Composer packages: breaking changes and upgrades

Releases from Packagist, each with an upgrade verdict against the version before it.

Popular packages

laravel/frameworkv13.39.0 phpunit/phpunit13.4.5 symfony/symfonyv8.1.10 aws/aws-sdk-php3.402.5 illuminate/cachev13.39.0 symfony/consolev8.1.10 symfony/var-dumperv8.1.10 friendsofphp/php-cs-fixerv3.95.27 phpstan/phpstan2.3.4 contao/core-bundle6.0.4 phpunit/php-code-coverage14.5.0 symfony/finderv8.1.10

Recent major releases

Verdict against the previous version

Cflarum/corev2.0.0Stable Breaking3324264313Oct 8, 2026 Cphpmd/phpmd3.0.0Stable Breaking1911401106Oct 4, 2026 Cpdepend/pdepend3.0.0Stable Breaking20111310163Sep 29, 2026 Cbehat/behatv4.0.0Stable Breaking147728Sep 28, 2026 Ccontao/core-bundle6.0.0Stable UnknownAug 26, 2026 Cphpseclib/phpseclib4.0.0Stable Breaking2112Aug 23, 2026 Cmaatwebsite/excel4.0.0Stable Breaking1172726Aug 13, 2026

See all new majors

Breaking this week

Cnette/testerv2.7.0Oct 26, 2026Environment::skip(), Environment::exit() and TestCase::skip() now return never, so subclasses overriding them must change their return type.Crector/rector2.8.0Oct 26, 2026Removes dead and deprecated public API including @api annotations, unused collectors, converters, interfaces, created_by_rule attribute, RectifiedAnalyzer, withPhp53Sets()..withPhp74Sets() and…Cnette/div3.2.8Oct 26, 2026Locator definitions are now validated at compile time: keys must match get*()/create*() methods and non-nullable return types need references.Clatte/lattev3.1.7Oct 22, 2026contenteditable, draggable, spellcheck and hidden are no longer treated as plain boolean attributes; contenteditable and draggable now render "true"/"false", hidden and popover keep values.Caws/aws-sdk-php3.401.5Oct 21, 2026Removes the FinSpace and FinSpaceData clients, which are no longer in service.Claravel/frameworkv13.38.0Oct 20, 2026Removes the dead until higher order collection proxy.Cinfection/infection0.35.7Oct 13, 2026Validates configurations with PHPUnit 13.2 and newer in a separate step before the initial test run, changing error output.Cphpseclib/phpseclib4.0.2Oct 7, 2026SSH2 now throws exceptions on error instead of returning false.Cphpstan/phpstan2.3.0Oct 6, 2026Resolves PHP version checks in remaining scope-aware extensions from Scope::getPhpVersion() and forbids injecting PhpVersion into them.Cphpmd/phpmd3.0.0Oct 4, 2026Replaces positional CLI arguments with Symfony Console named options; the signature is now phpmd analyze [options] [--] [<paths>...].