chore(deps): bump igor-php/igor-php from 0.9.7 to 0.10.1

[dependabot]

Bumps igor-php/igor-php from 0.9.7 to 0.10.1.

Release notes

Sourced from igor-php/igor-php's releases.

v0.10.1

🧟‍♂️⚡ Igor-PHP — Release Notes (v0.10.1)

This patch release fixes a regression introduced in v0.10.0: injected dependencies type-hinted with an interface were no longer recognized as resettable.

---

⚠️ Upgrade notes

• Clear your Symfony cache after upgrading (php bin/console cache:clear) so that IgorPhpBundle regenerates igor_service_map.json with the interface aliases restored.

---

🐛 Bug Fixes

1. Interface aliases are back in the service map (#91)

• What: Since v0.10.0 (#88), IgorDiscoveryPass runs after Symfony's removing passes. By then, RemovePrivateAliasesPass has already dropped every private alias, including the autowiring aliases such as App\CacheInterface => App\RedisCache. Without them, Igor could no longer resolve an interface type hint to the service behind it. A service injecting an interface whose implementation implements ResetInterface was flagged again for mutating that dependency, and interface-based reachability ranking (#80) was affected too.
• How it works:
  • A new IgorAliasSnapshotPass records the container aliases in PassConfig::TYPE_BEFORE_REMOVING, right before they are removed. IgorDiscoveryPass merges this snapshot with the aliases still in the compiled container.
  • When the target of an alias was inlined by Symfony, the alias points to the target's class, so it still matches the inlined.<Class>.<id> definition.
  • Aliases to services pruned as unused are not exported, so the service map keeps matching the compiled container.

---

🧪 Quality

• The real Symfony container compilation test now covers private interface aliases, including aliases to inlined and pruned services.
• A new end-to-end Go test checks that a mutation through an interface alias to a resettable service is allowed, and flagged when the alias is missing.

---

📦 Contributors

Thanks to @​KevinMartinsDev for spotting the regression and testing the fix!

v0.10.0

🧟‍♂️⚡ Igor-PHP — Release Notes (v0.10.0)

This release brings Igor into your editor with the official PhpStorm / JetBrains plugin, makes the Symfony service map match what the compiled container really keeps, and widens the detection of process-wide state mutations.

---

⚠️ Upgrade notes

• Clear your Symfony cache after upgrading (php bin/console cache:clear) so that IgorPhpBundle regenerates igor_service_map.json with the new discovery logic (#88). An old map keeps working, but without the cleanup described below.
• igor-baseline.json is now loaded automatically from the project root when no baseline is configured and no --baseline flag is passed (#89). If you keep that file without using it, findings it lists will now be ignored.
• Twig\ and ApiPlatform\ are now default safe namespaces (#86). If your igor.json defines its own safe_namespaces, add them there to benefit from it.

---

🚀 Improvements & Features

... (truncated)

Commits

• a4f9153 fix(bundle): keep private interface aliases in the service map (#91)
• 56ceca2 fix(wrapper): send bootstrapper messages to stderr and exit 1 on errors (#90)
• ffc52d5 Fix/issue 87 unused and inlined definitions (#88)
• a68afcc Feat/ide plugin support (#89)
• eb34a4e Feat/add twig to safe namespaces (#86)
• f93c28c Feat/detect dangerous process state functions (#85)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, php. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: nowo-tech/ControllerKitBundle/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: a2465305-16c1-4d22-8480-587e4f1a7de4

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

@coderabbitai review