Skip to content

Update cuyz/valinor requirement from ^1.14 to ^2.4#22

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/composer/cuyz/valinor-tw-2.4
Open

Update cuyz/valinor requirement from ^1.14 to ^2.4#22
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/composer/cuyz/valinor-tw-2.4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 30, 2026

Updates the requirements on cuyz/valinor to permit the latest version.

Release notes

Sourced from cuyz/valinor's releases.

2.4.0

Notable changes

This release brings a whole set of new features to the library:

Enjoy! 🎉


HTTP request mapping support

This library now provides a way to map an HTTP request to controller action parameters or object properties. Parameters can be mapped from route, query and body values.

Three attributes are available to explicitly bind a parameter to a single source, ensuring the value is never resolved from the wrong source:

  • #[FromRoute] — for parameters extracted from the URL path by router
  • #[FromQuery] — for query string parameters
  • #[FromBody] — for request body values

Those attributes can be omitted entirely if the parameter is not bound to a specific source, in which case a collision error is raised if the same key is found in more than one source.

This gives controllers a clean, type-safe signature without coupling to a framework's request object, while benefiting from the library's validation and error handling.

Normal mapping rules apply there: parameters are required unless they have a default value.

Route and query parameter values coming from an HTTP request are typically strings. The mapper automatically handles scalar value casting for these parameters: a string "42" will be properly mapped to an int parameter.

Mapping a request using attributes

Consider an API that lists articles for a given author. The author identifier comes from the URL path, while filtering and pagination come from the query string.

use CuyZ\Valinor\Mapper\Http\FromQuery;
use CuyZ\Valinor\Mapper\Http\FromRoute;
use CuyZ\Valinor\Mapper\Http\HttpRequest;
use CuyZ\Valinor\MapperBuilder;
final class ListArticles
{
/**
* GET /api/authors/{authorId}/articles?status=X&page=X&limit=X
*
* @​param non-empty-string $page
* @​param positive-int $page
* @​param int<10, 100> $limit
</tr></table>

... (truncated)

Commits
  • 3b0afa3 release: version 2.4.0
  • 385f0ce feat: add HTTP request mapping support
  • 498dcfc fix: disallow duplicate converted keys
  • 51e7d1c qa: use Rector's configuration builder and PHP 8.2 preset
  • 13f06d2 fix: handle concurrent cache directory race condition
  • 7241a60 fix: allow mapping a single value to a list type
  • a92bd34 feat: add mapper configurators to convert keys to camelCase/snake_case
  • 0be7dcd feat: add mapper configurators to restrict keys cases
  • 49dd0a2 feat: add configurator support for mapper and normalizer builders
  • 67a6b4b chore(deps): update mkdocs dependencies
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [cuyz/valinor](https://github.com/CuyZ/Valinor) to permit the latest version.
- [Release notes](https://github.com/CuyZ/Valinor/releases)
- [Commits](CuyZ/Valinor@1.14.0...2.4.0)

---
updated-dependencies:
- dependency-name: cuyz/valinor
  dependency-version: 2.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 30, 2026

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants