Skip to content

build(deps): bump zircote/swagger-php from 6.13.0 to 6.16.0 in /upload/api - #62

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/composer/upload/api/zircote/swagger-php-6.16.0
Oct 21, 2026
Merged

github-actions[bot] merged 1 commit into
masterfrom
dependabot/composer/upload/api/zircote/swagger-php-6.16.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Bumps zircote/swagger-php from 6.13.0 to 6.16.0.

Release notes

Sourced from zircote/swagger-php's releases.

6.16.0

Spec pipeline

A Tag on a method or class tags its operations

#[OA\Tag] can now go on a method as well as a class. On a method it also tags that method's operations, and on a class every operation of the class. A class with no operations, such as one holding only Info, still only declares the tag. (#2274)

#[OA\Tag(name: 'users', description: 'Everything about users')]
class UserController
{
    #[OA\Tag(name: 'admin')]
    #[OA\Operation\Delete(path: '/users/{id}')]
    public function delete(int $id) {}
}

DELETE /users/{id} is tagged admin and users. The same tag declared in several places now folds into one, so a name-only tag no longer replaces a description declared elsewhere. Only a field set differently is reported.

The logger is the one channel

Result::log(), warnings() and errors() are deprecated and removed in 8.0. In spec and hybrid mode they never held the whole build log: a class skipped during the scan was reported to the logger only. The logger set with Builder::setLogger() receives every message. isValid() is unchanged. (#2266)

Smaller fixes

  • new OA\Operation() without a method no longer throws. An operation that reaches the compiler still without one is left out of the document, now with a warning. (#2271)
  • In hybrid mode, a ReflectionClass source is read for classic attributes too. Before, only the spec half saw it. A method or property reflector passed as a source is reported rather than dropped. (#2272)
  • A class whose source file cannot be read, such as one defined through eval(), is read through reflection in spec, and skipped with a warning by the classic analyser. Before, a hybrid build failed. (#2273)

Rector set

  • The classic-to-spec set adds #[OA\Components] to a class whose members declare keyed components (#2263).
  • A method-level classic Tag migrated by the set is now a valid attribute. Before, the class was skipped. (#2274)

Output changes

A tag on a class with operations

This changes spec output. A Tag on a class that also declares operations now tags those operations. Move the tag to a class without operations to keep it a declaration only. (#2274)

A component on a member needs #[OA\Components]

This changes spec output. A keyed component declared on a method or property is a component only when its class carries #[OA\Components]. Before, one on a method was kept and one on a property was lost without a warning. Outside a holder it is now left out with a warning that says to add the wrapper. A schema on a property of a #[OA\Components] class becomes a component named after the property. (#2263)

Nullable compositions in 3.1 and 3.2

This changes hybrid and spec output. A schema with nullable: true, no type and a oneOf or anyOf lost the null in 3.1 and 3.2. It now gets a {type: null} branch, as in 3.0 and classic. (#2267)

summary and description beside a $ref

... (truncated)

Commits
  • 6c6c031 feat(Spec): apply a Tag on a method or class to its operations (#2274)
  • d103c08 fix(Utils): handle a class whose source file cannot be read (#2273)
  • 6f206ef fix(Spec): accept an operation without a method (#2271)
  • 2e6f95e fix(Compiler): keep a nullable oneOf or anyOf nullable in 3.1 and 3.2 (#2267)
  • 3750901 fix(Builder): read classic attributes from reflector sources in hybrid (#2272)
  • 01b4331 fix(Compiler): emit only the operation methods each version defines (#2270)
  • 10d0de2 fix(Augmenter): stop inferring type object from allOf (#2269)
  • 7c48e02 fix(Compiler): keep summary and description beside a $ref in 3.1 and 3.2 (#2268)
  • 22dc9d7 feat(Builder): deprecate the log accessors on Result (#2266)
  • 9f91fe6 fix(Context): leave foreign attributes out of a serialized context (#2265)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [zircote/swagger-php](https://github.com/zircote/swagger-php) from 6.13.0 to 6.16.0.
- [Release notes](https://github.com/zircote/swagger-php/releases)
- [Commits](zircote/swagger-php@6.13.0...6.16.0)

---
updated-dependencies:
- dependency-name: zircote/swagger-php
  dependency-version: 6.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Oct 21, 2026
@github-actions
github-actions Bot merged commit 44560df into master Oct 21, 2026
3 checks passed
@MaximHarder
MaximHarder deleted the dependabot/composer/upload/api/zircote/swagger-php-6.16.0 branch October 22, 2026 07:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants