(chore): Bump the composer group with 3 updates

[dependabot]

Bumps the composer group with 3 updates: guzzlehttp/uri-template, nette/utils and friendsofphp/php-cs-fixer.

Updates guzzlehttp/uri-template from 1.0.9 to 1.0.10

Release notes

Sourced from guzzlehttp/uri-template's releases.

v1.0.10

Fixed

• Fixed prefix modifiers counting Unicode code points and pct-encoded characters instead of bytes

Changelog

Sourced from guzzlehttp/uri-template's changelog.

v1.0.10 - 2026-07-17

Fixed

• Fixed prefix modifiers counting Unicode code points and pct-encoded characters instead of bytes

Commits

• f6c24c2 Release 1.0.10
• c3fa609 Fix URI template prefix byte loss (#115)
• See full diff in compare view

Updates nette/utils from 4.1.4 to 4.1.5

Release notes

Sourced from nette/utils's releases.

Released version 4.1.5

This release adds an immutable date/time class, makes file writes safer, background processes possible, and Finder masks smarter. Plus a couple of bug fixes worth picking up.

✨ New Features

• DateTimeImmutable – a new immutable counterpart to Nette\Utils\DateTime. It extends PHP's \DateTimeImmutable with strict validation (invalid dates and times throw instead of being silently rolled over), convenient factories from() and fromParts(), DST-safe relative modifications, and JSON serialization.
• FileSystem::writeAtomic() – writes a file atomically via a temporary file and rename, so a concurrent reader never sees it partially written or truncated. Ideal for caches and generated configs.
• Process::detach() – lets a process keep running in the background after the Process object is destroyed, instead of being killed by the destructor. Output must go to a file or be discarded, since nobody reads the pipes after detaching.
• Process – on Windows with PHP 8.5, captured output now flows through real pipes instead of temporary files, thanks to the fixed stream_select().
• Html::fragment() and add() – create a nameless element pre-filled with children, or append children to an existing element. Unlike addHtml(), plain strings are escaped by default and nulls are skipped.
• Html::text() and Html::html() – new static factories replacing fromText() and fromHtml(), which are now deprecated.
• Finder – the mask now fully drives recursion: **/foo together with in() searches recursively, and the ** short form expands like in zsh, so test/** means test/**/* and **.c means **/*.c (previously such masks silently degraded to a single *).
• Finder – a trailing slash in a find() mask matches directories only: find('temp/').
• Finder::exclude() – now uses the same mask grammar as find(): **.txt works, ./ anchors to the search root, and a trailing /, /* or /** controls whether the directory itself, its contents, or both are excluded.
• Finder – paths are no longer normalized to forward slashes; they stay in their native form, which also fixes corruption of backslashes in POSIX file names. Note: on Windows, returned paths may now contain backslashes where they used to be unified.

🐛 Bug Fixes

• ArrayList::prepend() – no longer misbehaves on an empty list.
• Validators::isUrl() – now rejects malformed IPv4 addresses with octets above 255, so nonsense like http://999.1.1.1 no longer passes as a valid URL.
• Strings::compare() – tolerates invalid UTF-8 instead of failing when the Normalizer gives up.
• Strings::length() – the fallback used when neither mbstring nor iconv is available no longer relies on the deprecated utf8_decode(), so it stays quiet on PHP 8.2+.
• Finder::exclude() – exclude('subdir/') silently excluded nothing due to a greedy regex; the trailing /, /* and /** variants now work as documented.

Commits

• b043439 added DateTimeImmutable
• 4ceccd4 Validators: isUrl() rejects IPv4 octets above 255
• ebd7d70 Strings: length() fallback strips UTF-8 continuation bytes instead of depreca...
• cc0326d FileSystem: added writeAtomic()
• 2d14f18 Strings: compare() tolerates invalid UTF-8 when Normalizer fails
• 3084eaa ArrayList: fixed prepend() on empty list
• 2bcceec Finder: updated internals docs for the new mask grammar
• 0185cea Finder: exclude() uses the same mask grammar as find()
• 4528ff5 Finder: trailing slash in find() mask means directories only
• c4b697e Finder: mask drives recursion, added ** short form
• Additional commits viewable in compare view

Updates friendsofphp/php-cs-fixer from 3.95.13 to 3.95.15

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.15 Adalbertus

What's Changed

• fix: self-update - fix "Access Denied" error when running on Windows by @​mlocati in PHP-CS-Fixer/PHP-CS-Fixer#9731

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.14...v3.95.15

v3.95.14 Adalbertus

What's Changed

• deps: bump the phpstan group in /dev-tools with 2 updates by @​dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9717
• deps: bump shipmonk/dead-code-detector from 1.3.0 to 1.3.1 in /dev-tools in the shipmonk group across 1 directory by @​dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9718
• chore: cleanup FunctionToConstantFixer by @​kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9719
• chore: add code coverage ignore annotations to parallel runner and worker by @​kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9721
• test: ConfigurationResolverTest - fix types by @​kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9725
• test: ClassDefinitionFixerTest - improve PHPDocs by @​kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9726
• test: GeneralAttributeRemoveFixerTest - improve data provider types by @​kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9727
• test: HeaderCommentFixerTest - improve invalid configuration types by @​kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9728
• fix: TrailingCommaInMultilineFixer - do not add trailing comma after first-class callable by @​kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9722
• fix: ClassAttributesSeparationFixer - handle property with hooks as last class element by @​kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9724
• fix: SingleClassElementPerStatementFixer - do not break PHP syntax when splitting properties with disjunctive normal form type by @​kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9723
• test: ProjectCodeTest - improve PHPDocs by @​kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9730
• deps: allow to run PHPUnit v12 directly for project, without future-ready CI workarounds by @​keradus in PHP-CS-Fixer/PHP-CS-Fixer#9580

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.13...v3.95.14

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.15

• fix: self-update - fix "Access Denied" error when running on Windows (#9731)

Changelog for v3.95.14

• fix: ClassAttributesSeparationFixer - handle property with hooks as last class element (#9724)
• fix: SingleClassElementPerStatementFixer - do not break PHP syntax when splitting properties with disjunctive normal form type (#9723)
• fix: TrailingCommaInMultilineFixer - do not add trailing comma after first-class callable (#9722)
• chore: add code coverage ignore annotations to parallel runner and worker (#9721)
• chore: cleanup FunctionToConstantFixer (#9719)
• test: HeaderCommentFixerTest - improve invalid configuration types (#9728)
• test: ClassDefinitionFixerTest - improve PHPDocs (#9726)
• test: ConfigurationResolverTest - fix types (#9725)
• test: GeneralAttributeRemoveFixerTest - improve data provider types (#9727)
• test: ProjectCodeTest - improve PHPDocs (#9730)
• deps: allow to run PHPUnit v12 directly for project, without future-ready CI workarounds (#9580)
• deps: bump shipmonk/dead-code-detector from 1.3.0 to 1.3.1 in /dev-tools in the shipmonk group across 1 directory (#9718)
• deps: bump the phpstan group in /dev-tools with 2 updates (#9717)

Commits

• 3e47e5d prepared the 3.95.15 release
• 5eeae8d fix: self-update - fix "Access Denied" error when running on Windows (#9731)
• 8153d49 bumped version
• beee274 prepared the 3.95.14 release
• 4b1d95d deps: allow to run PHPUnit v12 directly for project, without future-ready CI ...
• 4796020 test: ProjectCodeTest - improve PHPDocs (#9730)
• e8af9ca fix: SingleClassElementPerStatementFixer - do not break PHP syntax when spl...
• b858858 fix: ClassAttributesSeparationFixer - handle property with hooks as last cl...
• 6a461b9 fix: TrailingCommaInMultilineFixer - do not add trailing comma after first-...
• 177aa71 test: HeaderCommentFixerTest - improve invalid configuration types (#9728)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Composer package changes

Prod Packages	Operation	Base	Target	Link	License
guzzlehttp/uri-template	Upgraded	v1.0.9	v1.0.10	Compare	MIT
nette/utils	Upgraded	v4.1.4	v4.1.5	Compare	BSD-3-Clause, GPL-2.0-only, GPL-3.0-only

Dev Packages	Operation	Base	Target	Link	License
friendsofphp/php-cs-fixer	Upgraded	v3.95.13	v3.95.15	Compare	MIT