composer(deps-dev): bump the minor-patch-dependencies group with 3 updates

[dependabot]

Updates the requirements on phpstan/phpstan, phpstan/phpstan-phpunit and phpunit/phpunit to permit the latest version.
Updates phpstan/phpstan to 1.10.59

Release notes

Sourced from phpstan/phpstan's releases.

1.10.59

Bleeding edge 🔪

• array_values rule (report when a list type is always passed in) (#2917), thanks @​kamil-zacek!

If you want to see the shape of things to come and adopt bleeding edge features early, you can include this config file in your project's phpstan.neon:

includes:
	- vendor/phpstan/phpstan/conf/bleedingEdge.neon

Of course, there are no backwards compatibility guarantees when you include this file. The behaviour and reported errors can change in minor versions with this file included. Learn more

Improvements 🔧

• ArrayFilterRule - tip message about treatPhpDocTypesAsCertain (phpstan/phpstan-src@f5b198c)
• ArgumentsNormalizer - skip unused arguments in non-variadic signatures, still return a normalized call (phpstan/phpstan-src@17e5bac)
• Methods in fluent interfaces are considered impure (phpstan/phpstan-src@b026126)
• Add type-specifying extension for settype() (#2920), thanks @​ChrisBrenton!

Bugfixes 🐛

• MethodAssertRule - do not report implicitly inherited assert tags (phpstan/phpstan-src@299df51), #10573
  • Gets rid of the annoying error "Asserted type ... with type ... does not narrow down the type."
• ConstantArrayType - string offset might exist as integer offset (phpstan/phpstan-src@2fb6632), #10577

Internals 🔍

• Parallelize levels tests (#2916), thanks @​staabm!
• FunctionReflection::isPure() and ExtendedMethodReflection::isPure() (phpstan/phpstan-src@03d01ea)

Commits

• e607609 PHPStan 1.10.59
• 995eff9 Updated PHPStan to commit 995eff969168ed1d2f291b1d1da8842e7da39f52
• 473df92 Updated PHPStan to commit 473df926b3f687e968e8e519e310882ab72ff4ff
• 299df51 Updated PHPStan to commit 299df5130a14d5a23073edb044b46209ee7b5426
• d2c30d1 Updated PHPStan to commit d2c30d159f7aabb24f188d7d0a8a1b9ea87f8b61
• b026126 Updated PHPStan to commit b0261263e2e3a3643a9a89eb0931c07d8e71dc18
• 938321c Updated PHPStan to commit 938321ce0ebb24da8cd550b525ae50651fffc156
• cfe839d Update baselines
• 7a2af63 Updated PHPStan to commit 7a2af631d14529f2c7be95e064fbfef0bedc4b9f
• 37f3c82 Updated PHPStan to commit 37f3c826b18410fbfae33ad2993029b5e8a755b0
• Additional commits viewable in compare view

Updates phpstan/phpstan-phpunit to 1.3.16

Release notes

Sourced from phpstan/phpstan-phpunit's releases.

1.3.16

• d5242a5 - Narrow type on assertCount and assertNotCount

Commits

• d5242a5 Narrow type on assertCount and assertNotCount
• See full diff in compare view

Updates phpunit/phpunit to 10.5.11

Changelog

Sourced from phpunit/phpunit's changelog.

[10.5.11] - 2024-02-25

Fixed

• #5704: No warning when CLI options are used multiple times
• #5707: --fail-on-empty-test-suite CLI option is not documented in --help output
• No warning when the #[CoversClass] and #[UsesClass] attributes are used with the name of an interface
• Resource usage information is printed when the --debug CLI option is used

[10.5.10] - 2024-02-04

Fixed

• #5692: --log-events-text and --log-events-verbose-text require the destination file to exit

[10.5.9] - 2024-01-22

Fixed

• #5676: PHPUnit's test runner overwrites custom error handler registered using set_error_handler() in bootstrap script

[10.5.8] - 2024-01-19

Fixed

• #5673: Confusing error message when migration of a configuration is requested that does not need to be migrated

[10.5.7] - 2024-01-14

Fixed

• #5662: PHPUnit errors out on startup when the ctype extension is not loaded but a polyfill for it was installed

[10.5.6] - 2024-01-13

Added

• Added the --debug CLI option as an alias for --no-output --log-events-text php://stdout

Fixed

• #5455: willReturnCallback() does not pass unknown named variadic arguments to callback
• #5488: Details about tests that are considered risky are not displayed when the TestDox result printer is used
• #5516: Assertions that use the LogicalNot constraint (assertNotEquals(), assertStringNotContainsString(), ...) can generate confusing failure messages
• #5518: Details about deprecations, notices, and warnings are not displayed when the TestDox result printer is used
• #5574: Wrong backtrace line is reported
• #5633: --log-events-text and --log-events-verbose-text CLI options do not handle absolute and relative paths
• #5634: Exceptions in the destructor of a test double are ignored
• #5641: The TestSuite value object returned by TestSuite\Filtered::testSuite() contains all tests instead of only the filtered tests

... (truncated)

Commits

• 0d968f6 Prepare release
• 05b7216 Make #[CoversClass] and #[UsesClass] attributes behave more like the annotati...
• bc6b6fe Fix code coverage metadata
• be83252 Group tests
• 5ae880f Merge branch '9.6' into 10.5
• 92ff055 Merge branch '8.5' into 9.6
• 0f4fed2 Fix CS/WS issues
• a01fd3f Update tools
• b092100 Update dependencies
• 1a15698 Prepare release
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Manifest Files

composer.json

• phpstan/phpstan@>= 1.10.59, < 2.0.0
• phpstan/phpstan-phpunit@>= 1.3.16, < 2.0.0
• phpunit/phpunit@>= 10.5.11, < 11.0.0
• phpstan/phpstan@>= 1.10.58, < 2.0.0
• phpstan/phpstan-phpunit@>= 1.3.15, < 2.0.0
• phpunit/phpunit@>= 10.5.10, < 11.0.0

[codeclimate]

Code Climate has analyzed commit 1f5e8f6 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 100.0% (0.0% change).

View more on Code Climate.