Skip to content

Bump behat/gherkin from 4.14.0 to 4.16.0 in /plib/library#163

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/composer/plib/library/behat/gherkin-4.16.0
Closed

Bump behat/gherkin from 4.14.0 to 4.16.0 in /plib/library#163
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/composer/plib/library/behat/gherkin-4.16.0

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 8, 2025

Bumps behat/gherkin from 4.14.0 to 4.16.0.

Release notes

Sourced from behat/gherkin's releases.

v4.16.0

Changed

  • Further improvements to parser parity when the experimental gherkin-32 compatibility mode is enabled:
    • Parse descriptions (instead of multiline titles) for all describable nodes by @​acoulton in #361
    • Unescape escaped delimiters within doc strings by @​stof in #393
    • Retain the @ prefix when parsing tags by @​acoulton in #400
    • Trim unicode padding from table cells by @​stof in #405

Fixed

  • Fix the implementation of the default dialect for the keywords provider by @​stof in #404

Internal

v4.15.0

Changed

  • Added a new ParserInterface and deprecated extending the core Lexer, Parser and Node classes by @​acoulton in #354
  • Deprecate the CucumberNDJsonAstLoader (which was only intended for internal use by our tests) by @​stof in #356
  • By default, the parser ignores invalid language tags (e.g. #language:no-such) and falls back to the default language (e.g. en). Previously, the resultant FeatureNode::getLanguage() would return the original invalid value from the feature file - it will now return the language that was actually used for parsing. By @​stof in #350

Added

  • Introduce a DialectProviderInterface matching the modern cucumber API. This will replace the existing Keywords API in a future major release. By @​stof in #350
  • Introduce configurable GherkinCompatibilityMode to control how gherkin files are parsed. In the default legacy mode, there is no change to parsing. In the new experimental gherkin-32 mode, files will in future be parsed consistently with the official cucumber/gherkin parsers. This mode is not yet complete - in this first release:
  • Improved translations for ru (Russian) and af (Afrikaans) from cucumber/gherkin in #381 and #386
  • Support PHP 8.5 by @​acoulton in #388

Fixed

Internal

  • Enable PHPStan level 10 and resolve remaining warnings by @​uuf6429 in #368

... (truncated)

Changelog

Sourced from behat/gherkin's changelog.

[4.16.0] - 2025-12-05

Changed

  • Further improvements to parser parity when the experimental gherkin-32 compatibility mode is enabled:
    • Parse descriptions (instead of multiline titles) for all describable nodes by @​acoulton in #361
    • Unescape escaped delimiters within doc strings by @​stof in #393
    • Retain the @ prefix when parsing tags by @​acoulton in #400
    • Trim unicode padding from table cells by @​stof in #405

Fixed

  • Fix the implementation of the default dialect for the keywords provider by @​stof in #404

Internal

[4.15.0] - 2025-11-05

Changed

  • Added a new ParserInterface and deprecated extending the core Lexer, Parser and Node classes by @​acoulton in #354
  • Deprecate the CucumberNDJsonAstLoader (which was only intended for internal use by our tests) by @​stof in #356
  • By default, the parser ignores invalid language tags (e.g. #language:no-such) and falls back to the default language (e.g. en). Previously, the resultant FeatureNode::getLanguage() would return the original invalid value from the feature file - it will now return the language that was actually used for parsing. By @​stof in #350

Added

  • Introduce a DialectProviderInterface matching the modern cucumber API. This will replace the existing Keywords API in a future major release. By @​stof in #350
  • Introduce configurable GherkinCompatibilityMode to control how gherkin files are parsed. In the default legacy mode, there is no change to parsing. In the new experimental gherkin-32 mode, files will in future be parsed consistently with the official cucumber/gherkin parsers. This mode is not yet complete - in this first release:
  • Improved translations for ru (Russian) and af (Afrikaans) from cucumber/gherkin in #381 and #386
  • Support PHP 8.5 by @​acoulton in #388

Fixed

... (truncated)

Commits
  • 78e7755 docs: Add changelog for 4.16.0 (#406)
  • 64e7bbb Fix trimming table cell padding in gherkin-32 mode (#405)
  • dc8d60f Merge pull request #404 from stof/fix_keywords_dialect
  • df8fe06 Fix the implementation of the default dialect for the keywords provider
  • ec034ab Merge pull request #401 from acoulton/add-funding
  • f7aaac9 nits: Fix accidental link to Behat/Behat contributors
  • 72a9aff docs: Add funding links and information
  • bc7e316 Merge pull request #402 from acoulton/maint-php-cs-fixer-updates
  • b9af079 fix: Add Stringable to classes implementing __toString()
  • d9957c7 Merge pull request #400 from acoulton/feat-tag-parsing-parity
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Update dev dependency behat/gherkin to 4.16.0 with adjusted PHP constraint and refreshed dev requirements.

  • Dependencies:
    • Bump behat/gherkin (dev) to v4.16.0 in plib/library/composer.lock.
      • Update PHP constraint to >=8.1 <8.6.
      • Refresh dev requirements (e.g., cucumber/gherkin-monorepo v37, friendsofphp/php-cs-fixer ^3.77).
      • Update source refs and add funding metadata.

Written by Cursor Bugbot for commit 9143057. This will update automatically on new commits. Configure here.

Bumps [behat/gherkin](https://github.com/Behat/Gherkin) from 4.14.0 to 4.16.0.
- [Release notes](https://github.com/Behat/Gherkin/releases)
- [Changelog](https://github.com/Behat/Gherkin/blob/master/CHANGELOG.md)
- [Commits](Behat/Gherkin@v4.14.0...v4.16.0)

---
updated-dependencies:
- dependency-name: behat/gherkin
  dependency-version: 4.16.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Dec 8, 2025
@secure-code-warrior-for-github

Micro-Learning Topic: Race condition (Detected by phrase)

Matched on "race condition"

What is this? (2min video)

A race condition is a flaw that produces an unexpected result when the timing of actions impact other actions.

Try a challenge in Secure Code Warrior

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Dec 9, 2025

Superseded by #167.

@dependabot dependabot bot closed this Dec 9, 2025
@dependabot dependabot bot deleted the dependabot/composer/plib/library/behat/gherkin-4.16.0 branch December 9, 2025 16:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants