composer(deps-dev): bump the minor-patch-dependencies group with 5 updates

[dependabot]

Updates the requirements on mimmi20/coding-standard, phpstan/phpstan, phpstan/phpstan-deprecation-rules, phpstan/phpstan-phpunit and rector/rector to permit the latest version.
Updates mimmi20/coding-standard to 5.2.29

Commits

• 9cc18b4 Merge pull request #493 from mimmi20/dependabot/composer/master/friendsofphp/...
• 864be2b composer(deps): update friendsofphp/php-cs-fixer requirement
• 1e3990e Merge pull request #492 from mimmi20/dependabot/composer/master/friendsofphp/...
• dbadf1e composer(deps): update friendsofphp/php-cs-fixer requirement
• 209a5b2 Merge pull request #491 from mimmi20/dependabot/composer/master/friendsofphp/...
• 389f584 composer(deps): update friendsofphp/php-cs-fixer requirement
• e1e7c5f Merge pull request #490 from mimmi20/updates
• f37159c update workflow
• ef84065 Merge pull request #489 from mimmi20/dependabot/composer/master/minor-patch-d...
• a7a4557 composer(deps-dev): update tomasvotruba/unused-public requirement
• Additional commits viewable in compare view

Updates phpstan/phpstan to 1.11.0

Release notes

Sourced from phpstan/phpstan's releases.

1.11.0

Read the article about PHPStan 1.11 on phpstan.org »

Major new features 🚀

• Error identifiers
  • A way to categorize reported errors by a stable identifier. Up until now you had to use specific and ever-changing error messages
  • Can be used for ignoring specific errors locally with new @phpstan-ignore comment (uses current or next line automatically)
  • Can be used for ignoring specific errors in ignoreErrors section of your configuration file (phpstan.neon)
  • Can be used in output formatters
  • Can be seen in PHPStan Pro GUI or in TableErrorFormatter with -v
  • Catalogue with source code links: https://phpstan.org/error-identifiers
• PHPStan Pro Reboot
  • A new migration wizard will effortlessly migrate all your @phpstan-ignore-line and @phpstan-ignore-next-line to the new @phpstan-ignore comment style with error identifiers. The old comment style is dangerous because it ignores all errors, current and future, on that line.
  • Revamped UI for much more comfortable viewing and browsing of reported errors
  • The new UI also lets you browse ignored errors, from ignoreErrors, from your baseline and also ignored locally in source code using comments
  • Streaming errors during launch: You don't have to wait for the analysis to complete, you can see errors as they come in during the analysis
  • Support for mapping file paths to the host filesystem when running in Docker or remotely
  • Try it out by running PHPStan with --pro CLI option
• PHPDoc tags describing callable lifecycle: @param-immediately-invoked-callable, @param-later-invoked-callable
  • Useful for exception analysis (https://phpstan.org/blog/bring-your-exceptions-under-control) and @phpstan-pure
• PHPDoc tag @param-closure-this to describe what $this is bound to in a passed closure
• Two new config options around stricter offset checks in arrays (#3028), #7553, thanks @​ttomdewit!
  • reportPossiblyNonexistentGeneralArrayOffset
  • reportPossiblyNonexistentConstantArrayOffset
  • Learn more in the documentation

Bleeding edge 🔪

• Checking truthiness of @phpstan-pure above functions and methods
• Check new/function call/method call/static method call on a separate line without any side effects even without @phpstan-pure PHPDoc tag on the declaration side
  • phpstan/phpstan-src@281a87d
  • #3020, thanks @​staabm!
  • #3022, thanks @​staabm!
  • #3023, thanks @​staabm!
• BetterNoopRule - take advantage of impure points (phpstan/phpstan-src@a647052), #10389
• Run missing type check on @param-out (phpstan/phpstan-src@56b2002)
• CallToConstructorStatementWithoutSideEffectsRule - report class with no constructor (phpstan/phpstan-src@b116d25)
• Deprecated: returning plain strings as errors, use RuleErrorBuilder
  • Learn more: Using RuleErrorBuilder to enrich reported errors in custom rules
• Deprecated: returning RuleError without identifier (phpstan/phpstan-src@969e6fa)

If you want to see the shape of things to come and adopt bleeding edge features early, you can include this config file in your project's phpstan.neon:

includes:
	- vendor/phpstan/phpstan/conf/bleedingEdge.neon
</tr></table> 

... (truncated)

Commits

• 666cb17 PHPStan 1.11.0
• 2871964 PHPStan 1.11 With Error Identifiers, PHPStan Pro Reboot and Much More
• d5a4746 Updated PHPStan to commit d5a4746e91feacdceffe66d00d4976ecaa4a9673
• 6c85acc Updated PHPStan to commit 6c85acc5c209b52fad7e6eaafa6d09d96e555042
• 0463255 Updated PHPStan to commit 046325529b05150ca8b76e408faf8bf1deb6c295
• 49498ce Updated PHPStan to commit 49498ce062e1c0844be5b9d506ea53dbbf5354d2
• 783d9bb Update BACKERS.md
• 39ce042 Updated PHPStan to commit 39ce0425737cdbacfee5fbc08160d023cb5bc639
• 73521c3 Updated PHPStan to commit 73521c30c5f057305ece7ef67fc0cd448768a156
• 7069037 merge.php - output identifier stats into stderr
• Additional commits viewable in compare view

Updates phpstan/phpstan-deprecation-rules to 1.2.0

Release notes

Sourced from phpstan/phpstan-deprecation-rules's releases.

1.2.0

• fa8cce7 - Update lock-closed-issues.yml
• 8342041 - Merge remote-tracking branch 'origin/1.1.x' into 1.2.x
• d457b73 - Update PHPStan version
• ff4f00f - Update FetchingDeprecatedConstRuleTest.php
• 437ac71 - Fix build
• e9ea332 - Update metcalfc/changelog-generator action to v4.3.1
• f71dbf6 - Update cbrgm/mastodon-github-action action to v2
• 10f0e35 - Merge branch '1.1.x' into 1.2.x
• 674d785 - Fix build
• e7fe22b - Update metcalfc/changelog-generator action to v4.2.0
• 83345f7 - Update dessant/lock-threads action to v5
• 788ea1b - remove phpstan/phpstan-php-parser
• 4175e8a - Update actions/checkout action to v4
• f1cacde - Fix a typo
• 1884f9f - Next-gen coding standard workflow
• 2313a63 - Modernize rules to use RuleErrorBuilder and report error identifiers
• ca9e4fd - Open 1.2.x-dev

Commits

• fa8cce7 Update lock-closed-issues.yml
• 8342041 Merge remote-tracking branch 'origin/1.1.x' into 1.2.x
• d457b73 Update PHPStan version
• ff4f00f Update FetchingDeprecatedConstRuleTest.php
• 437ac71 Fix build
• e9ea332 Update metcalfc/changelog-generator action to v4.3.1
• f71dbf6 Update cbrgm/mastodon-github-action action to v2
• 10f0e35 Merge branch '1.1.x' into 1.2.x
• 674d785 Fix build
• e7fe22b Update metcalfc/changelog-generator action to v4.2.0
• Additional commits viewable in compare view

Updates phpstan/phpstan-phpunit to 1.4.0

Release notes

Sourced from phpstan/phpstan-phpunit's releases.

1.4.0

• f3ea021 - Update lock-closed-issues.yml
• f93aec7 - Merge remote-tracking branch 'origin/1.3.x' into 1.4.x
• 77bdf96 - Update metcalfc/changelog-generator action to v4.3.1
• 6a1df9a - Update cbrgm/mastodon-github-action action to v2
• e95a58b - Update metcalfc/changelog-generator action to v4.2.0
• 77345df - Update dessant/lock-threads action to v5
• 99bb21e - Merge branch '1.3.x' into 1.4.x
• ac8ea99 - Update actions/checkout action to v4
• 529f300 - Merge branch '1.3.x' into 1.4.x
• 62e883e - Open 1.4.x-dev
• 97ec1d3 - Merge branch '1.3.x' into 1.4.x
• 4d99a7d - Require PHPStan 1.11
• 908e232 - Error identifiers

Commits

• f3ea021 Update lock-closed-issues.yml
• f93aec7 Merge remote-tracking branch 'origin/1.3.x' into 1.4.x
• 77bdf96 Update metcalfc/changelog-generator action to v4.3.1
• 6a1df9a Update cbrgm/mastodon-github-action action to v2
• e95a58b Update metcalfc/changelog-generator action to v4.2.0
• 77345df Update dessant/lock-threads action to v5
• 99bb21e Merge branch '1.3.x' into 1.4.x
• ac8ea99 Update actions/checkout action to v4
• 529f300 Merge branch '1.3.x' into 1.4.x
• 62e883e Open 1.4.x-dev
• Additional commits viewable in compare view

Updates rector/rector to 1.0.5

Release notes

Sourced from rector/rector's releases.

Released Rector 1.0.5

New Features 🥳

• [TypeDeclarations] Add IncreaseDeclareStrictTypesRector to raise level of declare() coverage (#5849)

