composer(deps-dev): bump the minor-patch-dependencies group with 4 updates

[dependabot]

Updates the requirements on mimmi20/coding-standard, phpstan/phpstan, rector/rector and tomasvotruba/unused-public to permit the latest version.
Updates mimmi20/coding-standard to 5.2.37

Commits

• 2c5770a Merge pull request #533 from mimmi20/dependabot/composer/master/squizlabs/php...
• 5ca0fa2 update pipelines and configs
• 86f8981 composer(deps): update squizlabs/php_codesniffer requirement
• 0b659e0 Merge pull request #531 from mimmi20/dependabot/github_actions/master/minor-p...
• d8b8fa9 update config
• 2d386d7 github-actions: bump raven-actions/actionlint
• c2fc5f9 Merge pull request #529 from mimmi20/dependabot/github_actions/master/minor-p...
• c8e3f0b update config
• 5d698f3 github-actions: bump shivammathur/setup-php
• d8d58d9 Merge pull request #528 from mimmi20/renovate/all-minor-patch-dependencies
• Additional commits viewable in compare view

Updates phpstan/phpstan to 1.11.8

Release notes

Sourced from phpstan/phpstan's releases.

1.11.8

Bleeding edge 🔪

• Report useless return values of function calls like var_export without $return=true (#3225), #11320, thanks @​staabm!
• Check mixed in binary operator (#3231), #7538, #10440, thanks @​schlndh!
• Check vprintf/vsprintf arguments against placeholder count (#3126), thanks @​staabm!
• Check mixed in unary operator (#3253), thanks @​schlndh!
• Report "missing return" error closer to where the return is missing (phpstan/phpstan-src@04f8636)
• Stricter ++/-- operator check (#3255), thanks @​schlndh!
• Check preg_quote delimiter sanity (#3252), #11338, thanks @​staabm!

If you want to see the shape of things to come and adopt bleeding edge features early, you can include this config file in your project's phpstan.neon:

includes:
	- vendor/phpstan/phpstan/conf/bleedingEdge.neon

Of course, there are no backwards compatibility guarantees when you include this file. The behaviour and reported errors can change in minor versions with this file included. Learn more

Improvements 🔧

• Precise array shape for $matches from preg_match() improvements:
  • RegexArrayShapeMatcher - trailling groups are not optional when PREG_UNMATCHED_AS_NULL (#3219), #11311, thanks @​staabm!
  • Fix preg_match named capturing groups (#3228), #11323, thanks @​staabm!
  • RegexArrayShapeMatcher - Fix optional groups with PREG_UNMATCHED_AS_NULL (#3229), thanks @​staabm!
  • Allow overriding the PHP 7.2 support for PREG_UNMATCHED_AS_NULL (#3226), thanks @​Seldaek!
  • RegexArrayShapeMatcher - Fix PREG_UNMATCHED_AS_NULL with optional leading groups (#3234), #11331, thanks @​staabm!
  • RegexArrayShapeMatcher - Support preg_quote()'d patterns (#3233), #11332, thanks @​staabm!
  • RegexArrayShapeMatcher - Fix PREG_UNMATCHED_AS_NULL with top level alternation (#3238), thanks @​staabm!
  • RegexArrayShapeMatcher - More precise non-empty-string and numeric-string (#3249), thanks @​staabm!
  • Fix regex parsing by completing the grammar (#3244), thanks @​Seldaek!
  • RegexArrayShapeMatcher - (\d*) can be empty-string (#3257), thanks @​staabm!
• Add diagnose command to run DiagnoseExtensions (phpstan/phpstan-src@22c84d2)
• Diagnose extension: Info about extensions installed via extension-installer (phpstan/phpstan-src@db71f04)
• Diagnose extension - where is PHPStan running from (phpstan/phpstan-src@76464ee)
• Parallel scheduler becomes DiagnoseExtension (phpstan/phpstan-src@c7c9689)
• ResultCacheManager: output restore time in debug mode (#3224), thanks @​janedbal!
• Add hint as to what might be wrong when invalid identifiers are used (#3230), thanks @​Seldaek!
• Optimize array_map with many arrays (phpstan/phpstan-src@09fbc92), #11297
• Improved sprintf() inference (#3232), thanks @​staabm!
• Print elapsed analysis time with -v (#3239, #3242), thanks @​janedbal!
• More precise sprintf() format arg-based return type (#3192), #11248, #10493, thanks @​staabm!

