Skip to content

Bump psy/psysh from 0.12.9 to 0.12.18 in /plib/library#171

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/composer/plib/library/psy/psysh-0.12.18
Closed

Bump psy/psysh from 0.12.9 to 0.12.18 in /plib/library#171
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/composer/plib/library/psy/psysh-0.12.18

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 17, 2025

Bumps psy/psysh from 0.12.9 to 0.12.18.

Release notes

Sourced from psy/psysh's releases.

PsySH v0.12.18

  • Fix exit() not working when uopz extension is loaded
  • Don't reopen pager if user closes it early
  • Ensure stty state is restored before exiting PsySH (fixes an issue where Ctrl-C might be incorrectly handled after exiting)

PsySH v0.12.17

Hot code reloading!!?!?1?

Install the uopz extension (5.0+) and PsySH will automatically reload modified files during your session. Edit code, switch back to PsySH, and your changes are live—no restart needed!

What gets reloaded

  • Method bodies (including private/protected)
  • Function implementations (and new functions!)
  • Class and global constants

What can't be reloaded

  • New class methods
  • Class properties, inheritance, or interfaces
  • Method signatures

PsySH skips "risky" reloads by default (conditional definitions, static variables). Use the new yolo command to bypass safety checks:

>>> my_helper()
Warning: Skipped conditional: if (...) { function my_helper() ... }

>>> yolo !!
=> "result"

See the documentation for more details.

Bug fixes

  • Fix "array offset on null" warning on Ctrl-C — plays nicer with Laravel + PHP 8.5
  • Work around O(n²) performance in Symfony OutputFormatter

PsySH v0.12.16

A quick release adding support for Symfony Console v7.4+ and v8.x.

PsySH v0.12.15

Abbreviated output reverted

The abbreviated return value output introduced in v0.12.13 has been reverted. This feature attempted to show shorter output for statements that looked like they were trying to take an action (like assignments and method calls with side effects) while preserving full output for inspection-like statements. Unfortunately, this version of the feature just ... wasn't it.

Thanks to everyone who provided feedback. If you've got thoughts on approaches that could make this better, please share them in #512!

In-shell manual updates

... (truncated)

Commits
  • ddff0ac Merge branch 'release/v0.12.18'
  • b8c00fd Bump to v0.12.18
  • 77d25fa Ensure terminal state is restored before exiting PsySH.
  • da0e5ec Don't reopen pager after user quits early.
  • fc9ea1d Fix exit() not working when uopz extension is loaded
  • 85fbbd9 Merge branch 'release/0.12.17'
  • 8ce8005 Bump to v0.12.17
  • 6d3f9b0 Support adding new functions via hot reload.
  • a496193 Fix static analysis and backwards compatibility issues
  • 44bc71a Add yolo command to bypass reloader safety checks
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Updates multiple Composer dependencies in plib/library, notably psy/psysh to v0.12.18, symfony/console and var-dumper to v7.4, symfony/string to v8.0.1, and nikic/php-parser to v5.7.0, plus related polyfills/contracts.

  • Dependencies (Composer lock):
    • Upgrades:
      • psy/psysh: v0.12.9 → v0.12.18 (adds Symfony 7.4/8.x support; optional class-map generator)
      • nikic/php-parser: v5.5.0 → v5.7.0
      • symfony/console: v7.3.0 → v7.4.1 (broadens compat to symfony/string ^8)
      • symfony/var-dumper: v7.3.0 → v7.4.0 (dev deps allow Symfony 8)
      • symfony/string: v7.3.0 → v8.0.1
      • Polyfills: symfony/polyfill-ctype, polyfill-intl-grapheme, polyfill-intl-normalizer, polyfill-mbstring: v1.32.0 → v1.33.0
      • symfony/service-contracts: v3.6.0 → v3.6.1
    • Metadata updates (support, funding, constraints) adjusted accordingly.

Written by Cursor Bugbot for commit 6edee0c. This will update automatically on new commits. Configure here.

Bumps [psy/psysh](https://github.com/bobthecow/psysh) from 0.12.9 to 0.12.18.
- [Release notes](https://github.com/bobthecow/psysh/releases)
- [Commits](bobthecow/psysh@v0.12.9...v0.12.18)

---
updated-dependencies:
- dependency-name: psy/psysh
  dependency-version: 0.12.18
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Dec 17, 2025
"symfony/polyfill-intl-grapheme": "~1.0",
"symfony/polyfill-intl-normalizer": "~1.0",
"symfony/polyfill-mbstring": "~1.0"
"php": ">=8.4",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: Dependency update requires PHP 8.4, breaking backwards compatibility

The psy/psysh bump has inadvertently upgraded symfony/string from v7.3.0 to v8.0.1, which changes the PHP requirement from >=8.2 to >=8.4. PHP 8.4 was only released in November 2024, and many production environments still run PHP 8.2 or 8.3. This will break composer install for anyone not running PHP 8.4+, despite other dependencies in the project supporting older PHP versions.

Fix in Cursor Fix in Web

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 2, 2026

Superseded by #192.

@dependabot dependabot bot closed this Feb 2, 2026
@dependabot dependabot bot deleted the dependabot/composer/plib/library/psy/psysh-0.12.18 branch February 2, 2026 19:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants