[dependabot]

Updates the requirements on composer/semver to permit the latest version.

Release notes

Sourced from composer/semver's releases.

3.5.0

• Added VersionParser::isValid() to check whether a version string can be normalized (#168)
• Fixed Intervals::compactConstraint() turning constraints that match no dev versions, like > 1.0.0 != 2.0.0 || < 1.9.0, into != 2.0.0 which matches all dev-* versions (#189)
• Fixed >= and < constraints on RC versions, like >=1.0-RC1, getting an extra -dev suffix which beta and alpha constraints did not get (#187)
• Improved CompilingMatcher performance by avoiding building concatenated cache keys on every call (#186)

Full Changelog: composer/semver@3.4.4...3.5.0

Changelog

Sourced from composer/semver's changelog.

[3.5.0] 2026-09-24

• Added VersionParser::isValid() to check whether a version string can be normalized (#168)
• Fixed Intervals::compactConstraint() turning constraints that match no dev versions, like > 1.0.0 != 2.0.0 || < 1.9.0, into != 2.0.0 which matches all dev-* versions (#189)
• Fixed >= and < constraints on RC versions, like >=1.0-RC1, getting an extra -dev suffix which beta and alpha constraints did not get (#187)
• Improved CompilingMatcher performance by avoiding building concatenated cache keys on every call (#186)

[3.4.4] 2025-08-20

• Fixed some type annotations to use list return types (#171)

[3.4.3] 2024-09-19

• Fixed some type annotations

[3.4.2] 2024-07-12

• Fixed PHP 5.3 syntax error

[3.4.1] 2024-07-12

• Fixed normalizeStability's return type to enforce valid stabilities

[3.4.0] 2023-08-31

• Support larger major version numbers (#149)

[3.3.2] 2022-04-01

• Fixed handling of non-string values (#134)

[3.3.1] 2022-03-16

• Fixed possible cache key clash in the CompilingMatcher memoization (#132)

[3.3.0] 2022-03-15

• Improved performance of CompilingMatcher by memoizing more (#131)
• Added CompilingMatcher::clear to clear all memoization caches

[3.2.9] 2022-02-04

• Revert #129 (Fixed MultiConstraint with MatchAllConstraint) which caused regressions

[3.2.8] 2022-02-04

• Updates to latest phpstan / CI by @​Seldaek in composer/semver#130
• Fixed MultiConstraint with MatchAllConstraint by @​Toflar in composer/semver#129

[3.2.7] 2022-01-04

... (truncated)

Commits

• f7a296f Update changelog
• b60bbab Do not compact a dev-free constraint into bare != constraints that match dev ...
• 346ebc8 Avoid concatenated cache keys in CompilingMatcher (#186)
• 9255780 Add CI job running the VERS spec test suite (#188)
• 9ee1a95 Fix RC stability suffix getting an extra -dev in < and >= constraints (#187)
• dee3264 Bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 (#185)
• 1cbc9b5 Bump actions/checkout from 7.0.0 to 7.0.1 (#183)
• 52bf964 Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.1 (#182)
• a5e1d2d Bump shivammathur/setup-php from 2.37.1 to 2.37.2 (#181)
• 0de3018 Bump actions/checkout from 6.0.2 to 7.0.0 (#179)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)