chore(deps-dev): bump the composer-development group across 1 directory with 2 updates

[dependabot]

Bumps the composer-development group with 2 updates in the / directory: google/cloud-storage and squizlabs/php_codesniffer.

Updates google/cloud-storage from 1.51.0 to 2.5.1

Release notes

Sourced from google/cloud-storage's releases.

google/cloud-storage v2.5.1

Miscellaneous Chores

google/cloud-storage v2.5.0

Features

• add support for Guzzle 8 (ea23f87)

google/cloud-storage v2.4.0

Features

• Storage: add support for Bucket IP filter configuration (#9286) (85ac41b)

google/cloud-storage v2.3.0

Features

• storage: Add deleteSourceObjects option to Bucket::compose() (#9211) (cc0d5a2)
• storage: Enable default CRC32C checksum validation for object downloads (#9210) (9ad4f21)
• Storage: Update StorageObject::exists to use HEAD request instead of GET (#9196) (34a5663)

google/cloud-storage v2.2.0

Features

• Storage: Support user-provided hash validation in uploads (#9178) (d2b2f3c)

google/cloud-storage v2.1.0

Features

• storage: Support fopen modes x and xb (#9159) (563c2f9)

google/cloud-storage v2.0.0

Features

• storage: Implement Object Contexts with advanced filtering and validation (#9122) (c59cc4d)
• storage: Set CRC32C as the default checksum option (#9107) (a0adbb7)

Bug Fixes

• Set CRC32C as the default checksum option (a0adbb7)

Commits

• 95643e1 chore(main): release 0.340.0 (#9434)
• aaf162f chore: update codesniffer (#9438)
• ecead6c chore(main): release 0.338.0 (#9393)
• 2169481 feat: add support for Guzzle 8
• f1254a0 chore(main): release 0.334.0 (#9289)
• c8c23e3 feat(Storage): add support for Bucket IP filter configuration (#9286)
• 5717ca7 chore(main): release 0.331.0 (#9213)
• 150efdd feat(Storage): update StorageObject::exists to use HEAD request instead of GE...
• 4acb1f0 feat(storage): enable default CRC32C checksum validation for object downloads...
• 0444735 feat(storage): add deleteSourceObjects option to Bucket::compose() (#9211)
• Additional commits viewable in compare view

Updates squizlabs/php_codesniffer from 3.13.6 to 4.0.4

Release notes

Sourced from squizlabs/php_codesniffer's releases.

4.0.4 - 2026-08-06

The 4.0.2 release, the 4.0.3 and the 4.0.4 release are 100% the same (aside from the version number), there was just a slight snafu in the release publication on GitHub (missing PHAR assets). Sorry for the confusion.

4.0.2 - 2026-08-06

This is a security release and all users are advised to update their install(s) as soon as possible. The security issue only affects users of the Gitblame, Hgblame or Svnblame report(s).

Added

• Tokenizer support for the PHP 8.5 (void) cast. #1325 The T_VOID_CAST token has been added to the Tokens::CAST_TOKENS array.
• suggest section to the composer.json file to inform users about the recommended iconv and pcntl PHP extensions. #1388
  • Thanks to Rodrigo Primo for the patch.

Changed

• Clarified that libxml is a required PHP extension. #1409
• Squiz.Scope.StaticThisUsage: the sniff will now also search for the use of $this in static closures. #1377
• The Generic.PHP.LowerCaseKeyword, Generic.WhiteSpace.LanguageConstructSpacing and Squiz.Functions.FunctionDeclarationArgumentSpacing sniffs no longer embed UTF-8 middot characters for spaces in error messages. #1379, #1389 Fixes [Squiz/#2652](squizlabs/PHP_CodeSniffer#2652).
  • Thanks to Rodrigo Primo for the patches.
• PSR2.ControlStructures.SwitchDeclaration: the error message for the use of colon + curly braces (WrongOpener*) has been made more informative. #1358. Fixes #1322.
  • Thanks to Sule-Balogun Olanrewaju for the patch.
• The error messages for the following sniffs have been improved by exposing more data placeholders:
  • PEAR.Functions.FunctionDeclaration #1445
    • The CloseBracketLine error message now exposes 1 data value (previously 0).
    • The EmptyLine error message now exposes 1 data value (previously 0).
    • The Indent error message now exposes 3 data values (previously 2).
    • These changes also affect the same error codes for the PSR12.Classes.AnonClassDeclaration and Squiz.Functions.MultiLineFunctionDeclaration sniffs.
  • PSR2.Classes.ClassDeclaration #1446
    • The ExtendsLine and ImplementsLine error messages now expose 3 data values (previously 1).
    • The SpaceBeforeExtends and SpaceBeforeImplements error messages now expose 2 data values (previously 1).
    • These changes also affect the same error codes for the PSR12.Classes.AnonClassDeclaration and Squiz.Classes.ClassDeclaration sniffs.
  • PSR2.ControlStructures.SwitchDeclaration #1447
    • The defaultNotLower and caseNotLower error messages now expose 3 data values (previously 2).
    • The SpaceBeforeColonDEFAULT and SpaceBeforeColonCASE error messages now expose 1 data value (previously 0).
    • The BodyOnNextLineDEFAULT and BodyOnNextLineCASE error messages now expose 1 data value (previously 0).
    • The WrongOpenerdefault and WrongOpenercase error messages now expose 1 data value (previously 0).
  • Squiz.ControlStructures.SwitchDeclaration #1449
    • The CaseNotLower and DefaultNotLower error messages now expose 3 data values (previously 2).
    • The CaseIndent and DefaultIndent error messages now expose 2 data values (previously 0).
    • The SpaceBeforeColonCase and SpaceBeforeColonDefault error messages now expose 1 data value (previously 0).
    • The BreakIndent error message now exposes 1 data value (previously 0).
    • The SpacingAfterCase and SpacingAfterDefault error messages now expose 1 data value (previously 0).
  • Squiz.Functions.FunctionDeclarationArgumentSpacing #1452
    • The SpaceBeforeEquals error message now exposes 3 data values (previously 2).
    • The SpaceAfterEquals error message now exposes 3 data values (previously 2).
  • Squiz.Functions.MultiLineFunctionDeclaration #1453
    • The FirstParamSpacing and UseFirstParamSpacing error messages now expose 1 data value (previously 0).
    • The OneParamPerLine and UseOneParamPerLine error messages now expose 1 data value (previously 0).
    • These changes also affect the same error codes for the PSR12.Classes.AnonClassDeclaration sniff.
  • If you have customised the error messages of these sniffs, please review your ruleset after upgrading.
  • Thanks to Zhang WenTao for these patches.

... (truncated)

Changelog

Sourced from squizlabs/php_codesniffer's changelog.

Changelog

The file documents changes to the PHP_CodeSniffer project for the 3.x series of releases.

Commits

• bbdc3d0 Merge branch '3.x' into 4.x
• 3d9e4c6 Merge pull request #1471 from PHPCSStandards/feature/update-gpg-key-info
• 0c3dc35 Changelog: add release links
• ddc0bf9 Changelog update for 4.0.3 + 4.0.4
• 09a2847 Config: update version nr to next
• aa43975 Merge branch '3.x' into 4.x
• 29a0859 Config: update version nr to next
• 305aebb Update for new GPG keys
• 74ee2d4 Merge pull request #1475 from PHPCSStandards/feature/changelog-4.0.2
• 2f4a106 Changelog for the 4.0.2 release
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions