[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
vincentlanglet/twig-cs-fixer	3.14.* → 4.1.*

---

Release Notes

VincentLanglet/Twig-CS-Fixer (vincentlanglet/twig-cs-fixer)

v4.1.1

Compare Source

What's Changed

• fix(tokenizer): parse spread operator as unary inside a hash by @​clussiana in #​464
• Fix compatibility with Symfony 8.1.6 by @​VincentLanglet in #​466

New Contributors

• @​clussiana made their first contribution in #​464

Full Changelog: VincentLanglet/Twig-CS-Fixer@4.1.0...4.1.1

v4.1.0

Compare Source

What's Changed

• Tokenize doc comment by @​VincentLanglet in #​462

Full Changelog: VincentLanglet/Twig-CS-Fixer@4.0.2...4.1.0

v4.0.2

Compare Source

What's Changed

• Fix upgrade guide diffs for 2.x to 3.0 by @​christopherp309 in #​456
• Fix parsing of unary operators by @​VincentLanglet in #​459

New Contributors

• @​christopherp309 made their first contribution in #​456

Full Changelog: VincentLanglet/Twig-CS-Fixer@4.0.1...4.0.2

v4.0.1

Compare Source

What's Changed

• Fix parsing of unary operator by @​VincentLanglet in #​455

Full Changelog: VincentLanglet/Twig-CS-Fixer@4.0.0...4.0.1

v4.0.0

Compare Source

What's Changed

• Fix rule name in doc by @​VincentLanglet in #​444
• Split operator spacing rule by @​VincentLanglet in #​431
• Change some Tokens Type to Operator by @​VincentLanglet in #​434
• Restrict Token::type to string by @​VincentLanglet in #​437
• Introduce IgnoredViolationId object by @​VincentLanglet in #​438
• Add DelimiterSpacingRule configuration by @​VincentLanglet in #​448
• Use phpstan for improve mutation coverage by @​VincentLanglet in #​449
• Prepare Twig 4 support by @​VincentLanglet in #​450
• Keep quotes on negative integer hash keys by @​Kocal in #​452
• Fix build by @​VincentLanglet in #​453

New Contributors

• @​Kocal made their first contribution in #​452

Full Changelog: VincentLanglet/Twig-CS-Fixer@3.14.0...4.0.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[artidezi-etke-cc]

The agent prepared adaptations for human review. The original change remains open.

Prepared a replacement commit containing the Twig CS Fixer 4.1.1 update and its lockfile, plus the two new operator spacing rules required to preserve existing lint coverage. The unadapted PR silently accepts malformed ternary and unary spacing. All requested local dependency, PHP and frontend checks passed; no application runtime, image, browser asset or workflow changes were needed. Human merge is required.

Agent-assessed risk: Low. This development-tool update preserves the existing spacing policy, with a focused regression check and passing application checks; production dependencies and runtime code are unchanged.

Evidence (8 items)

• Evidence: git diff ee5e8d0f5b218418a745c507e89c4219f601a0d5...refs/artidezi/inputs/source-pr — Merge base equals the recorded target base. The source changes only app/composer.json and app/composer.lock, upgrading vincentlanglet/twig-cs-fixer from 3.14.0 to 4.1.1; no target-only changes require reconciliation.
• Documentation: source — The v4 migration guide splits OperatorSpacingRule into operator, ternary and unary rules. The changed DelimiterSpacingRule constructor remains compatible with the repository’s no-argument invocation. Added TernaryOperatorSpacingRule and UnaryOperatorSpacingRule to the existing custom ruleset.
• Local check: ./bin/composer install --no-interaction --prefer-dist; ./bin/composer validate --strict; ./bin/composer audit --locked — All passed using the repository helper. Composer manifest is valid and no security advisories were found. Locked Twig 3.28.0 satisfies the fixer’s new ^3.15 requirement; its Symfony constraints support the existing 8.1 components.
• Local check: docker build --iidfile /tmp/artidezi-php-image.id etc/docker/php; docker run --rm --network none --user "$(id -u):$(id -g)" --mount "type=bind,src=$PWD,dst=/code" --workdir /code/app --entrypoint /bin/sh "$(cat /tmp/artidezi-php-image.id)" -ec 'vendor/bin/phpstan analyse -c phpstan.neon && vendor/bin/php-cs-fixer check --config=.php-cs-fixer.dist.php && vendor/bin/twig-cs-fixer lint --config=.twig-cs-fixer.dist.php' — Build succeeded using cached layers. All checks passed: PHPStan analysed 145 files, PHP CS Fixer checked 146 files, and Twig lint checked 38 templates with no errors. Runtime probe reported PHP 8.5.12 and MongoDB driver 2.5.5, satisfying locked mongodb/mongodb 2.5.0’s ^2.5 driver requirement. PHP CS Fixer emitted an informational warning that the runtime is newer than composer.json’s PHP 8.4 minimum. No live database or monitoring stack was started.
• Local check: vendor/bin/twig-cs-fixer lint --no-cache --config=<original-or-adapted-config> <isolated-fixture>; vendor/bin/twig-cs-fixer fix --no-cache --config=<adapted-config> <isolated-fixture> — Executed in the built PHP image with isolated temporary fixtures containing {{ enabled?1:0 }} and {{ not enabled }}. The original PR ruleset passed incorrectly; the adapted ruleset reported five spacing errors. Fixing and subsequent lint passed. Temporary fixtures were removed and were not committed.
• Local check: just js-analyze js-build; ./bin/node /bin/sh -c 'cd /app/src && npm audit' — ESLint, TypeScript checking, frontend image/asset build and npm audit all passed; npm reported zero vulnerabilities. Ignored generated assets were not committed. Browser behavior was not exercised because the update changes only a PHP development tool and lint configuration.
• Local check: git diff --check; git status --porcelain=v1 — Whitespace validation passed before committing. Final working tree is clean. Replacement commit includes all original PR changes and the compatibility fix; no workflow files changed.
• Evidence: Provided source CI snapshot for 23912b3aba0731e2d08fe80ddb005344b3262440 — The supplied snapshot reports successful frontend and php checks for the original source head. This is supporting point-in-time evidence, not a fresh controller gate for the replacement commit.

Adaptation: #38

Assessed source 23912b3aba0731e2d08fe80ddb005344b3262440.