composer(deps-dev): bump the version-updates group with 2 updates

[dependabot]

Updates the requirements on phpstan/phpstan and rector/type-perfect to permit the latest version.
Updates phpstan/phpstan to 1.12.3

Release notes

Sourced from phpstan/phpstan's releases.

1.12.3

Improvements 🔧

• PHPStan Pro: debug corrupted PHAR signature message (phpstan/phpstan-src@9815bbb)

Bugfixes 🐛

• Revert "Fix phar.yml workflow" (phpstan/phpstan-src@6973519), #11638
• Refactor ArrayFilterFunctionReturnTypeReturnTypeExtension and support first-class callable (#3329), #11337, thanks @​takaram!
• Prevent resolving conditional types in callable param/return types (#3405), #11472, thanks @​rvanvelzen!
• Fix wrongly convertion of list<T> to array{T} (#3412), #11642, thanks @​staabm!
• Fix internal error (phpstan/phpstan-src@052f6b1), #11649
• Missing typehints should be consistently checked on level 6 (phpstan/phpstan-src@e3e80f6), #11657

Function signature fixes 🤖

• Don't prevent checking for curl_init() false returns (#3409), #11640, thanks @​tscni!
• Update phpstorm-stubs and patch (#3393), thanks @​VincentLanglet!

Internals 🔍

• The COMPOSER_ROOT_VERSION hack should no longer be necessary (#3414)
• Add non regression test (#3416), #4960, thanks @​VincentLanglet!
• Add non regression test (#3415), #10499, thanks @​VincentLanglet!

Commits

• 0fcbf19 PHPStan 1.12.3
• 9815bbb Updated PHPStan to commit 9815bbba4535b0605aef5b5cb9dd64a63bc44b1f
• e3e80f6 Updated PHPStan to commit e3e80f6c9c246d13e41188d508f0f4afb631b9af
• 052f6b1 Updated PHPStan to commit 052f6b130f53ad50f571b81d4d468b0b0026c2fd
• 5814c7e Updated PHPStan to commit 5814c7e3d71b31f74002912fe5b443efaaf2cd2f
• b3c99fb Updated PHPStan to commit b3c99fb1547fe43b60317550762becce39d516a6
• 3592cf0 Updated PHPStan to commit 3592cf021d99a8d60373c6fb720da541566e03e8
• c26886d Updated PHPStan to commit c26886d5caecf2c8a51abe8642ce98dcb694c182
• df1dfd0 Update baselines
• 3e52bb0 Updated PHPStan to commit 3e52bb081ddb530bbbd651b489b809b0d6c480e0
• Additional commits viewable in compare view

Updates rector/type-perfect to 0.2.0

Commits

• 0371ecb release PHP 7.2 downgraded
• c36dd8e README - add split on property fetch/method call (#40)
• 59124fe NoParamTypeRemovalRule: Skip constructors (#37)
• 7a96f32 Skip no-isset/no-empty check on possibly undefined variable (#32)
• 019d395 Add hint what file to include when no phpstan extension installer is used (#31)
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
composer/phpstan/phpstan	>= 1.12.3, < 2.0.0	🟢 6.3	Details Check Score Reason Code-Review ⚠️ 0 Found 0/30 approved changesets -- score normalized to 0 Maintained 🟢 10 30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Signed-Releases 🟢 8 5 out of the last 5 releases have a total of 5 signed artifacts. Branch-Protection ⚠️ -1 internal error: error during GetBranch(1.12.x): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration SAST ⚠️ 0 no SAST tool detected Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow ⚠️ -1 no workflows found Token-Permissions ⚠️ -1 No tokens found Packaging ⚠️ -1 packaging workflow not detected Fuzzing ⚠️ 0 project is not fuzzed Vulnerabilities 🟢 10 0 existing vulnerabilities detected Pinned-Dependencies ⚠️ -1 no dependencies found Security-Policy 🟢 10 security policy file detected
composer/rector/type-perfect	>= 0.2.0, < 0.3.0	Unknown	Unknown

Scanned Manifest Files

composer.json

• phpstan/phpstan@>= 1.12.3, < 2.0.0
• rector/type-perfect@>= 0.2.0, < 0.3.0
• phpstan/phpstan@>= 1.12.2, < 2.0.0
• rector/type-perfect@>= 0.1.8, < 0.2.0

[codeclimate]

Code Climate has analyzed commit fbccd05 and detected 0 issues on this pull request.

View more on Code Climate.