Bump the dependencies group with 2 updates

[dependabot]

Bumps the dependencies group with 2 updates: phpstan/phpstan and squizlabs/php_codesniffer.

Updates phpstan/phpstan from 1.10.57 to 1.10.58

Release notes

Sourced from phpstan/phpstan's releases.

1.10.58

Improvements 🔧

• Verify property type after unset (phpstan/phpstan-src@aeadbe2), #10506, #6773

Bugfixes 🐛

• InvalidThrowsPhpDocValueRule: support @phpstan-require-extends (#2890), #10475, thanks @​RobertMe!
• sort(), rsort() and usort() convert an array to list (#2891), #6467, #10423, #3312, thanks @​takaram!
• Fix stale result cache with imported type aliases (#2894), #10449, thanks @​staabm!
• Avoid internal error with T<X> where T bound consist of intersection type (phpstan/phpstan-src@778b569), #10509
• Recognize [1 => 'method', 0 => $obj] as callable (#2896), #10502, thanks @​staabm!
• SprintfFunctionDynamicReturnTypeExtension - limit combinatorial explosion (phpstan/phpstan-src@51cffd4), #10538
• Fix implicit @phpstan-assert PHPDoc inheritance with generics (#2909), #10037, #9123, thanks @​RobertMe!

Internals 🔍

• Prevent unnecessary isSuperTypeOf() calls (#2895), thanks @​staabm!
• Simplify ClassPropertiesNode->getUninitializedProperties() (#2899), thanks @​staabm!

Commits

• a235183 PHPStan 1.10.58
• 156ee64 Updated PHPStan to commit 156ee64ba93b44adf242513a86efafc9f4faebff
• 1f1b521 Updated PHPStan to commit 1f1b521fbf7013c79afd0d95cd6b591742acd525
• 61c9177 Updated PHPStan to commit 61c9177b84cfaff1c7ef705a7afc76bc78903d59
• 083f489 Fix doctrine/persistence
• 9a790f2 Fix efabrica-team/phpstan-latte
• 813d15e Updated PHPStan to commit 813d15e31fa4267547b5e7a0e84622cbb269b3f9
• a7ff362 Updated PHPStan to commit a7ff3622b40c1ca8bcefcde1c84f6e7da18c7fbe
• 51cffd4 Updated PHPStan to commit 51cffd49dcf08e17f201f3fb70c29a589d94a234
• aeadbe2 Updated PHPStan to commit aeadbe28e0b0a05a3a48723ac310cf6c0d852711
• Additional commits viewable in compare view

Updates squizlabs/php_codesniffer from 3.8.1 to 3.9.0

Release notes

Sourced from squizlabs/php_codesniffer's releases.

3.9.0 - 2024-02-16

Added

• Tokenizer support for PHP 8.3 typed class constants. #321
  • Additionally, the following sniffs have been updated to support typed class constants:
    • Generic.NamingConventions.UpperCaseConstantName #332
    • Generic.PHP.LowerCaseConstant #330
    • Generic.PHP.LowerCaseType #331
  • Thanks to Juliette Reinders Folmer for the patches
• Tokenizer support for PHP 8.3 readonly anonymous classes. #309
  • Additionally, the following sniffs have been updated to support readonly anonymous classes:
    • PSR12.Classes.ClassInstantiation #324
  • Thanks to Juliette Reinders Folmer for the patches
• New PHP_CodeSniffer\Sniffs\DeprecatedSniff interface to allow for marking a sniff as deprecated. #281
  • If a ruleset uses deprecated sniffs, deprecation notices will be shown to the end-user before the scan starts. When running in -q (quiet) mode, the deprecation notices will be hidden.
  • Deprecated sniffs will still run and using them will have no impact on the exit code for a scan.
  • In ruleset "explain"-mode (-e) an asterix * will show next to deprecated sniffs.
  • Sniff maintainers are advised to read through the PR description for full details on how to use this feature for their own (deprecated) sniffs.
  • Thanks to Juliette Reinders Folmer for the patch
• New Generic.CodeAnalysis.RequireExplicitBooleanOperatorPrecedence sniff. #197
  • Forbid mixing different binary boolean operators within a single expression without making precedence clear using parentheses
  • Thanks to Tim Düsterhus for the contribution
• Squiz.PHP.EmbeddedPhp : the sniff will now also examine the formatting of embedded PHP statements using short open echo tags. #27
  • Includes a new ShortOpenEchoNoSemicolon errorcode to allow for selectively ignoring missing semicolons in single line embedded PHP snippets within short open echo tags.
  • The other error codes are the same and do not distinguish between what type of open tag was used.
  • Thanks to Juliette Reinders Folmer for the patch
• Documentation for the following sniffs:
  • Generic.WhiteSpace.IncrementDecrementSpacing
  • PSR12.ControlStructures.ControlStructureSpacing
  • PSR12.Files.ImportStatement
  • PSR12.Functions.ReturnTypeDeclaration
  • PSR12.Properties.ConstantVisibility
  • Thanks to Denis Žoljom and Rodrigo Primo for the patches

Changed

• The Performance report can now also be used for a phpcbf run. #308
  • Thanks to Juliette Reinders Folmer for the patch
• Sniff tests which extend the PHPCS native AbstractSniffUnitTest class will now show a (non-build-breaking) warning when test case files contain fixable errors/warnings, but there is no corresponding .fixed file available in the test suite to verify the fixes against. #336
  • The warning is only displayed on PHPUnit 7.3.0 and higher.
  • The warning will be elevated to a test failure in PHPCS 4.0.
  • Thanks to Dan Wallis for the patch
• The following sniffs have received performance related improvements:
  • Squiz.PHP.EmbeddedPhp
  • Thanks to Juliette Reinders Folmer for the patch
• Various housekeeping, including improvements to the tests and documentation
  • Thanks to Dan Wallis, Joachim Noreiko, Remi Collet, Rodrigo Primo and Juliette Reinders Folmer for their contributions

Deprecated

• Support for scanning JavaScript and CSS files. See #2448.
  • This also means that all sniffs which are only aimed at JavaScript or CSS files are now deprecated.

... (truncated)

Changelog

Sourced from squizlabs/php_codesniffer's changelog.

[3.9.0] - 2024-02-16

Added

• Tokenizer support for PHP 8.3 typed class constants. #321
  • Additionally, the following sniffs have been updated to support typed class constants:
    • Generic.NamingConventions.UpperCaseConstantName #332
    • Generic.PHP.LowerCaseConstant #330
    • Generic.PHP.LowerCaseType #331
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patches
• Tokenizer support for PHP 8.3 readonly anonymous classes. #309
  • Additionally, the following sniffs have been updated to support readonly anonymous classes:
    • PSR12.Classes.ClassInstantiation #324
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patches
• New PHP_CodeSniffer\Sniffs\DeprecatedSniff interface to allow for marking a sniff as deprecated. #281
  • If a ruleset uses deprecated sniffs, deprecation notices will be shown to the end-user before the scan starts. When running in -q (quiet) mode, the deprecation notices will be hidden.
  • Deprecated sniffs will still run and using them will have no impact on the exit code for a scan.
  • In ruleset "explain"-mode (-e) an asterix * will show next to deprecated sniffs.
  • Sniff maintainers are advised to read through the PR description for full details on how to use this feature for their own (deprecated) sniffs.
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch
• New Generic.CodeAnalysis.RequireExplicitBooleanOperatorPrecedence sniff. #197
  • Forbid mixing different binary boolean operators within a single expression without making precedence clear using parentheses
  • Thanks to [Tim Düsterhus][@​TimWolla] for the contribution
• Squiz.PHP.EmbeddedPhp : the sniff will now also examine the formatting of embedded PHP statements using short open echo tags. #27
  • Includes a new ShortOpenEchoNoSemicolon errorcode to allow for selectively ignoring missing semicolons in single line embedded PHP snippets within short open echo tags.
  • The other error codes are the same and do not distinguish between what type of open tag was used.
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch
• Documentation for the following sniffs:
  • Generic.WhiteSpace.IncrementDecrementSpacing
  • PSR12.ControlStructures.ControlStructureSpacing
  • PSR12.Files.ImportStatement
  • PSR12.Functions.ReturnTypeDeclaration
  • PSR12.Properties.ConstantVisibility
  • Thanks to [Denis Žoljom][@​dingo-d] and [Rodrigo Primo][@​rodrigoprimo] for the patches

Changed

• The Performance report can now also be used for a phpcbf run. #308
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch
• Sniff tests which extend the PHPCS native AbstractSniffUnitTest class will now show a (non-build-breaking) warning when test case files contain fixable errors/warnings, but there is no corresponding .fixed file available in the test suite to verify the fixes against. #336
  • The warning is only displayed on PHPUnit 7.3.0 and higher.
  • The warning will be elevated to a test failure in PHPCS 4.0.
  • Thanks to [Dan Wallis][@​fredden] for the patch
• The following sniffs have received performance related improvements:
  • Squiz.PHP.EmbeddedPhp
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch
• Various housekeeping, including improvements to the tests and documentation
  • Thanks to [Dan Wallis][@​fredden], [Joachim Noreiko][@​joachim-n], [Remi Collet][@​remicollet], [Rodrigo Primo][@​rodrigoprimo] and [Juliette Reinders Folmer][@​jrfnl] for their contributions

Deprecated

• Support for scanning JavaScript and CSS files. See #2448.

... (truncated)

Commits

• d63cee4 Merge pull request #341 from PHPCSStandards/feature/changelog-3.9.0
• 4a9addc Changelog for the 3.9.0 release
• 4bbc820 Merge pull request #340 from fredden/missing-fixed-file/Squiz.Commenting.Clos...
• 66e87a1 Avoid adding extra newlines when adding a comment
• 392b2b5 Add auto-generated ".fixed" file
• 3e582fe Merge pull request #339 from PHPCSStandards/feature/various-minor-cs-cleanup
• 814896b Merge pull request #338 from PHPCSStandards/feature/various-docs-tweaks
• 479b4dc CS: various minor fixes
• 8e92de6 Changelog: various tweaks
• 21219d1 README: minor tweak
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (3006839) 91.27% compared to head (2b99c5a) 91.27%.

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #1687   +/-   ##
=========================================
  Coverage     91.27%   91.27%           
  Complexity     1789     1789           
=========================================
  Files           122      122           
  Lines          6375     6375           
=========================================
  Hits           5819     5819           
  Misses          556      556           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.