DisallowAttributeParentheses. #​2646
Changed
  • The minimum supported PHP version is now PHP 7.2 (was PHP 5.4). #​2614
  • The minimum required PHP_CodeSniffer version to 3.13.4 (was 3.13.0). #​2630
  • The minimum required PHPCSExtra version to 1.5.0 (was 1.4.0). #​2646
  • The default value for minimum_wp_version, as used by a number of sniffs detecting usage of deprecated WP features, has been updated to 6.6. #​2656
  • WordPress.DB.DirectDatabaseQuery will now recognize more caching functions, like the wp_cache_*_multiple() functions as added in WordPress 6.0 and the wp_cache_*_salted() functions as added in WordPress 6.9. #​2654
  • WordPress.NamingConventions.PrefixAllGlobals has been updated to recognize pluggable functions introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.ClassNameCase has been updated to recognize classes introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedFunctions now detects functions deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedParameters now detects parameters deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.Security.ValidatedSanitizedInput: improved the clarity of the error message for the InputNotValidated error code. Props [@​rodrigoprimo]. #​2642
  • README: updated testVersion recommendations for PHPCompatibility. Props [@​johnjago]. #​2471
  • Example ruleset: updated the minimum_wp_version and testVersion recommendations. #​2608
  • All sniffs are now also being tested against PHP 8.5 for consistent sniff results. #​2649
  • Various housekeeping, including documentation and test improvements. Includes contributions by [@​rodrigoprimo].
Deprecated
  • The WordPress.PHP.POSIXFunctions sniff (as it is no longer relevant). #​2616
Removed
  • wp_kses_allowed_html() from the list of escaping functions. #​2566
    
This affects the WordPress.Security.EscapeOutput sniff.
Fixed
  • WordPress.DB.DirectDatabaseQuery: false positive when function call to caching functions did not use the canonical function name. Props [@​rodrigoprimo]. #​2613
  • WordPress.DB.DirectDatabaseQuery: potential false negative when a class property or constant would mirror the name of one of the caching functions. Props [@​rodrigoprimo]. #​2615
  • WordPress.DB.PreparedSQL: false positive for correctly escaped SQL snippets when the function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2570
  • WordPress.DB.PreparedSQLPlaceholders: improved handling of fully qualified calls to global functions. Props [@​rodrigoprimo]. #​2569
  • WordPress.Security.EscapeOutput: expanded protection against false positives for *::class. Props [@​rodrigoprimo]. #​2605
  • WordPress.Security.NonceVerification: false positive when nonce checking function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2572
  • WordPress.WP.EnqueuedResourceParameters: the sniff could cause a PHP 8.5 deprecation notice if the code under scan contained one of the deprecated type casts. #​2573
  • WordPress.WP.EnqueuedResourceParameters: improved recognition of non-lowercase and fully qualified true/false/null when passed as the $ver parameter value. Props [@​rodrigoprimo]. #​2630
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • "after 8am on Monday"
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
  •  If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
21299dd to
a6388ecCompareNovember 21, 2025 05:04
@renovaterenovateBot
changed the title
Update dependency squizlabs/php_codesniffer to v3.13.5Update non-major-updatesNov 21, 2025
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a6388ec to
bef4f70CompareNovember 25, 2025 13:50
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
2 times, most recently
from
5f23f3e to
a36c598CompareDecember 10, 2025 12:55
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a36c598 to
a501790CompareFebruary 4, 2026 02:02
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a501790 to
10f32d3CompareFebruary 13, 2026 05:11
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
3 times, most recently
from
9cfcc98 to
6a4a3d9CompareMarch 15, 2026 01:09
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
6a4a3d9 to
b9367c6CompareMay 23, 2026 13:40
@pjaudiomv
pjaudiomv
merged commit e5a7d48
into
mainMay 23, 2026

1 check passed

@pjaudiomv
pjaudiomv
deleted the

renovate/non-major-updates

branch
May 23, 2026 14:33
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@pjaudiomv

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Universal Dark Mode - works on any site
(function() {
var enabled = true;
function applyDarkMode() {
if (!enabled) return;
// Create style element if it doesn't exist
var style = document.getElementById('universal-dark-mode-style');
if (!style) {
style = document.createElement('style');
style.id = 'universal-dark-mode-style';
document.head.appendChild(style);
}
// Dark mode CSS - inverts colors but preserves images/video
style.textContent = '
/* Invert everything except media */
html {
filter: invert(1) hue-rotate(180deg) !important;
background: #1a1a2e !important;
}
/* Restore images, videos, iframes, canvas */
img, video, iframe, canvas, svg, picture, [style*="background-image"] {
filter: invert(1) hue-rotate(180deg) !important;
}
/* Preserve specific elements that should not be inverted */
.no-dark-mode, .no-dark-mode *,
[data-theme="light"], [data-theme="light"],
.ace_editor, .ace_editor *,
.CodeMirror, .CodeMirror *,
.monaco-editor, .monaco-editor *,
.markdown-body pre, .markdown-body pre *,
.highlight, .highlight *,
pre code, pre code * {
filter: none !important;
}
/* Fix common UI elements */
.modal, .popup, .dropdown-menu, .tooltip, .popover {
filter: invert(1) hue-rotate(180deg) !important;
background: #2d2d44 !important;
border-color: #444 !important;
}
/* Scrollbars */
::-webkit-scrollbar { background: #1a1a2e !important; }
::-webkit-scrollbar-thumb { background: #444 !important; }
::-webkit-scrollbar-thumb:hover { background: #555 !important; }
/* Selection */
::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
';
}
function removeDarkMode() {
var style = document.getElementById('universal-dark-mode-style');
if (style) style.remove();
}
// Toggle with Alt+Shift+D
document.addEventListener('keydown', function(e) {
if (e.altKey && e.shiftKey && e.key === 'D') {
e.preventDefault();
enabled = !enabled;
if (enabled) {
applyDarkMode();
console.log('[Universal Dark Mode] Enabled');
} else {
removeDarkMode();
console.log('[Universal Dark Mode] Disabled');
}
}
});
// Apply on load
applyDarkMode();
// Re-apply on dynamic content
var observer = new MutationObserver(function(mutations) {
if (enabled && !document.getElementById('universal-dark-mode-style')) {
applyDarkMode();
}
});
observer.observe(document.head, { childList: true });
console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');
})();
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
Update non-major-updates - #48
Merged
pjaudiomv merged 1 commit into
mainfrom 
renovate/non-major-updates
May 23, 2026
Merged
Update non-major-updates#48
pjaudiomv merged 1 commit into
mainfrom 
renovate/non-major-updates
Conversation
@renovate
@renovaterenovateBot
commented
Nov 10, 2025•

edited

Loading

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChangeAgeConfidence
ncipollo/release-actionactionminorv1.20.0 → v1.21.0ageconfidence
squizlabs/php_codesnifferrequire-devpatch3.13.4 → 3.13.5ageconfidence
wordpressfinalminor6.8.3-php8.3-apache → 6.9.4-php8.3-apacheageconfidence
wp-coding-standards/wpcsrequire-devminor3.2.0 → 3.3.0ageconfidence
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
ncipollo/release-action (ncipollo/release-action)
v1.21.0
Compare Source
What's Changed
Full Changelog: ncipollo/release-action@v1...v1.21.0
PHPCSStandards/PHP_CodeSniffer (squizlabs/php_codesniffer)
v3.13.5: - 2025-11-04
Compare Source
Added
  • Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed.

    • Syntax support for new PHP 8.5 features will follow in a future release.
    • If you find any PHP 8.5 deprecation notices which were missed, please report them.
Changed
Fixed
  • Fixed bug #​1216: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 "Using null as an array offset" deprecation notices.

  • Fixed bug #​1279: Tokenizer/PHP: on PHP < 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream.

    • This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.
    • Thanks to Juliette Reinders Folmer for the patch.
Other
  • Please be aware that the master branch has been renamed to 3.x and the default branch has changed to the 4.x branch.