Bugfixes 🐛

• Fix return type of round/ceil/floor in non strict type environment (#3223), #11319, thanks @​BackEndTea!

... (truncated)

Commits

• 6adbd11 PHPStan 1.11.8
• c4c0269 Updated PHPStan to commit c4c02698414934def38e0e1a4a002a2c139d9242
• c9a6d2e Updated PHPStan to commit c9a6d2e61edfad189a765df3c3a06674a10d4fb5
• 101467d Updated PHPStan to commit 101467d47d75cc793baaec89abf858342436e25a
• 7c2d8b4 Updated PHPStan to commit 7c2d8b45c30bc1a445be34d736b286f876805e4f
• 4a0ffab Updated PHPStan to commit 4a0ffab348f87b874d80ac7d8289213d419fb860
• fec3501 Update baselines
• 9db34df Updated PHPStan to commit 9db34dfbdffb2442ca21d6765b0fbfeb0154745d
• 2223dd9 Updated PHPStan to commit 2223dd9623522c223357c556189e7ec5280dba59
• a1e697b Updated PHPStan to commit a1e697b6949371b02bba5a2164ccc2ded020dd5e
• Additional commits viewable in compare view

Updates rector/rector to 1.2.2

Release notes

Sourced from rector/rector's releases.

Released Rector 1.2.2

New Features 🥳

• [TypeDeclaration] Add ReturnTypeFromMockObjectRector (#6166)
• [TypeDeclaration] Add missing usage of ClassMethodReturnTypeOverrideGuard on ReturnTypeFromMockObjectRector (#6169)
• [TypeDeclaration] Add TypedPropertyFromCreateMockAssignRector (#6177)

Bugfixes 🐛

• Skip phpdoc types in NumericReturnTypeFromStrictReturnsRector (#6153), Thanks @​staabm!
• [TypeDeclaration] Fix union type by multiple method calls on ParamTypeByMethodCallTypeRector (#6155)
• [TypeDeclaration] Handle throw without new on on ParamTypeByMethodCallTypeRector (#6156)
• [TypeDeclaration] Refactor CallerParamMatcher to avoid ambigous returns usage (#6157)
• [TypeDeclaration] Prevent uncaught exception in ReturnTypeFromReturnNewRector (#6159), Thanks @​staabm!
• Prevent uncaught class-not-found exceptions (#6160), Thanks @​staabm!
• [TypeDeclaration] Skip variadic on StrictArrayParamDimFetchRector (#6163)
• [CodeQuality] Skip used in next stmt on UnusedForeachValueToArrayKeysRector (#6164)
• [Scoper] Fix prefixed MockObject on ReturnTypeFromMockObjectRector (#6167)
• [TypeDeclaration] Flip position between bool return and return tyep from strict constant on TypeDeclarationLevel (#6168)
• [TypeDeclaration] Skip possible void and return by docblock on ReturnTypeFromMockObjectRector (#6170)
• [TypeDeclaration] Update fixture and example method name (#6171)
• [NodeTypeResolver] Handle crash on variable variable with assign on FirstClassCallableRector (#6173)
• [NodeTypeResolver] Clean up re-fill scope on PHPStanNodeScopeResolver on variable variable (#6174)
• [NodeTypeResolver] Fill scope of dynamic variable variable (#6175)
• fix: Convert DateTime to Carbon properly when hours/minutes/seconds are used (#6176), Thanks @​florisbosch!

