composer(deps-dev): bump vimeo/psalm from 3.13.1 to 3.14.1

[dependabot]

Bumps vimeo/psalm from 3.13.1 to 3.14.1.

Release notes

Sourced from vimeo/psalm's releases.

Fix regression

Fixes a crash with this code:

/**
  * @param array<int, int> $arr
 */
 function foo(array $arr) : void {
    for ($i = 20; $arr[$i] === 5 && $i > 0; $i--) {}
}

Flag named argument discrepancies

Features

Named argument checks with ParamNameMismatch

For more information, see this article.

Preventing unsafe instantiation

Psalm now warns you when calling new $foo() where $foo() is a class that can be extended and where the constructor is not declared final, or new static where the constructor is not declared final (#3934).

For more information, see the issue page

Other features

• @mr-feek added support for supplying memory limit with a --memory-limit flag (#3947)

Bugfixes

• fix a few false-positives around positive-int types (#3914)
• expand scalar-class-constant types in a few more places (#3913, #3741)
• @NicolasCARPi improved the signature for hash_file() (#3920)
• honour arrays with class-string keys when appending literal classes (#3923)
• @SignpostMarv marked bscale as impure (ref #3918)
• preserve list-ness when assigning to a tuple inside a loop (#3928)
• fix regression with array_shift (#3941)
• @jarstelfox fixed the casing checker to ignore callStatic (#3939)
• @xyng added support for multiple mixins (#3772)
• improved Psalm's recovery when it encounters complex boolean logic (#3932, #3954)
• @ygottschalk improved reset's return type
• @sasezaki fixed the treatment of generators when an explicit send type is provided (#3966)
• Language Server @ngyuki fixed file path handling on windows (#3984)
• Use unused code config settings when running language server (#3987)
• Prevent an incorrect intersection of union types with usort (#3964)
• Prevent crash with bad imported type reference (#3927)
• @weirdan improved handling of @psalm-import-type errors (#3997)
• comparisons between classes and interfaces are now allowed (#3917)

Commits

• 9822043 flag class_exists as impure per vimeo/psalm#3975 (#4004)
• 81a117b Mark fgets impure (#4006)
• de6b354 Fix #4005 - prevent crash when assignment var assertion no longer valid
• 12798d1 Prevent access to possibly unset var
• f48a362 Add reference to automatic fix
• 03ab279 Add ParamNameMismatch fixing documentation
• 11f170a Don’t modify object after unnecessary assertion
• 7adc25c Improve import errors (#3997)
• bb3c5d4 Fix too many arguments
• 22d8f5a Fixed duplicate shortcodes (#3996)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

[codecov]

Codecov Report

Merging #254 into main will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##               main     #254   +/-   ##
=========================================
  Coverage     83.95%   83.95%           
  Complexity      150      150           
=========================================
  Files            23       23           
  Lines           486      486           
=========================================
  Hits            408      408           
  Misses           78       78           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update acce30b...537dcc2. Read the comment docs.