chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
ergebnis/composer-normalize	2.44.0 -> 2.45.0					require-dev	minor
php	~8.1.0 || ~8.2.0 || ~8.3.0 -> ~8.1.0 || ~8.2.0 || ~8.3.0 || ~8.4.0					require	minor
phpstan/phpstan	1.12.11 -> 1.12.15					require-dev	patch
phpstan/phpstan-phpunit	1.4.1 -> 1.4.2					require-dev	patch
phpunit/phpunit (source)	10.5.38 -> 10.5.40					require-dev	patch
ridedott/merge-me-action	v2.10.111 -> v2.10.113					action	patch
shivammathur/setup-php	2.31.1 -> 2.32.0					action	minor

---

Release Notes

ergebnis/composer-normalize (ergebnis/composer-normalize)

v2.45.0

Compare Source

For a full diff see [2.44.0...2.45.0][2.44.0...2.45.0].

Added

• Added support for PHP 8.4 ([#​1377]), by [@​ruudk]

Changed

• Updated schema.json ([#​1405]), by [@​ergebnis-bot]
• Allowed installation of justinrainbow/json-schema:^6.0.0 ([#​1410]), by [@​tacman]
• Updated composer/composer ([#​1416]), by [@​localheinz]

containerbase/php-prebuild (php)

v8.4.2

Compare Source

Bug Fixes

• deps: update dependency php to v8.4.2

v8.4.1

Compare Source

Bug Fixes

• deps: update dependency php to v8.4.1

phpstan/phpstan (phpstan/phpstan)

v1.12.15

Compare Source

Bugfixes 🐛

• Fix inferring type of new with generic type with constructor in parent class (phpstan/phpstan-src@a063119), #​8219, #​2735
• Support tagged unions in array_merge (#​3770), #​7857, #​8632, #​9559, thanks @​herndlm!

Internals 🔍

• Cleanup instanceof ConstantBooleanType checks (#​3771), thanks @​staabm!

v1.12.14

Compare Source

Fix preg_match() group containing start/end meta characters (#​3740), #​12297, thanks @​staabm!

v1.12.13

Compare Source

Improvements 🔧

• get_defined_vars() return type contains known variables (#​3624), #​11948, #​11740, thanks @​MartinMystikJonas!
• Lazier return in UnionType->isSuperTypeOfWithReason() (#​3692, #​3713), thanks @​staabm!
• 5x Faster IntersectionType->getEnumCases() (#​3695), thanks @​staabm!
• MixedType::toArrayKey() returns BenevolentUnionType (#​3696)
• Optimization - do not enter anonymous classes during loop analysis (phpstan/phpstan-src@621e168)
• Introduce ClassAsClassConstantRule (#​3697), #​10859, thanks @​paulbalandan!
• 10% faster FunctionCallParametersCheck (#​3734), thanks @​staabm!
• Faster MutatingScope::getNodeKey() (#​3736), thanks @​staabm!

Bugfixes 🐛

• Fix iterator_to_array return type with generators (#​3652), thanks @​paulbalandan!
• Array map on multiple elements is a list (#​3716), #​12223, thanks @​VincentLanglet!
• RegexArrayShapeMatcher: fix regex wildcard omitted from type (#​3721), #​12211, thanks @​staabm!
• RegexArrayShapeMatcher: fix regex alternatives in capture group are concatenated (#​3722), #​12210, #​12173, thanks @​staabm!
• RegexArrayShapeMatcher: Don't narrow 'J' modifier (#​3723), #​12126, thanks @​staabm!
• Add support for internal classes that overload offset access (#​3725), #​12235, thanks @​Girgias!
• Support # comments in regex with x modifier (#​3735, #​3739), #​12242, thanks @​staabm!

Function signature fixes 🤖

• More precise reflection classes return types (#​3731), thanks @​staabm!
• Fix DOMDocument::create*() return types (#​3737), #​12278, thanks @​staabm!

Internals 🔍

• Add regression test for array self-append (#​3715), #​6948, thanks @​herndlm!
• Use native PHPDocs for Rule and RuleTestCase (#​3698), thanks @​paulbalandan!
• Use native PHPDocs wherever possible (#​3720), thanks @​paulbalandan!
• Added regression test (#​3722), #​12210, #​12173, thanks @​staabm!

v1.12.12

Compare Source

Improvements 🔧

• Introduce uppercase-string PHPDoc type (#​3613), thanks @​pmjones!

Bugfixes 🐛

• Fix sprintf dynamic return type (#​3640), #​12065, thanks @​VincentLanglet!
• Patch wrong namespace prefixing in PHAR in WindowsRegistryLogicalFinder (phpstan/phpstan-src@f61d324), #​12076
• Fix static return type in php-8-stubs (phpstan/phpstan-src@162f774), #​12077
• Retain list type when assigning to offset 1 of non-empty-list (#​3682), #​12131, thanks @​herndlm!

Function signature fixes 🤖

• Closure::bind and bindTo return benevolent union with null (phpstan/phpstan-src@b049d8d)
• Remove sha256 function definition (#​3664), thanks @​VincentLanglet!

phpstan/phpstan-phpunit (phpstan/phpstan-phpunit)

v1.4.2

Compare Source

• 72a6721 - Use more specific node-type
• 4b6ad7f - Fix
• bec49ea - Merge branch '1.4.x' into 2.0.x
• 3cc8554 - Fixes after PHPStan update
• 09e2d3b - Uncover everything behind the bleedingEdge flag
• 4d861e0 - Fix after TypeSpecifier BC break
• 3faa605 - Update build-cs
• 953195d - Stop testing PHP 7.2 and 7.3
• 7f1457f - Open 2.0.x

sebastianbergmann/phpunit (phpunit/phpunit)

v10.5.40: PHPUnit 10.5.40

Compare Source

Fixed

• #​6082: assertArrayHasKey(), assertArrayNotHasKey(), arrayHasKey(), and ArrayHasKey::__construct() do not support all possible key types
• #​6087: --migrate-configuration does not remove beStrictAboutTodoAnnotatedTests attribute from XML configuration file

---

How to install or update PHPUnit

v10.5.39: PHPUnit 10.5.39

Compare Source

Added

• #​6081: DefaultResultCache::mergeWith() for merging result cache instances

Fixed

• #​6066: TeamCity logger does not handle error/skipped events in before-class methods correctly

---

How to install or update PHPUnit

ridedott/merge-me-action (ridedott/merge-me-action)

v2.10.113

Compare Source

Chores

• deps-dev: bump cspell from 8.17.0 to 8.17.1 (42aa650)
• deps-dev: bump lint-staged from 15.2.11 to 15.3.0 (d56b48d)
• deps: bump ridedott/release-me-action from 3.10.56 to 3.10.57 (78a0fcd)

v2.10.112

Compare Source

Chores

• deps-dev: bump @​commitlint/cli from 19.5.0 to 19.6.0 (50c763f)
• deps-dev: bump @​commitlint/cli from 19.6.0 to 19.6.1 (b2401b1)
• deps-dev: bump @​commitlint/config-conventional from 19.5.0 to 19.6.0 (c7ebe1b)
• deps-dev: bump @​semantic-release/release-notes-generator from 14.0.1 to 14.0.2 (1e92133)
• deps-dev: bump cspell from 8.16.0 to 8.16.1 (007f8ce)
• deps-dev: bump cspell from 8.16.1 to 8.17.0 (c7356fc)
• deps-dev: bump husky from 9.1.6 to 9.1.7 (b53b273)
• deps-dev: bump lint-staged from 15.2.10 to 15.2.11 (2c3ddb3)
• deps-dev: bump nock from 13.5.5 to 13.5.6 (e7697a6)
• deps: bump ridedott/release-me-action from 3.10.54 to 3.10.56 (15e1ad9)

shivammathur/setup-php (shivammathur/setup-php)

v2.32.0

Compare Source

Changelog

• Added support for PHP 8.4 as the default stable PHP version.

- name: Setup PHP
  uses: shivammathur/setup-php@v2

• Added support for PHP 8.5 as the nightly version. (#​867)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'

• Added support for pre-installed in php-version input. (#​872)
  It will setup the pre-installed PHP version on the runner as per the docs here
  https://github.com/shivammathur/setup-php?tab=readme-ov-file#github-hosted-runners. If the runner does not have a pre-installed PHP version, it will fail.
  Please note: It is not recommended to use this unless you are doing something trivial, the pre-installed PHP versions on GitHub hosted runners are old patch versions.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: pre-installed

• Added support for .tool-versions file format in php-version-file input. (#​883)
  If you have an asdf .tool-versions file in your project.
  For example, you can specify .tool-versions now in the php-version-file input and the action would setup the correct PHP version.

ruby 3.4
php 8.4
nodejs 23.5

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version-file: .tool-versions

• Added support for to specify the path for composer file in the project to read the PHP version using COMPOSER_PROJECT_DIR env value. (#​894)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  env:
    COMPOSER_PROJECT_DIR: php  

• Added support for macos-15 GitHub hosted environment.

• Added support for windows-2025 GitHub hosted environment.

• Added support for composer-dependency-analyser tool (#​859, #​897)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    tools: composer-dependency-analyser

• Added support for relay extension for PHP 8.4 and 8.5. (#​892)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: relay

• Added information on how an extension is loaded in the wiki extension lists. (#​887)
  https://github.com/shivammathur/setup-php/wiki

• Fixed support for debug builds. (#​880)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
  env:
    debug: true  

• Fixed support for zts buids on self-hosted runners.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
  env:
    phpts: ts

• Fixed support for oci extensions for PHP 8.4 and PHP 8.5.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: pdo_oci, oci8

• Fixed support for zephir_parser extension.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: zephir_parser

• Fixed support for couchbase extension on old PHP versions.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '7.1'
    extensions: couchbase

• Fixed support for pdo_firebird extension on macos-15.

