composer(deps-dev): bump the minor-patch-dependencies group with 2 updates

[dependabot]

Updates the requirements on phpstan/phpstan and phpstan/phpstan-deprecation-rules to permit the latest version.
Updates phpstan/phpstan to 1.11.0

Release notes

Sourced from phpstan/phpstan's releases.

1.11.0

Read the article about PHPStan 1.11 on phpstan.org »

Major new features 🚀

• Error identifiers
  • A way to categorize reported errors by a stable identifier. Up until now you had to use specific and ever-changing error messages
  • Can be used for ignoring specific errors locally with new @phpstan-ignore comment (uses current or next line automatically)
  • Can be used for ignoring specific errors in ignoreErrors section of your configuration file (phpstan.neon)
  • Can be used in output formatters
  • Can be seen in PHPStan Pro GUI or in TableErrorFormatter with -v
  • Catalogue with source code links: https://phpstan.org/error-identifiers
• PHPStan Pro Reboot
  • A new migration wizard will effortlessly migrate all your @phpstan-ignore-line and @phpstan-ignore-next-line to the new @phpstan-ignore comment style with error identifiers. The old comment style is dangerous because it ignores all errors, current and future, on that line.
  • Revamped UI for much more comfortable viewing and browsing of reported errors
  • The new UI also lets you browse ignored errors, from ignoreErrors, from your baseline and also ignored locally in source code using comments
  • Streaming errors during launch: You don't have to wait for the analysis to complete, you can see errors as they come in during the analysis
  • Support for mapping file paths to the host filesystem when running in Docker or remotely
  • Try it out by running PHPStan with --pro CLI option
• PHPDoc tags describing callable lifecycle: @param-immediately-invoked-callable, @param-later-invoked-callable
  • Useful for exception analysis (https://phpstan.org/blog/bring-your-exceptions-under-control) and @phpstan-pure
• PHPDoc tag @param-closure-this to describe what $this is bound to in a passed closure
• Two new config options around stricter offset checks in arrays (#3028), #7553, thanks @​ttomdewit!
  • reportPossiblyNonexistentGeneralArrayOffset
  • reportPossiblyNonexistentConstantArrayOffset
  • Learn more in the documentation

Bleeding edge 🔪

• Checking truthiness of @phpstan-pure above functions and methods
• Check new/function call/method call/static method call on a separate line without any side effects even without @phpstan-pure PHPDoc tag on the declaration side
  • phpstan/phpstan-src@281a87d
  • #3020, thanks @​staabm!
  • #3022, thanks @​staabm!
  • #3023, thanks @​staabm!
• BetterNoopRule - take advantage of impure points (phpstan/phpstan-src@a647052), #10389
• Run missing type check on @param-out (phpstan/phpstan-src@56b2002)
• CallToConstructorStatementWithoutSideEffectsRule - report class with no constructor (phpstan/phpstan-src@b116d25)
• Deprecated: returning plain strings as errors, use RuleErrorBuilder
  • Learn more: Using RuleErrorBuilder to enrich reported errors in custom rules
• Deprecated: returning RuleError without identifier (phpstan/phpstan-src@969e6fa)

If you want to see the shape of things to come and adopt bleeding edge features early, you can include this config file in your project's phpstan.neon:

includes:
	- vendor/phpstan/phpstan/conf/bleedingEdge.neon
</tr></table> 

... (truncated)

Commits

• 666cb17 PHPStan 1.11.0
• 2871964 PHPStan 1.11 With Error Identifiers, PHPStan Pro Reboot and Much More
• d5a4746 Updated PHPStan to commit d5a4746e91feacdceffe66d00d4976ecaa4a9673
• 6c85acc Updated PHPStan to commit 6c85acc5c209b52fad7e6eaafa6d09d96e555042
• 0463255 Updated PHPStan to commit 046325529b05150ca8b76e408faf8bf1deb6c295
• 49498ce Updated PHPStan to commit 49498ce062e1c0844be5b9d506ea53dbbf5354d2
• 783d9bb Update BACKERS.md
• 39ce042 Updated PHPStan to commit 39ce0425737cdbacfee5fbc08160d023cb5bc639
• 73521c3 Updated PHPStan to commit 73521c30c5f057305ece7ef67fc0cd448768a156
• 7069037 merge.php - output identifier stats into stderr
• Additional commits viewable in compare view

Updates phpstan/phpstan-deprecation-rules to 1.2.0

Release notes

Sourced from phpstan/phpstan-deprecation-rules's releases.

1.2.0

• fa8cce7 - Update lock-closed-issues.yml
• 8342041 - Merge remote-tracking branch 'origin/1.1.x' into 1.2.x
• d457b73 - Update PHPStan version
• ff4f00f - Update FetchingDeprecatedConstRuleTest.php
• 437ac71 - Fix build
• e9ea332 - Update metcalfc/changelog-generator action to v4.3.1
• f71dbf6 - Update cbrgm/mastodon-github-action action to v2
• 10f0e35 - Merge branch '1.1.x' into 1.2.x
• 674d785 - Fix build
• e7fe22b - Update metcalfc/changelog-generator action to v4.2.0
• 83345f7 - Update dessant/lock-threads action to v5
• 788ea1b - remove phpstan/phpstan-php-parser
• 4175e8a - Update actions/checkout action to v4
• f1cacde - Fix a typo
• 1884f9f - Next-gen coding standard workflow
• 2313a63 - Modernize rules to use RuleErrorBuilder and report error identifiers
• ca9e4fd - Open 1.2.x-dev

Commits

• fa8cce7 Update lock-closed-issues.yml
• 8342041 Merge remote-tracking branch 'origin/1.1.x' into 1.2.x
• d457b73 Update PHPStan version
• ff4f00f Update FetchingDeprecatedConstRuleTest.php
• 437ac71 Fix build
• e9ea332 Update metcalfc/changelog-generator action to v4.3.1
• f71dbf6 Update cbrgm/mastodon-github-action action to v2
• 10f0e35 Merge branch '1.1.x' into 1.2.x
• 674d785 Fix build
• e7fe22b Update metcalfc/changelog-generator action to v4.2.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details

Scanned Manifest Files

composer.json

• phpstan/phpstan@>= 1.11.0, < 2.0.0
• phpstan/phpstan-deprecation-rules@>= 1.2.0, < 2.0.0
• phpstan/phpstan@>= 1.10.67, < 2.0.0
• phpstan/phpstan-deprecation-rules@>= 1.1.4, < 2.0.0

[codeclimate]

Code Climate has analyzed commit 5f9c421 and detected 0 issues on this pull request.

View more on Code Climate.

[dependabot]

Superseded by #496.