Bugfixes 🐛

• ExplicitReturnNullRector should skip never return (#5802), Thanks @​staabm!
• Make Compatible with phpstan 1.11.x code (#5804)
• [CodeQuality] Skip Always return in try catch with finally on ExplicitReturnNullRector (#5807)
• [CodeQuality] Skip never type on default switch on ExplicitReturnNullRector (#5808)
• [CodeQuality] Skip while(true) always returned on ExplicitReturnNullRector (#5810)
• [TypeDeclaration] Skip maybe not returned on while on ReturnUnionTypeRector (#5812)
• [Php81] Skip on property and class const on FirstClassCallableRector (#5813)
• [Php81] Skip __invoke() usage from non-class code on FirstClassCallableRector (#5816)
• [Php81] Skip always string if else DomElement on NullToStrictStringFuncCallArgRector (#5822)
• [TypeDeclaration] Handle crash on @​mixin usage on ReturnTypeFromStrictTypedCallRector (#5823)
• [Php81] Skip mixed type on ArrayDimFetch on NullToStrictStringFuncCallArgRector (#5826)
• Fix original quotes in PregReplaceEModifierRector (#5827)
• [CodeQuality] Skip $counter variable exists on ForRepeatedCountToOwnVariableRector (#5828)
• [Php81] Use PHPStan ParametersAcceptor to detect allowed argument types on NullToStrictStringFuncCallArgRector (#5829)
• [Renaming] Skip func call name on RenameClassRector (#5833)
• Support NullSafeMethod calls in unused-code analysis (#5838), Thanks @​staabm!
• Support NullSafeProperty fetches in unused-code analysis (#5839), Thanks @​staabm!
• Ignore phpdoc type in RecastingRemovalRector (#5841), Thanks @​staabm!
• [Naming] Skip DateTime as individual in name resolver (#5842)
• [Experiment] Rework child classes detection on DynamicSourceLocatorProvider (#5735)
• [Printer] Handle Strip left spaces from opening tags on namespaced PHP + HTML content (#5851)
• [CodeQuality] Fix tautology transformation on identical check on SimplifyTautologyTernaryRector (#5854)
• [CodeQuality] Skip dynamic second arg or has uppercase second arg on SimplifyStrposLowerRector (#5855)
• [NodeTypeResolver] Use existing DefaultReflector::reflectAllClasses() method on DynamicSourceLocatorProvider (#5856)
• [EarlyReturn] Skip with AssignOp on PreparedValueToEarlyReturnRector (#5857)
• [TypeDeclaration] Handle array with index assigned on TypedPropertyFromAssignsRector (#5861)
• [TypeDeclaration] Handle return by array shape type on AddArrowFunctionReturnTypeRector (#5815)
• [CodeQuality] Add Function_ and FuncCall support on OptionalParametersAfterRequiredRector (#5835)
• [Php83] Handle default native constant on AddTypeToConstRector (#5843)
• [PHP 7.2] Add error suppres support to each() rule (#5844)
• [TypeDeclaration] Skip more detailed type on AddMethodCallBasedStrictParamTypeRector (#5866)
• [DeadCode] Skip $this instanceof in Trait on RemoveAlwaysTrueIfConditionRector (#5817)
• [DeadCode] Skip $this in trait on RemoveDeadInstanceOfRector (#5818)

Commits

• 73eb63e Rector 1.0.5
• 322f3ad Updated Rector to commit 48fc55d89350f24521a197c04b5512452a3b50fc
• fe89136 Updated Rector to commit 558f44d5939be4314d76f4850a34be3590e65bfd
• f7723ed Updated Rector to commit ef84a1a722c39839de1bcd79e0d3558b3e7d935d
• ed1310b Updated Rector to commit acb0b5d3ad760e7253fb6f49b4047ec6226384d4
• 9da012c Updated Rector to commit bb90e0bbafee5e47720d9fda8f7e46fad5bd90a2
• dcdff77 Updated Rector to commit 8371040f72445fda4e96f29783b5de5351524c8a
• 582a864 Updated Rector to commit 650dcc6394c6df206772350e525311f8080e5077
• 2dc9d28 Updated Rector to commit 6649713eb98b016d5503163cd8cbea534ae61f2e
• 5c55f54 Updated Rector to commit 4789b516d98b619f2e04900ab0ae442eb94a5348
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Fixes #281

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details

Scanned Manifest Files

composer.json

• infection/infection@>= 0.27.11, < 0.28.0 || >= 0.28.1, < 0.29.0
• mimmi20/coding-standard@>= 5.2.29, < 6.0.0
• nikic/php-parser@>= 4.19.1, < 5.0.0 || >= 5.0.2, < 6.0.0
• phpstan/phpstan@>= 1.11.0, < 2.0.0
• phpstan/phpstan-deprecation-rules@>= 1.2.0, < 2.0.0
• phpstan/phpstan-phpunit@>= 1.4.0, < 2.0.0
• rector/rector@>= 1.0.5, < 2.0.0
• symplify/phpstan-rules@>= 12.4.9, < 13.0.0
• tomasvotruba/cognitive-complexity@>= 0.2.3, < 0.3.0
• tomasvotruba/type-coverage@>= 0.2.8, < 0.3.0
• tomasvotruba/unused-public@>= 0.3.9, < 0.4.0
• infection/infection@>= 0.27.11, < 0.28.0
• mimmi20/coding-standard@>= 5.2.26, < 6.0.0
• nikic/php-parser@>= 4.19.1, < 5.0.0
• phpstan/phpstan@>= 1.10.67, < 2.0.0
• phpstan/phpstan-deprecation-rules@>= 1.1.4, < 2.0.0
• phpstan/phpstan-phpunit@>= 1.3.16, < 2.0.0
• rector/rector@>= 1.0.4, < 2.0.0

[codeclimate]

Code Climate has analyzed commit 2cb9727 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 100.0% (0.0% change).

View more on Code Climate.