### runs-on: macos-15
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: pdo_firebird

• Improved support to install tools in a multi-user self-hosted environment.
• Dropped support for macos-12 GitHub hosted environments.
• Dropped support for Debian 10 based self-hosted environments.
• Update Node.js dependencies.

Thanks @​janedbal, @​alexmerlin and @​tillkruss for the contributions 🎉

Thanks @​desrosj, @​bloodynumen and @​eliashaeussler for the sponsorship ❤️

For the complete list of changes, please refer to the Full Changelog

Follow for updates

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock

Command failed: composer update ergebnis/composer-normalize:2.45.0 php:8.4.2 phpstan/phpstan:1.12.15 phpstan/phpstan-phpunit:1.4.2 phpunit/phpunit:10.5.40 --with-dependencies --ignore-platform-req='ext-*' --ignore-platform-req='lib-*' --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins
Loading composer repositories with package information
Pattern "php" listed for update matches platform packages, but these cannot be updated by Composer.
Dependency nikic/php-parser is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Updating dependencies

In RuleSetGenerator.php line 260:
                                                         
  [LogicException]                                       
  Fixed package php 8.1.0 was not added to solver pool.  
                                                         

Exception trace:
  at phar:///opt/containerbase/tools/composer/2.8.4/bin/composer/src/Composer/DependencyResolver/RuleSetGenerator.php:260
 Composer\DependencyResolver\RuleSetGenerator->addRulesForRequest() at phar:///opt/containerbase/tools/composer/2.8.4/bin/composer/src/Composer/DependencyResolver/RuleSetGenerator.php:312
 Composer\DependencyResolver\RuleSetGenerator->getRulesFor() at phar:///opt/containerbase/tools/composer/2.8.4/bin/composer/src/Composer/DependencyResolver/Solver.php:183
 Composer\DependencyResolver\Solver->solve() at phar:///opt/containerbase/tools/composer/2.8.4/bin/composer/src/Composer/Installer.php:508
 Composer\Installer->doUpdate() at phar:///opt/containerbase/tools/composer/2.8.4/bin/composer/src/Composer/Installer.php:298
 Composer\Installer->run() at phar:///opt/containerbase/tools/composer/2.8.4/bin/composer/src/Composer/Command/UpdateCommand.php:281
 Composer\Command\UpdateCommand->execute() at phar:///opt/containerbase/tools/composer/2.8.4/bin/composer/vendor/symfony/console/Command/Command.php:298
 Symfony\Component\Console\Command\Command->run() at phar:///opt/containerbase/tools/composer/2.8.4/bin/composer/vendor/symfony/console/Application.php:1040
 Symfony\Component\Console\Application->doRunCommand() at phar:///opt/containerbase/tools/composer/2.8.4/bin/composer/vendor/symfony/console/Application.php:301
 Symfony\Component\Console\Application->doRun() at phar:///opt/containerbase/tools/composer/2.8.4/bin/composer/src/Composer/Console/Application.php:396
 Composer\Console\Application->doRun() at phar:///opt/containerbase/tools/composer/2.8.4/bin/composer/vendor/symfony/console/Application.php:171
 Symfony\Component\Console\Application->run() at phar:///opt/containerbase/tools/composer/2.8.4/bin/composer/src/Composer/Console/Application.php:136
 Composer\Console\Application->run() at phar:///opt/containerbase/tools/composer/2.8.4/bin/composer/bin/composer:98
 require() at /opt/containerbase/tools/composer/2.8.4/bin/composer:29

update [--with WITH] [--prefer-source] [--prefer-dist] [--prefer-install PREFER-INSTALL] [--dry-run] [--dev] [--no-dev] [--lock] [--no-install] [--no-audit] [--audit-format AUDIT-FORMAT] [--no-autoloader] [--no-suggest] [--no-progress] [-w|--with-dependencies] [-W|--with-all-dependencies] [-v|vv|vvv|--verbose] [-o|--optimize-autoloader] [-a|--classmap-authoritative] [--apcu-autoloader] [--apcu-autoloader-prefix APCU-AUTOLOADER-PREFIX] [--ignore-platform-req IGNORE-PLATFORM-REQ] [--ignore-platform-reqs] [--prefer-stable] [--prefer-lowest] [-m|--minimal-changes] [--patch-only] [-i|--interactive] [--root-reqs] [--bump-after-update [BUMP-AFTER-UPDATE]] [--] [<packages>...]