Commits

• 044e636 Rector 1.2.2
• 19fc78b Updated Rector to commit 1aef75583cc0c1314f151c24fac27e7af69e7d7d
• b7033ef Updated Rector to commit fa84ab5de0c4b7be8125b7f6c4c60afbc2a27327
• 90fab4d Updated Rector to commit eba615375fc6b795827e4ef3135d88c58479719d
• ceea11f Updated Rector to commit 1a58300b7d6ccaa1adbb1760b4a355263dc41408
• 65dfd8c Updated Rector to commit 07fffd50f3b62196856f22622815768385554272
• 8d7c7fa Updated Rector to commit 417b208b58da94040e01c5f9629ae33db472df78
• cecbffb Updated Rector to commit b0c89a98a0eb4a62d3141d950484d6e3ea7fdbda
• dd8c5b5 Updated Rector to commit 29e926608b0008df286370f94cf5c26b4aa86226
• 5ab7399 Updated Rector to commit e4c27be2ed869ed495cb5631ec9e6efc0ddc68ee
• Additional commits viewable in compare view

Updates tomasvotruba/unused-public to 0.3.10

Commits

• 11c46ce release PHP 7.2 downgraded
• e96d688 Detect public properties used via Subclass (#123)
• f8c1349 Fix ClassConstFetchCollector (#122)
• 5da0ca6 Fix union-type handling in PublicStaticPropertyFetchCollector (#121)
• da62379 Fix union-type handling in PublicPropertyFetchCollector (#120)
• 21592f0 add phpstan error identifiers (#118)
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
composer/mimmi20/coding-standard	>= 5.2.37, < 6.0.0	Unknown	Unknown
composer/phpstan/phpstan	>= 1.11.8, < 2.0.0	🟢 6.3	Details Check Score Reason Code-Review ⚠️ 0 Found 0/29 approved changesets -- score normalized to 0 Maintained 🟢 10 30 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases 🟢 8 5 out of the last 5 releases have a total of 5 signed artifacts. Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ -1 No tokens found Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow ⚠️ -1 no workflows found SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Fuzzing ⚠️ 0 project is not fuzzed Vulnerabilities 🟢 10 0 existing vulnerabilities detected Security-Policy 🟢 10 security policy file detected Pinned-Dependencies ⚠️ -1 no dependencies found
composer/rector/rector	>= 1.2.2, < 2.0.0	🟢 4.8	Details Check Score Reason Code-Review ⚠️ 0 Found 0/30 approved changesets -- score normalized to 0 Maintained 🟢 10 30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ -1 no releases found Token-Permissions ⚠️ -1 No tokens found Dangerous-Workflow ⚠️ -1 no workflows found Packaging ⚠️ -1 packaging workflow not detected Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 no SAST tool detected Security-Policy ⚠️ 0 security policy file not detected Binary-Artifacts 🟢 9 binaries present in source code Pinned-Dependencies ⚠️ -1 no dependencies found Vulnerabilities 🟢 10 0 existing vulnerabilities detected
composer/tomasvotruba/unused-public	>= 0.3.10, < 0.4.0	Unknown	Unknown

Scanned Manifest Files

composer.json

• mimmi20/coding-standard@>= 5.2.37, < 6.0.0
• phpstan/phpstan@>= 1.11.8, < 2.0.0
• rector/rector@>= 1.2.2, < 2.0.0
• tomasvotruba/unused-public@>= 0.3.10, < 0.4.0
• mimmi20/coding-standard@>= 5.2.36, < 6.0.0
• phpstan/phpstan@>= 1.11.7, < 2.0.0
• rector/rector@>= 1.2.1, < 2.0.0
• tomasvotruba/unused-public@>= 0.3.9, < 0.4.0

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 100.00%. Comparing base (4296431) to head (736d326).

Additional details and impacted files

@@             Coverage Diff             @@
##              master      #138   +/-   ##
===========================================
  Coverage     100.00%   100.00%           
  Complexity       125       125           
===========================================
  Files             14        14           
  Lines            341       341           
===========================================
  Hits             341       341           

Flag	Coverage Δ
php-8.1	100.00% <ø> (ø)
phpunit	100.00% <ø> (ø)
ubuntu-22.04	100.00% <ø> (ø)
ubuntu-24.04	100.00% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[codeclimate]

Code Climate has analyzed commit 736d326 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 100.0% (0.0% change).

View more on Code Climate.