Bump the dependencies group with 3 updates

[dependabot]

Bumps the dependencies group with 3 updates: phpstan/phpstan, phpstan/phpstan-deprecation-rules and twig/twig.

Updates phpstan/phpstan from 1.10.67 to 1.11.0

Release notes

Sourced from phpstan/phpstan's releases.

1.11.0

Read the article about PHPStan 1.11 on phpstan.org »

Major new features 🚀

• Error identifiers
  • A way to categorize reported errors by a stable identifier. Up until now you had to use specific and ever-changing error messages
  • Can be used for ignoring specific errors locally with new @phpstan-ignore comment (uses current or next line automatically)
  • Can be used for ignoring specific errors in ignoreErrors section of your configuration file (phpstan.neon)
  • Can be used in output formatters
  • Can be seen in PHPStan Pro GUI or in TableErrorFormatter with -v
  • Catalogue with source code links: https://phpstan.org/error-identifiers
• PHPStan Pro Reboot
  • A new migration wizard will effortlessly migrate all your @phpstan-ignore-line and @phpstan-ignore-next-line to the new @phpstan-ignore comment style with error identifiers. The old comment style is dangerous because it ignores all errors, current and future, on that line.
  • Revamped UI for much more comfortable viewing and browsing of reported errors
  • The new UI also lets you browse ignored errors, from ignoreErrors, from your baseline and also ignored locally in source code using comments
  • Streaming errors during launch: You don't have to wait for the analysis to complete, you can see errors as they come in during the analysis
  • Support for mapping file paths to the host filesystem when running in Docker or remotely
  • Try it out by running PHPStan with --pro CLI option
• PHPDoc tags describing callable lifecycle: @param-immediately-invoked-callable, @param-later-invoked-callable
  • Useful for exception analysis (https://phpstan.org/blog/bring-your-exceptions-under-control) and @phpstan-pure
• PHPDoc tag @param-closure-this to describe what $this is bound to in a passed closure
• Two new config options around stricter offset checks in arrays (#3028), #7553, thanks @​ttomdewit!
  • reportPossiblyNonexistentGeneralArrayOffset
  • reportPossiblyNonexistentConstantArrayOffset
  • Learn more in the documentation

Bleeding edge 🔪

• Checking truthiness of @phpstan-pure above functions and methods
• Check new/function call/method call/static method call on a separate line without any side effects even without @phpstan-pure PHPDoc tag on the declaration side
  • phpstan/phpstan-src@281a87d
  • #3020, thanks @​staabm!
  • #3022, thanks @​staabm!
  • #3023, thanks @​staabm!
• BetterNoopRule - take advantage of impure points (phpstan/phpstan-src@a647052), #10389
• Run missing type check on @param-out (phpstan/phpstan-src@56b2002)
• CallToConstructorStatementWithoutSideEffectsRule - report class with no constructor (phpstan/phpstan-src@b116d25)
• Deprecated: returning plain strings as errors, use RuleErrorBuilder
  • Learn more: Using RuleErrorBuilder to enrich reported errors in custom rules
• Deprecated: returning RuleError without identifier (phpstan/phpstan-src@969e6fa)

If you want to see the shape of things to come and adopt bleeding edge features early, you can include this config file in your project's phpstan.neon:

includes:
	- vendor/phpstan/phpstan/conf/bleedingEdge.neon
</tr></table> 

... (truncated)

Commits

• 666cb17 PHPStan 1.11.0
• 2871964 PHPStan 1.11 With Error Identifiers, PHPStan Pro Reboot and Much More
• d5a4746 Updated PHPStan to commit d5a4746e91feacdceffe66d00d4976ecaa4a9673
• 6c85acc Updated PHPStan to commit 6c85acc5c209b52fad7e6eaafa6d09d96e555042
• 0463255 Updated PHPStan to commit 046325529b05150ca8b76e408faf8bf1deb6c295
• 49498ce Updated PHPStan to commit 49498ce062e1c0844be5b9d506ea53dbbf5354d2
• 783d9bb Update BACKERS.md
• 39ce042 Updated PHPStan to commit 39ce0425737cdbacfee5fbc08160d023cb5bc639
• 73521c3 Updated PHPStan to commit 73521c30c5f057305ece7ef67fc0cd448768a156
• 7069037 merge.php - output identifier stats into stderr
• Additional commits viewable in compare view

Updates phpstan/phpstan-deprecation-rules from 1.1.4 to 1.2.0

Release notes

Sourced from phpstan/phpstan-deprecation-rules's releases.

1.2.0

• fa8cce7 - Update lock-closed-issues.yml
• 8342041 - Merge remote-tracking branch 'origin/1.1.x' into 1.2.x
• d457b73 - Update PHPStan version
• ff4f00f - Update FetchingDeprecatedConstRuleTest.php
• 437ac71 - Fix build
• e9ea332 - Update metcalfc/changelog-generator action to v4.3.1
• f71dbf6 - Update cbrgm/mastodon-github-action action to v2
• 10f0e35 - Merge branch '1.1.x' into 1.2.x
• 674d785 - Fix build
• e7fe22b - Update metcalfc/changelog-generator action to v4.2.0
• 83345f7 - Update dessant/lock-threads action to v5
• 788ea1b - remove phpstan/phpstan-php-parser
• 4175e8a - Update actions/checkout action to v4
• f1cacde - Fix a typo
• 1884f9f - Next-gen coding standard workflow
• 2313a63 - Modernize rules to use RuleErrorBuilder and report error identifiers
• ca9e4fd - Open 1.2.x-dev

Commits

• fa8cce7 Update lock-closed-issues.yml
• 8342041 Merge remote-tracking branch 'origin/1.1.x' into 1.2.x
• d457b73 Update PHPStan version
• ff4f00f Update FetchingDeprecatedConstRuleTest.php
• 437ac71 Fix build
• e9ea332 Update metcalfc/changelog-generator action to v4.3.1
• f71dbf6 Update cbrgm/mastodon-github-action action to v2
• 10f0e35 Merge branch '1.1.x' into 1.2.x
• 674d785 Fix build
• e7fe22b Update metcalfc/changelog-generator action to v4.2.0
• Additional commits viewable in compare view

Updates twig/twig from 3.9.3 to 3.10.1

Changelog

Sourced from twig/twig's changelog.

3.10.1 (2024-05-12)

• Fix BC break on escaper extension
• Fix constant return type

3.10.0 (2024-05-11)

• Make CoreExtension::formatDate, CoreExtension::convertDate, and CoreExtension::formatNumber part of the public API

• Add needs_charset option for filters and functions

• Extract the escaping logic from the EscaperExtension class to a new EscaperRuntime class.

  The following methods from Twig\\Extension\\EscaperExtension are deprecated: setEscaper(), getEscapers(), setSafeClasses, addSafeClasses(). Use the same methods on the Twig\\Runtime\\EscaperRuntime class instead.

• Fix capturing output from extensions that still use echo

• Fix a PHP warning in the Lexer on malformed templates

• Fix blocks not available under some circumstances

• Synchronize source context in templates when setting a Node on a Node

Commits

• 3af5ab2 Prepare the 3.10.1 release
• 1de5736 bug #4083 Fix BC break on escaper extension (fabpot)
• 1953f77 Fix BC break on escaper extension
• 4313162 bug #4085 Fix constant return type (fabpot)
• f6ce88d Fix constant return type
• bfc3b7b Bump version
• 34422f9 Prepare the 3.10.0 release
• 87adff0 Update CHANGELOG
• 6950b2e Fix markup
• 761aa56 Revert "minor #4042 Auto-close PRs on subtree-splits (kbond)"
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 91.66%. Comparing base (012ac02) to head (01f8051).

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #1738   +/-   ##
=========================================
  Coverage     91.66%   91.66%           
  Complexity     1812     1812           
=========================================
  Files           121      121           
  Lines          6476     6476           
=========================================
  Hits           5936     5936           
  Misses          540      540           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

Try the dev build for this PR: https://acquia-cli.s3.amazonaws.com/build/pr/1738/acli.phar

curl -OL https://acquia-cli.s3.amazonaws.com/build/pr/1738/acli.phar
chmod +x acli.phar