[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
friendsofphp/php-cs-fixer	3.95.29 → 3.95.30

---

Release Notes

PHP-CS-Fixer/PHP-CS-Fixer (friendsofphp/php-cs-fixer)

v3.95.30

Compare Source

• Revert "refactor: no need for /u for new-line regex" (#​9930)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[artidezi-etke-cc]

Approved: no adaptation is required under the configured project policy.

Approve unchanged: the PR updates only PHP-CS-Fixer from 3.95.29 to 3.95.30 and applies directly to the recorded target. Upstream restores Unicode-aware newline matching without changing dependency requirements or adding deprecations. Candidate Composer validation passed; supplied source CI passed PHP analysis/style checks and frontend lint/typecheck/build. Full CI checks were not duplicated locally. No new migration debt was identified.

Agent-assessed risk: Low. Development-tool patch with unchanged dependency requirements, a narrowly scoped upstream revert, and successful supplied CI.

Evidence (5 items)

• Local check: git merge-base 7570d00845f861fb99e0dc63d1d548b7575d27fa refs/artidezi/inputs/source-pr; git diff 7570d00845f861fb99e0dc63d1d548b7575d27fa...refs/artidezi/inputs/source-pr -- app/composer.lock — Merge base equals the target base. Only app/composer.lock changes (7 insertions, 7 deletions); there are no newer target-only changes to reconcile.
• Upstream diff: source — Retrieved official comparison through GitHub API. Release commit matches lock reference e85cafc4d861c122839d5409eda3325ac0ec0300. Runtime changes restore /u on newline regexes in NoEmptyCommentFixer, PhpUnitNoExpectationAnnotationFixer, AlignMultilineCommentFixer and CommentsAnalyzer; remaining changes are release version/changelog. No new deprecations or removals.
• Local check: python3 semantic comparison of git show <target>:app/composer.lock and git show refs/artidezi/inputs/source-pr:app/composer.lock — Passed assertions: all non-development lock sections and every other development package are identical; PHP-CS-Fixer changes only version, source, dist, support and release timestamps. Its dependency requirements are unchanged.
• Local check: ./bin/composer validate --strict (temporary git archive of refs/artidezi/inputs/source-pr) — Exit 0: ./composer.json is valid. Used repository Docker Composer helper against candidate files; temporary archive removed. No local dependency install, PHP image build, PHPStan, style suite or frontend suite was run.
• Evidence: Supplied source CI snapshot at f72b5bbab9270416a75471f6012f300045681c9a and .github/workflows/check.yml — Snapshot reports successful php and frontend checks. Workflow covers Composer validation/install, PHP image build, autoload, PHPStan, PHP-CS-Fixer, Twig style, npm lint/typecheck/build and Node container build. Used as supplied evidence, not independently refreshed forge state.

Assessed source f72b5bbab9270416a75471f6012f300045681c9a.