    • If you contribute to PHP_CodeSniffer, you will need to update your local git clone.
    • If you develop against PHP_CodeSniffer and run your tests against dev branches of PHPCS, you will need to update your workflows.
New Contributors
The PHP_CodeSniffer project is happy to welcome the following new contributors:
@​andrewnicols
Statistics
Closed: 2 issues
Merged: 36 pull requests
Follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X to stay informed.
Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!
WordPress/WordPress-Coding-Standards (wp-coding-standards/wpcs)
v3.3.0
Compare Source
Added
  • Support for attributes on anonymous classes (PHP 8.0) and readonly anonymous classes (PHP 8.3) to the WordPress.Security.EscapeOutput sniff. Props [@​rodrigoprimo]. #​2559
  • Support for handling "exit as a function call" (PHP 8.4) to the WordPress.Security.EscapeOutput sniff. #​2563
  • WordPress-Extra: the following sniffs have been added to the ruleset: Universal.Attributes.BracketSpacing and Universal.Attributes.DisallowAttributeParentheses. #​2646
Changed
  • The minimum supported PHP version is now PHP 7.2 (was PHP 5.4). #​2614
  • The minimum required PHP_CodeSniffer version to 3.13.4 (was 3.13.0). #​2630
  • The minimum required PHPCSExtra version to 1.5.0 (was 1.4.0). #​2646
  • The default value for minimum_wp_version, as used by a number of sniffs detecting usage of deprecated WP features, has been updated to 6.6. #​2656
  • WordPress.DB.DirectDatabaseQuery will now recognize more caching functions, like the wp_cache_*_multiple() functions as added in WordPress 6.0 and the wp_cache_*_salted() functions as added in WordPress 6.9. #​2654
  • WordPress.NamingConventions.PrefixAllGlobals has been updated to recognize pluggable functions introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.ClassNameCase has been updated to recognize classes introduced in WP up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedFunctions now detects functions deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.WP.DeprecatedParameters now detects parameters deprecated in WordPress up to WP 6.9.0. #​2652
  • WordPress.Security.ValidatedSanitizedInput: improved the clarity of the error message for the InputNotValidated error code. Props [@​rodrigoprimo]. #​2642
  • README: updated testVersion recommendations for PHPCompatibility. Props [@​johnjago]. #​2471
  • Example ruleset: updated the minimum_wp_version and testVersion recommendations. #​2608
  • All sniffs are now also being tested against PHP 8.5 for consistent sniff results. #​2649
  • Various housekeeping, including documentation and test improvements. Includes contributions by [@​rodrigoprimo].
Deprecated
  • The WordPress.PHP.POSIXFunctions sniff (as it is no longer relevant). #​2616
Removed
  • wp_kses_allowed_html() from the list of escaping functions. #​2566
    
This affects the WordPress.Security.EscapeOutput sniff.
Fixed
  • WordPress.DB.DirectDatabaseQuery: false positive when function call to caching functions did not use the canonical function name. Props [@​rodrigoprimo]. #​2613
  • WordPress.DB.DirectDatabaseQuery: potential false negative when a class property or constant would mirror the name of one of the caching functions. Props [@​rodrigoprimo]. #​2615
  • WordPress.DB.PreparedSQL: false positive for correctly escaped SQL snippets when the function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2570
  • WordPress.DB.PreparedSQLPlaceholders: improved handling of fully qualified calls to global functions. Props [@​rodrigoprimo]. #​2569
  • WordPress.Security.EscapeOutput: expanded protection against false positives for *::class. Props [@​rodrigoprimo]. #​2605
  • WordPress.Security.NonceVerification: false positive when nonce checking function call did not use the canonical function name. Props [@​rodrigoprimo]. #​2572
  • WordPress.WP.EnqueuedResourceParameters: the sniff could cause a PHP 8.5 deprecation notice if the code under scan contained one of the deprecated type casts. #​2573
  • WordPress.WP.EnqueuedResourceParameters: improved recognition of non-lowercase and fully qualified true/false/null when passed as the $ver parameter value. Props [@​rodrigoprimo]. #​2630
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • "after 8am on Monday"
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
  •  If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
21299dd to
a6388ecCompareNovember 21, 2025 05:04
@renovaterenovateBot
changed the title
Update dependency squizlabs/php_codesniffer to v3.13.5Update non-major-updatesNov 21, 2025
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a6388ec to
bef4f70CompareNovember 25, 2025 13:50
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
2 times, most recently
from
5f23f3e to
a36c598CompareDecember 10, 2025 12:55
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a36c598 to
a501790CompareFebruary 4, 2026 02:02
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
a501790 to
10f32d3CompareFebruary 13, 2026 05:11
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
3 times, most recently
from
9cfcc98 to
6a4a3d9CompareMarch 15, 2026 01:09
@renovate
renovateBotforce-pushed
the
renovate/non-major-updates
branch
from
6a4a3d9 to
b9367c6CompareMay 23, 2026 13:40
@pjaudiomv
pjaudiomv
merged commit e5a7d48
into
mainMay 23, 2026

1 check passed

@pjaudiomv
pjaudiomv
deleted the

renovate/non-major-updates

branch
May 23, 2026 14:33
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@pjaudiomv