Skip to content

build(deps-dev): bump infection/infection from 0.35.6 to 0.35.7 - #327

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/composer/infection/infection-0.35.7
Open

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/composer/infection/infection-0.35.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor

Bumps infection/infection from 0.35.6 to 0.35.7.

Release notes

Sourced from infection/infection's releases.

0.35.7

Added:

  • Explain why MSI checks are skipped by @​theofidry in infection/infection#3597
  • [BC Break] Validate configurations with PHPUnit 13.2 and newer by @​theofidry in infection/infection#3627. Invalid configurations now fail in a separate validation step before the initial test run, changing the error output.
  • Add an option to configure the timeout in the configuration generator (#1286) by @​balliolon2 in infection/infection#3632
  • [BC Break] Apply a CPU limit to detected thread counts by @​theofidry in infection/infection#3655. Automatic thread selection now respects CPU quotas. The default uses 80% of cores, rounded down with a minimum of one; max uses all cores but one. For example, the default on eight cores without a quota cap produces six threads instead of seven.

Fixed:

  • [BC Break] Stop validating PHPUnit configurations against external XSDs for PHPUnit 10 and newer by @​theofidry in infection/infection#3626. Schema errors are reported through PHPUnit instead of Infection's previous schema validation, changing the error output. PHPUnit 9 and older retain the existing validation.
  • Restore libxml state after schema validation by @​theofidry in infection/infection#3644
  • [BC Break] Fix source filtering for initial-test:run by @​theofidry in infection/infection#3645. --filter now selects file paths; use --git-diff-filter for Git status filtering. Replace --base with --git-diff-base, together with --git-diff-filter or --git-diff-lines.
  • Report configuration files that are not a JSON object by @​VincentBorgers in infection/infection#3647
  • [BC Break] Make mutant memory limiting a test framework implementation detail by @​theofidry in infection/infection#3529. Automatically derived memory limits now apply only to PHPUnit mutant processes. Third-party adapters, including Codeception, lose the previous mechanism; PHPUnit runs through phpunit.bat on Windows also lose the automatic limit.
  • Fix signature mutants of methods with attributes being reported as not covered by @​maks-rafalko in infection/infection#3663
  • [BC Break] Allow automatic parallelism on Windows by @​theofidry in infection/infection#3656. Automatic thread selection can now use more than one thread on Windows. Set --threads=1 to retain serial execution.
  • [BC Break] Reject non-positive thread counts by @​theofidry in infection/infection#3660. --threads values that convert to zero or a negative integer, such as 0, -1, or 0.5, now fail. Use a positive thread count or max.
  • Resolve thread counts only if necessary by @​theofidry in infection/infection#3654

New Contributors

Full Changelog: infection/infection@0.35.6...0.35.7

Commits
  • b87f998 Fix signature mutants of methods with attributes being reported as not covere...
  • 1ce48bd [Conductor] Update all of phpstan (#3665)
  • b9a3c9b [Conductor] Update fidry/cpu-core-counter to 1.4.1 (#3664)
  • e8acd0c [Conductor] Update carthage-software/mago to 1.56.3 (#3662)
  • c4a01b2 fix!: Reject non-positive thread counts (#3660)
  • bdfceb8 feat: Log automatic CPU resolution details (#3658)
  • a768d25 refactor: Inject CpuCoreCounter into CpuCoresCountProvider (#3657)
  • 956748f fix!: Allow automatic parallelism on Windows (#3656)
  • 6d3f230 feat!: Apply a CPU limit to detected thread counts (#3655)
  • bf028f4 perf: Resolve thread counts only if necessary (#3654)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [infection/infection](https://github.com/infection/infection) from 0.35.6 to 0.35.7.
- [Release notes](https://github.com/infection/infection/releases)
- [Changelog](https://github.com/infection/infection/blob/master/CHANGELOG.md)
- [Commits](infection/infection@0.35.6...0.35.7)

---
updated-dependencies:
- dependency-name: infection/infection
  dependency-version: 0.35.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Oct 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants