Skip to content

Bump behat/behat from 3.29.0 to 3.31.0#39

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/composer/behat/behat-3.31.0
Open

Bump behat/behat from 3.29.0 to 3.31.0#39
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/composer/behat/behat-3.31.0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Bumps behat/behat from 3.29.0 to 3.31.0.

Release notes

Sourced from behat/behat's releases.

v3.31.0

Fixed

Internal

  • Add more backwards-compatible strict types to private / final properties, method parameters, and method returns By @​acoulton in #1817 and #1818
  • Ignore PHPUnit security advisory related to PHP ini Argument injection PKSA-5jz8-6tcw-pbk4 has minimal impact in our CI environment. Contributors installing dev dependencies locally should be aware of the potential risk if an attacker can gain write access to phpunit.xml or shell execution. By @​acoulton in #1827

v3.30.0

Changed

  • Explicitly mark up interfaces, classes & methods that we consider to be the public API. This will not affect our backwards compatibility guarantees for the 3.x series, but from 4.0 onwards we will only guarantee BC for code that is explicitly marked as being part of the API. By @​acoulton in #1807
  • Move gherkin configuration to dedicated GherkinOptions config object. The previous API for setting filters by calling ->withFilters() on Profile is deprecated and will be removed in 4.0. By @​acoulton in #1798
  • Make Extension::process() explicit in the Extension interface & document Extension dependencies. Clarifies that extensions should declare their own dependencies on any symfony packages they interact with directly. By @​acoulton in #1795 and #1804
  • Drop PHP 8.1 support by @​carlos-granados in #1782

Added

  • Support configuring GherkinCompatibilityMode to control how Gherkin files are parsed. The default mode behaves identically to legacy parser behaviour. The opt-in experimental gherkin-32 mode parses equivalent to the official cucumber/gherkin parsers. We expect to make gherkin-32 the default in the 4.0 release. See the documentation for more details. By @​acoulton in #1799
  • Add deprecation collector to capture and print Behat deprecations. Users can opt-in to display and/or fail on deprecations using the methods on the TesterOptions config object. Extension developers can log their own runtime deprecations by calling DeprecationCollector::trigger(). By @​carlos-granados in #1794

Internal

... (truncated)

Changelog

Sourced from behat/behat's changelog.

[3.31.0] - 2025-04-19

Fixed

Internal

  • Add more backwards-compatible strict types to private / final properties, method parameters, and method returns By @​acoulton in #1817 and #1818
  • Ignore PHPUnit security advisory related to PHP ini Argument injection PKSA-5jz8-6tcw-pbk4 has minimal impact in our CI environment. Contributors installing dev dependencies locally should be aware of the potential risk if an attacker can gain write access to phpunit.xml or shell execution. By @​acoulton in #1827

[3.30.0] - 2026-03-26

Changed

  • Explicitly mark up interfaces, classes & methods that we consider to be the public API. This will not affect our backwards compatibility guarantees for the 3.x series, but from 4.0 onwards we will only guarantee BC for code that is explicitly marked as being part of the API. By @​acoulton in #1807
  • Move gherkin configuration to dedicated GherkinOptions config object. The previous API for setting filters by calling ->withFilters() on Profile is deprecated and will be removed in 4.0. By @​acoulton in #1798
  • Make Extension::process() explicit in the Extension interface & document Extension dependencies. Clarifies that extensions should declare their own dependencies on any symfony packages they interact with directly. By @​acoulton in #1795 and #1804
  • Drop PHP 8.1 support by @​carlos-granados in #1782

Added

  • Support configuring GherkinCompatibilityMode to control how Gherkin files are parsed. The default mode behaves identically to legacy parser behaviour. The opt-in experimental gherkin-32 mode parses equivalent to the official cucumber/gherkin parsers. We expect to make gherkin-32 the default in the 4.0 release. See the documentation for more details. By @​acoulton in #1799
  • Add deprecation collector to capture and print Behat deprecations. Users can opt-in to display and/or fail on deprecations using the methods on the TesterOptions config object. Extension developers can log their own runtime deprecations by calling DeprecationCollector::trigger(). By @​carlos-granados in #1794

Internal

... (truncated)

Commits
  • 7fbdcda docs: Add changelog for v3.31.0 (#1829)
  • d2fea5e ci: Ignore PHPUnit security advisory related PHP Ini Argument injection (#1827)
  • 908e63d fix: Always populate language in TranslatedDefinition (#1826)
  • fe055fd fix: Incorrect not-null string phpdoc typehints (#1825)
  • 2122208 fix: Type hinting / safety of TableColumnTransformation (#1823)
  • 76d9f91 fix: Callee description can be null (#1821)
  • 0e4a63b refactor: Apply further strict types to 3.x (#1818)
  • 42a7997 refactor: Bump phpstan & rector and apply new refactorings (#1817)
  • 122fb9c fix: Return type on ScenarioLikeTested, and add strict returns to final eve...
  • be4af8c docs: Add changelog for 3.30.0 (#1810)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [behat/behat](https://github.com/Behat/Behat) from 3.29.0 to 3.31.0.
- [Release notes](https://github.com/Behat/Behat/releases)
- [Changelog](https://github.com/Behat/Behat/blob/3.x/CHANGELOG.md)
- [Commits](Behat/Behat@v3.29.0...v3.31.0)

---
updated-dependencies:
- dependency-name: behat/behat
  dependency-version: 3.31.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Apr 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants