composer(deps-dev): bump the version-updates group with 4 updates

[dependabot]

Updates the requirements on phpstan/phpstan, phpstan/phpstan-deprecation-rules, rector/rector and rector/type-perfect to permit the latest version.
Updates phpstan/phpstan to 1.12.3

Release notes

Sourced from phpstan/phpstan's releases.

1.12.3

Improvements 🔧

• PHPStan Pro: debug corrupted PHAR signature message (phpstan/phpstan-src@9815bbb)

Bugfixes 🐛

• Revert "Fix phar.yml workflow" (phpstan/phpstan-src@6973519), #11638
• Refactor ArrayFilterFunctionReturnTypeReturnTypeExtension and support first-class callable (#3329), #11337, thanks @​takaram!
• Prevent resolving conditional types in callable param/return types (#3405), #11472, thanks @​rvanvelzen!
• Fix wrongly convertion of list<T> to array{T} (#3412), #11642, thanks @​staabm!
• Fix internal error (phpstan/phpstan-src@052f6b1), #11649
• Missing typehints should be consistently checked on level 6 (phpstan/phpstan-src@e3e80f6), #11657

Function signature fixes 🤖

• Don't prevent checking for curl_init() false returns (#3409), #11640, thanks @​tscni!
• Update phpstorm-stubs and patch (#3393), thanks @​VincentLanglet!

Internals 🔍

• The COMPOSER_ROOT_VERSION hack should no longer be necessary (#3414)
• Add non regression test (#3416), #4960, thanks @​VincentLanglet!
• Add non regression test (#3415), #10499, thanks @​VincentLanglet!

Commits

• 0fcbf19 PHPStan 1.12.3
• 9815bbb Updated PHPStan to commit 9815bbba4535b0605aef5b5cb9dd64a63bc44b1f
• e3e80f6 Updated PHPStan to commit e3e80f6c9c246d13e41188d508f0f4afb631b9af
• 052f6b1 Updated PHPStan to commit 052f6b130f53ad50f571b81d4d468b0b0026c2fd
• 5814c7e Updated PHPStan to commit 5814c7e3d71b31f74002912fe5b443efaaf2cd2f
• b3c99fb Updated PHPStan to commit b3c99fb1547fe43b60317550762becce39d516a6
• 3592cf0 Updated PHPStan to commit 3592cf021d99a8d60373c6fb720da541566e03e8
• c26886d Updated PHPStan to commit c26886d5caecf2c8a51abe8642ce98dcb694c182
• df1dfd0 Update baselines
• 3e52bb0 Updated PHPStan to commit 3e52bb081ddb530bbbd651b489b809b0d6c480e0
• Additional commits viewable in compare view

Updates phpstan/phpstan-deprecation-rules to 1.2.1

Release notes

Sourced from phpstan/phpstan-deprecation-rules's releases.

1.2.1

• f94d246 - Add LICENSE
• 8484018 - Pin build-cs in Makefile too
• cd21fa9 - Pin build-cs
• 52728dd - Test newer PHP versions

Commits

• f94d246 Add LICENSE
• 8484018 Pin build-cs in Makefile too
• cd21fa9 Pin build-cs
• 52728dd Test newer PHP versions
• See full diff in compare view

Updates rector/rector to 1.2.5

Release notes

Sourced from rector/rector's releases.

Released Rector 1.2.5

New Features and Improvements 🥳

• 20-30 % Rector speedup - Optimise checking the node types allowed for each rule (#6232), Thanks @​carlos-granados!
• [docs] Add help on the default process command (#6226), Thanks @​94noni!
• [TypeDeclaration] Adds AddClosureParamTypeFromArgRector (#6258)
• Adds AddClosureParamTypeFromObjectRector (#6265), Thanks @​peterfox!
• [Config] Improve ComposerJsonPhpVersionResolver API, make use of explicit php set files (#6273)
• [FileSystem] Add data and writable to not include on InitFilePathsResolver (#6285)
• always make paths absolute before processing files (#6293), Thanks @​Kanti!

Bugfixes 🐛

• [CodeQuality] Handle crash on first class callable inside match on OptionalParametersAfterRequiredRector (#6263)
• [ReturnTypeInferer] Drop this/static docblock type check on ReturnTypeInferer (#6270)

Removed 💀

• [deprecated] Remove deprecated ChangeAndIfToEarlyReturnRector, CallableThisArrayToAnonymousFunctionRector + casting rules (#6276)
• [deprecations] Remove deprecated GetClassToInstanceOfRector, UseIncrementAssignRector, DetectNodeCommand (#6278)
• [deprecated] Remove deprecated closure return rules, return type from strict bool/scalar returns (#6287)

---

rectorphp/rector-symfony 🎵

• Add Class_ annotation support to TemplateAnnotationToThisRenderRector (#666)

rectorphp/rector-doctrine 🟠

• Refactor the OrderByKeyToClassConstRector to use the new enum only in Criteria::orderBy method calls (#336), Thanks @​julienfastre

Commits

• e98aa79 Rector 1.2.5
• 9c002d1 Updated Rector to commit 1ebb7aa29bfff54059d455ee6f908fa47a7416c3
• 7d52cf2 Updated Rector to commit 1ebb7aa29bfff54059d455ee6f908fa47a7416c3
• 09d8db0 Updated Rector to commit 393423fd3c87f1e915f252f8316f1616b623c320
• f11e9d2 Updated Rector to commit a4545b6fccbc6698fadce47a8454ce3acebf97ac
• 9011953 Updated Rector to commit c9f4b4f843cef6757e6da1de8fb2a6f08987bced
• 4cbb79d Updated Rector to commit feaf6eae6b9a765fe229d65a9ba07c5715649dee
• 99b1eff Updated Rector to commit 4a94d2e5049deffdfe4b5ce2597845ad1b4a0016
• 1e87674 Updated Rector to commit cb96062f3cd5891fd89b419eebdd762061e82f85
• 41a5fd7 Updated Rector to commit e2b96d4f6efda2db3bf6a1074b67fcf2439e848d
• Additional commits viewable in compare view

Updates rector/type-perfect to 0.2.0

Commits

• 0371ecb release PHP 7.2 downgraded
• c36dd8e README - add split on property fetch/method call (#40)
• 59124fe NoParamTypeRemovalRule: Skip constructors (#37)
• 7a96f32 Skip no-isset/no-empty check on possibly undefined variable (#32)
• 019d395 Add hint what file to include when no phpstan extension installer is used (#31)
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
composer/phpstan/phpstan	>= 1.12.3, < 2.0.0	🟢 6.3	Details Check Score Reason Code-Review ⚠️ 0 Found 0/30 approved changesets -- score normalized to 0 Maintained 🟢 10 30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Signed-Releases 🟢 8 5 out of the last 5 releases have a total of 5 signed artifacts. Branch-Protection ⚠️ -1 internal error: error during GetBranch(1.12.x): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration SAST ⚠️ 0 no SAST tool detected Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow ⚠️ -1 no workflows found Token-Permissions ⚠️ -1 No tokens found Packaging ⚠️ -1 packaging workflow not detected Fuzzing ⚠️ 0 project is not fuzzed Vulnerabilities 🟢 10 0 existing vulnerabilities detected Pinned-Dependencies ⚠️ -1 no dependencies found Security-Policy 🟢 10 security policy file detected
composer/phpstan/phpstan-deprecation-rules	>= 1.2.1, < 2.0.0	Unknown	Unknown
composer/rector/rector	>= 1.2.5, < 2.0.0	🟢 4.8	Details Check Score Reason Code-Review ⚠️ 0 Found 0/30 approved changesets -- score normalized to 0 Maintained 🟢 10 30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Dangerous-Workflow ⚠️ -1 no workflows found Packaging ⚠️ -1 packaging workflow not detected Security-Policy ⚠️ 0 security policy file not detected Fuzzing ⚠️ 0 project is not fuzzed Token-Permissions ⚠️ -1 No tokens found SAST ⚠️ 0 no SAST tool detected Binary-Artifacts 🟢 9 binaries present in source code Pinned-Dependencies ⚠️ -1 no dependencies found Vulnerabilities 🟢 10 0 existing vulnerabilities detected
composer/rector/type-perfect	>= 0.2.0, < 0.3.0	Unknown	Unknown

Scanned Manifest Files

composer.json

• phpstan/phpstan@>= 1.12.3, < 2.0.0
• phpstan/phpstan-deprecation-rules@>= 1.2.1, < 2.0.0
• rector/rector@>= 1.2.5, < 2.0.0
• rector/type-perfect@>= 0.2.0, < 0.3.0
• phpstan/phpstan@>= 1.12.2, < 2.0.0
• phpstan/phpstan-deprecation-rules@>= 1.2.0, < 2.0.0
• rector/rector@>= 1.2.4, < 2.0.0
• rector/type-perfect@>= 0.1.8, < 0.2.0

[codeclimate]

Code Climate has analyzed commit 2c7be1a and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 97.5% (0.0% change).

View more on Code Climate.