Skip to content

build(deps-dev): bump carthage-software/mago from 1.46.0 to 1.47.6 in /tools/mago - #2621

Open
dependabot[bot] wants to merge 1 commit into
1.xfrom
dependabot/composer/tools/mago/carthage-software/mago-1.47.6
Open

build(deps-dev): bump carthage-software/mago from 1.46.0 to 1.47.6 in /tools/mago#2621
dependabot[bot] wants to merge 1 commit into
1.xfrom
dependabot/composer/tools/mago/carthage-software/mago-1.47.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor

Bumps carthage-software/mago from 1.46.0 to 1.47.6.

Release notes

Sourced from carthage-software/mago's releases.

Mago 1.47.6

Mago 1.47.6 strengthens property and control-flow narrowing, preserves collection precision, and fixes formatter comment and string handling.

🐛 Bug Fixes

Analyzer

  • Nested isset: marks roots defined after guarded nested offset checks. (#2303, 1da40ab)
  • Nullsafe booleans: narrows nullable receivers after boolean property comparisons. (#2315, e3aefe1)
  • Nullsafe instanceof: narrows receivers and properties after nullsafe type checks. (#2308, ea927d0)
  • String-length guards: narrows strings from strlen() comparisons. (#2307, fff0817)
  • Integer reconciliation: preserves literal unions through bitwise guards. (#2309, 801fc7f)
  • Keyed writes: retains non-empty arrays after writes from non-empty loops. (#2305, ed44977)
  • Boolean aliases: preserves guard narrowing across elseif and match. (#2312, 2a248f1)
  • Compound assignments: retains right-operand types in the expression index. (#2311, ce98d0d)
  • Immutable chains: keeps deep property narrowing across unrelated calls. (#2304, 414c4e0)
  • Trait requirements: excludes requirement-only generics from inheritance paths. (#2317, 007de69)
  • Property assertions: maps parameter-property assertions onto call arguments. (#2318, 696def4)

Prelude

  • Reflection names: types ReflectionClass<T>::getName() as class-string<T>. (#2314, f38df5b)

Formatter

  • Parenthesized comments: keeps comments attached inside grouping parentheses. (#2300, 88d062f)
  • Dollar strings: preserves single quotes around strings containing dollar signs. (#2316, 6aa441c)

🏗️ Internal

Performance

  • Analyzer allocations: removes redundant clones from hot analysis paths. (16335f4)

Maintenance

  • Version updater: reduces release versioning complexity. (5113670)
  • Nightly Clippy: removes a redundant watcher path clone. (64f3e9f)

🙏 Thank You

Contributors

A huge thank you to everyone who contributed code to this release:

Issue Reporters

... (truncated)

Commits
  • ad48106 release: 1.47.6
  • 696def4 fix(analyzer): resolve assertions on argument properties
  • 007de69 fix(analyzer): exclude trait requirements from inheritance paths
  • 414c4e0 fix(analyzer): preserve narrowing across immutable property chains
  • 16335f4 chore(analyzer): remove redundant clones
  • ce98d0d fix(analyzer): preserve operand types in compound assignments
  • 2a248f1 fix(analyzer): preserve boolean guard narrowing across branches
  • 64f3e9f chore(database): fix clippy error
  • 6aa441c fix(formatter): preserve single quotes for dollar-containing strings
  • ed44977 fix(analyzer): preserve non-empty arrays after keyed writes
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [carthage-software/mago](https://github.com/carthage-software/mago) from 1.46.0 to 1.47.6.
- [Release notes](https://github.com/carthage-software/mago/releases)
- [Commits](carthage-software/mago@1.46.0...1.47.6)

---
updated-dependencies:
- dependency-name: carthage-software/mago
  dependency-version: 1.47.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Sep 8, 2026
@dependabot
dependabot Bot requested a review from norberttech as a code owner September 8, 2026 04:33
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Sep 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code size: S

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants