Update PHP - All packages except core - Minor and patch#2607
Update PHP - All packages except core - Minor and patch#2607AlexSkrypnyk wants to merge 1 commit into
Conversation
| datasource | package | from | to | | ---------- | ------------------------ | ------ | ------ | | packagist | drupal/drupal_helpers | 2.0.0 | 2.0.1 | | packagist | drupal/generated_content | 2.0.0 | 2.0.1 | | packagist | drupal/search_api | 1.40.0 | 1.41.0 | | packagist | drupal/testmode | 2.7.0 | 2.7.1 |
AlexSkrypnyk
added
the
Dependencies
WalkthroughFour Drupal package minimum version constraints are tightened in ChangesComposer dependency version bumps
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Possibly related issues
Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 3
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@composer.json`:
- Line 20: The drupal/generated_content package version constraint is set to an
unavailable version. In composer.json, change the version constraint for the
drupal/generated_content dependency from "^2.0.1" to "^2.0.0" to reference the
actual stable release that exists (version 2.0.0 released March 17, 2026).
- Line 33: The drupal/testmode dependency in composer.json specifies version
constraint ^2.7.1, but this version does not exist in the official releases.
Update the version constraint for the drupal/testmode package from ^2.7.1 to
^2.7.0 to match the latest available official release of the module.
- Line 18: The version constraint for the drupal/drupal_helpers package is set
to "^2.0.1" but version 2.0.1 has not been published; the latest available
version is 2.0.0. Update the constraint for drupal/drupal_helpers from "^2.0.1"
to either "^2.0" to allow the latest version or "^2.0.0" to pin to the latest
available stable release.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository UI
Review profile: ASSERTIVE
Plan: Pro Plus
Run ID: da64620f-8399-4b0c-b2cc-91cbdfb152e7
📒 Files selected for processing (1)
composer.json
| "drupal/core-composer-scaffold": "~11.3.11", | ||
| "drupal/core-recommended": "~11.3.11", | ||
| "drupal/drupal_helpers": "^2.0", | ||
| "drupal/drupal_helpers": "^2.0.1", |
There was a problem hiding this comment.
🧩 Analysis chain
🌐 Web query:
drupal/drupal_helpers 2.0.1 release notes security advisories
💡 Result:
There is no public release 2.0.1 for the project known as drupal_helpers [1]. As of June 14, 2026, the latest release for the AlexSkrypnyk/drupal_helpers repository is version 2.0.0, which was released on March 9, 2026 [1]. There are currently no published security advisories specifically for the 2.0.x version of drupal_helpers [1][2]. Users should be aware that there are multiple projects with similar names in the Drupal ecosystem: 1. AlexSkrypnyk/drupal_helpers: A project with a 2.x branch that provides Drupal helper utilities [1][3]. 2. intracto/drupal-helpers: A separate library with its own versioning (latest 0.0.8) [4]. Always verify the specific vendor and repository when managing dependencies via Composer [5][4].
Citations:
- 1: https://github.com/AlexSkrypnyk/drupal_helpers
- 2: https://www.drupal.org/security/release-window
- 3: AlexSkrypnyk/drupal_helpers@b22c5bb
- 4: https://packagist.org/packages/intracto/drupal-helpers
- 5: https://www.vortextemplate.com/docs/drupal/composer-json
Fix invalid package version constraint: drupal/drupal_helpers version 2.0.1 does not exist.
The constraint "^2.0.1" references a release that has not been published. The latest available release is 2.0.0 (released March 9, 2026). Update the constraint to "^2.0" to allow the latest available version, or specify "^2.0.0" if that version must be pinned.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@composer.json` at line 18, The version constraint for the
drupal/drupal_helpers package is set to "^2.0.1" but version 2.0.1 has not been
published; the latest available version is 2.0.0. Update the constraint for
drupal/drupal_helpers from "^2.0.1" to either "^2.0" to allow the latest version
or "^2.0.0" to pin to the latest available stable release.
| "drupal/drupal_helpers": "^2.0.1", | ||
| "drupal/environment_indicator": "^4.0.25", | ||
| "drupal/generated_content": "^2.0", | ||
| "drupal/generated_content": "^2.0.1", |
There was a problem hiding this comment.
🧩 Analysis chain
🌐 Web query:
drupal/generated_content 2.0.1 release notes security advisories
💡 Result:
As of June 14, 2026, there is no release titled 2.0.1 for the Drupal module Generated Content (drupal/generated_content). The latest stable release for this module is version 2.0.0, which was published on March 17, 2026 [1][2]. Regarding security advisories, there are currently no known security advisories or entries for the Generated Content module on the official Drupal security advisory page. As of the latest available project data, the module has seen active development, with version 2.0.0 introducing a transition to the Drupal plugin system [1][3]. You can monitor the project's official Drupal.org page for any future updates or security announcements [2].
Citations:
- 1: https://www.drupal.org/project/generated_content/releases/2.0.0
- 2: https://www.drupal.org/project/generated_content
- 3: https://www.drupal.org/project/generated_content/issues/3556829
Update the version constraint to use the available 2.0.0 release.
drupal/generated_content version 2.0.1 does not exist. The latest stable release is 2.0.0 (March 17, 2026). Update the constraint from ^2.0.1 to ^2.0.0 to reference an actual available version.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@composer.json` at line 20, The drupal/generated_content package version
constraint is set to an unavailable version. In composer.json, change the
version constraint for the drupal/generated_content dependency from "^2.0.1" to
"^2.0.0" to reference the actual stable release that exists (version 2.0.0
released March 17, 2026).
| "drupal/shield": "^1.8", | ||
| "drupal/stage_file_proxy": "^3.1.6", | ||
| "drupal/testmode": "^2.7.0", | ||
| "drupal/testmode": "^2.7.1", |
There was a problem hiding this comment.
🧩 Analysis chain
🌐 Web query:
drupal/testmode 2.7.1 release notes security advisories
💡 Result:
There is no release 2.7.1 for the Drupal 'testmode' module, nor are there any security advisories associated with that version [1]. The latest official release for the 'testmode' module as of June 14, 2026, is 2.7.0 [1]. The 'testmode' module is a development utility designed to alter site content and configurations specifically for testing purposes (e.g., to prevent live content from interfering with Behat tests) [2][3]. Because it is a testing module not intended for use in production environments, it does not typically follow the same release and security advisory lifecycle as core production modules [2]. Recent updates to the module (such as the 2.7.0 release) have focused on functional improvements, including: - Refactoring configuration handling to properly respect overrides defined in settings.php [4]. - Adding support for filtering Search API-backed views [5][6]. If you encountered a reference to '2.7.1' in the context of test-related software, it may be associated with a different project (e.g., 'TestMu AI' or other testing frameworks) rather than the Drupal 'testmode' module [7].
Citations:
- 1: https://www.drupal.org/project/testmode/releases/2.6.0
- 2: https://github.com/AlexSkrypnyk/testmode
- 3: https://www.vortextemplate.com/docs/drupal/test-mode
- 4: [#46] Fixed Testmode ignoring config overrides from settings.php. AlexSkrypnyk/testmode#47
- 5: [#48] Fixed Testmode not filtering Search API-backed views. AlexSkrypnyk/testmode#49
- 6: AlexSkrypnyk/testmode@35b5e42
- 7: https://www.testmuai.com/support/docs/hyperexecute-release-notes-2-7-1/
Update to the latest available version—drupal/testmode version 2.7.1 does not exist.
The latest official release of the drupal/testmode module is 2.7.0, as of June 2026. Change the constraint to ^2.7.0 to resolve the dependency.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@composer.json` at line 33, The drupal/testmode dependency in composer.json
specifies version constraint ^2.7.1, but this version does not exist in the
official releases. Update the version constraint for the drupal/testmode package
from ^2.7.1 to ^2.7.0 to match the latest available official release of the
module.
|
📖 Documentation preview for this pull request has been deployed to Netlify: https://6a2df444c12b65ad46c85dec--vortex-docs.netlify.app This preview is rebuilt on every commit and is not the production documentation site. |
1 participant
This PR contains the following updates:
^2.0→^2.0.1^2.0→^2.0.1^1.40→^1.41.0^2.7.0→^2.7.1Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Configuration
📅 Schedule: (in timezone UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate.