build(deps-dev): bump squizlabs/php_codesniffer from 3.4.2 to 3.5.3

[dependabot-preview]

Bumps squizlabs/php_codesniffer from 3.4.2 to 3.5.3.

Release notes

Sourced from squizlabs/php_codesniffer's releases.

3.5.3

• The PHP 7.4 T_FN token has been made available for older versions
  • T_FN represents the fn string used for arrow functions
  • The double arrow becomes the scope opener, and uses a new T_FN_ARROW token type
  • The token after the statement (normally a semicolon) becomes the scope closer
  • The token is also associated with the opening and closing parenthesis of the statement
  • Any functions named fn will have a T_FN token for the function name, but have no scope information
  • Thanks to Michał Bundyra for the help with this change
• PHP 7.4 numeric separators are now tokenized in the same way when using older PHP versions
  • Previously, a number like 1_000 would tokenize as T_LNUMBER (1), T_STRING (_000)
  • Now, the number tokenizes as T_LNUMBER (1_000)
  • Sniff developers should consider how numbers with underscores impact their custom sniffs
• The PHPCS file cache now takes file permissions into account
  • The cache is now invalidated for a file when its permissions are changed
• File::getMethodParameters() now supports arrow functions
• File::getMethodProperties() now supports arrow functions
• Added Fixer::changeCodeBlockIndent() to change the indent of a code block while auto-fixing
  • Can be used to either increase or decrease the indent
  • Useful when moving the start position of something like a closure, where you want the content to also move
• Added Generic.Files.ExecutableFile sniff
  • Ensures that files are not executable
  • Thanks to Matthew Peveler for the contribution
• Generic.CodeAnalysis.EmptyPhpStatement now reports unnecessary semicolons after control structure closing braces
  • Thanks to Vincent Langlet for the patch
• Generic.PHP.LowerCaseKeyword now enforces that the fn keyword is lowercase
  • Thanks to Michał Bundyra for the patch
• Generic.WhiteSpace.ScopeIndent now supports static arrow functions
• PEAR.Functions.FunctionCallSignature now adjusts the indent of function argument contents during auto-fixing
  • Previously, only the first line of an argument was changed, leading to inconsistent indents
  • This change also applies to PSR2.Methods.FunctionCallSignature
• PSR2.ControlStructures.ControlStructureSpacing now checks whitespace before the closing parenthesis of multi-line control structures
  • Previously, it incorrectly applied the whitespace check for single-line definitions only
• PSR12.Functions.ReturnTypeDeclaration now checks the return type of arrow functions
  • Thanks to Michał Bundyra for the patch
• PSR12.Traits.UseDeclaration now ensures all trait import statements are grouped together
  • Previously, the trait import section of the class ended when the first non-import statement was found
  • Checking now continues throughout the class to ensure all statements are grouped together
  • This also ensures that empty lines are not requested after an import statement that isn't the last one
• Squiz.Functions.LowercaseFunctionKeywords now enforces that the fn keyword is lowercase
  • Thanks to Michał Bundyra for the patch
• Fixed bug #2586 : Generic.WhiteSpace.ScopeIndent false positives when indenting open tags at a non tab-stop
• Fixed bug #2638 : Squiz.CSS.DuplicateClassDefinitionSniff sees comments as part of the class name
  • Thanks to Raphael Horber for the patch
• Fixed bug #2640 : Squiz.WhiteSpace.OperatorSpacing false positives for some negation operators
  • Thanks to Jakub Chábek and Juliette Reinders Folmer for the patch
• Fixed bug #2674 : Squiz.Functions.FunctionDeclarationArgumentSpacing prints wrong argument name in error message
• Fixed bug #2676 : PSR12.Files.FileHeader locks up when file ends with multiple inline comments
• Fixed bug #2678 : PSR12.Classes.AnonClassDeclaration incorrectly enforcing that closing brace be on a line by itself
• Fixed bug #2685 : File::getMethodParameters() setting typeHintEndToken for vars with no type hint
  • Thanks to Juliette Reinders Folmer for the patch

... (truncated)

Commits

• 557a1fc Prepare for 3.5.3 release
• 68048f3 Make it easier to detect we are running tests under a PEAR install so the exe...
• b3c7925 Travis: don't allow PHP 7.4 build to fail
• 0676055 Merge branch 'feature/fn-closure-function-declaration-arg-spacing' of https:/...
• 62ae7e7 Adds support for array closures in Squiz.Functions.FunctionDeclarationArgumen...
• d6025fa Adds support for array closures in Generic.CodeAnalysis.UnusedFunctionParameter
• 80ebd4a CS fix: align array arrows
• e95c077 Adds support for PHP 7.4 arrow functions in PEAR.Functions.ValidDefaultValue ...
• 68e0b06 Merge branch 'qa/optimize-imports' of https://github.com/michalbundyra/PHP_Co...
• 04ab5a0 Fixed detection of scope closers when arrow functions used in ternary (ref #2...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

If all status checks pass Dependabot will automatically merge this pull request during working hours.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in the .dependabot/config.yml file in this repo:

• Update frequency
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[dependabot-preview]

One of your CI runs failed on this pull request, so Dependabot won't merge it.

• ci/circleci: style-check

Dependabot will still automatically merge this pull request if you amend it and your tests pass.