composer(deps-dev): bump the minor-patch-dependencies group with 6 updates

[dependabot]

Updates the requirements on infection/infection, mimmi20/coding-standard, nikic/php-parser, phpstan/phpstan, phpunit/phpunit and rector/rector to permit the latest version.
Updates infection/infection to 0.27.9

Release notes

Sourced from infection/infection's releases.

Fix an issue with numeric data provider keys in PHPUnit >= 10

Fixed:

• Fix an issue with numeric data provider keys and run tests with format clear for both PHPUnit >= 10 and PHPUnit < 10 by @​sidz in infection/infection#1900
• Disable Box Requirements Checker as it conflicts with symfony/service-contracts package by @​sidz in infection/infection#1902
• build: Disable the requirement checker by @​theofidry in infection/infection#1903

Full Changelog: infection/infection@0.27.8...0.27.9

Commits

• 61e6d06 Revert "Disable Box Requirements Checker as it conflicts as the package "symf...
• 23c94d5 build: Disable the requirement checker (#1903)
• 5583296 Disable Box Requirements Checker as it conflicts as the package "symfony/serv...
• 6a46a15 Fix an issue with numeric data provider keys and run tests with format clear ...
• 5d7a36f Upgrade to Box 4.5.1 (#1766)
• f456c92 ci: Skip tests if Symfony6 & locked (#1837)
• See full diff in compare view

Updates mimmi20/coding-standard to 5.2.1

Commits

• 7d3b7d4 Merge pull request #423 from mimmi20/dependabot/composer/master/friendsofphp/...
• ae4a9b5 composer(deps): update friendsofphp/php-cs-fixer requirement
• acdf54a Merge pull request #422 from mimmi20/updates
• 4e344c7 update dependencies
• 35fcb33 fix property names
• 12012d2 Merge pull request #419 from mimmi20/dependabot/composer/master/friendsofphp/...
• ac90c0b remove deleted rector
• 073ab02 composer(deps): update friendsofphp/php-cs-fixer requirement
• 0a43762 Merge pull request #418 from mimmi20/dependabot/composer/master/minor-patch-d...
• 2b938c9 composer(deps-dev): bump the minor-patch-dependencies group with 1 update
• Additional commits viewable in compare view

Updates nikic/php-parser to 4.18.0

Release notes

Sourced from nikic/php-parser's releases.

PHP-Parser 4.18.0

Added

• Added methods ParserFactory::createForNewestSupportedVersion() and ParserFactory::createForHostVersion() for forward-compatibility with PHP-Parser 5.0.

Fixed

• Fixed missing name resolution of class constant types.
• Fixed class members being dropped if an error is encountered while parsing a later class member (when error recovery is enabled).

Changed

• The grammar/ directory has been excluded from exported git archives.

Changelog

Sourced from nikic/php-parser's changelog.

Version 4.18.0 (2023-12-10)

Added

• Added methods ParserFactory::createForNewestSupportedVersion() and ParserFactory::createForHostVersion() for forward-compatibility with PHP-Parser 5.0.

Fixed

• Fixed missing name resolution of class constant types.
• Fixed class members being dropped if an error is encountered while parsing a later class member (when error recovery is enabeld).

Changed

• The grammar/ directory has been excluded from exported git archives.

Version 4.17.1 (2023-08-13)

Fixed

• Fixed phpdoc mismatches for ClassConst::$type introduced in previous release.

Version 4.17.0 (2023-08-13)

Added

• [PHP 8.3] Added support for typed class constants.
• [PHP 8.3] Added supprot for dynamic class constant fetch.
• [PHP 8.3] Added support for readonly anonymous classes.

Fixed

• Fixed missing required parentheses when pretty printing new with an expression class name.
• Fixed missing required parentheses when pretty printing (CONST)::$x and similar.

Version 4.16.0 (2023-06-25)

Added

• Added Name::getParts() method for forward-compatibility with PHP-Parser 5.

Deprecated

• Deprecated direct access to Name::$parts, which will be removed in PHP-Parser 5.

... (truncated)

Commits

• 1bcbb21 Release PHP-Parser 4.18.0
• 05c0186 Add PHP 8.3 to CI
• 2a5e81f Fix NameResolver for class constant native type
• e453389 Add forward-compatibility ParserFactory methods
• 402b6cf build: Exclude grammar from export git artifact
• 54103d8 Don't drop class statements before error (#952)
• See full diff in compare view

Updates phpstan/phpstan to 1.10.48

Release notes

Sourced from phpstan/phpstan's releases.

1.10.48

Bleeding edge 🔪

• TooWideMethodReturnTypehintRule - always report for final methods (phpstan/phpstan-src@c30e9a4)
• LogicalXorConstantConditionRule (phpstan/phpstan-src@3a12724, phpstan/phpstan-src@3b011f6), #7539
• NoopRule - report top-level xor because that's probably not what the user intended to do (phpstan/phpstan-src@a1fffb3), #10267
• Report unused results of and and or (phpstan/phpstan-src@1d8fff6)
• Report unused result of ternary (phpstan/phpstan-src@9664f7a)
• Report unused results of && and || (phpstan/phpstan-src@cf2c8bb)

If you want to see the shape of things to come and adopt bleeding edge features early, you can include this config file in your project's phpstan.neon:

includes:
	- vendor/phpstan/phpstan/conf/bleedingEdge.neon

Of course, there are no backwards compatibility guarantees when you include this file. The behaviour and reported errors can change in minor versions with this file included. Learn more

Improvements 🔧

• Narrow ReflectionEnum::getName() after ReflectionEnum::isBacked() (#2806), #10192, thanks @​franmomu!
• Any variable can exist after include/require (phpstan/phpstan-src@0a3a968), Using inline `@var` to identify expected variables from a require/include within a function/class scope phpstan/phpstan#10252

Bugfixes 🐛

• ResolvedPhpDocBlock: fix parent return tag merging (#2803), #6462, #10208, #3580, #4396, thanks @​janedbal!
• Merge in-foreach scope even for non-iterable expr (phpstan/phpstan-src@942afbf)
• TooWideMethodReturnTypehintRule - never report in a trait (phpstan/phpstan-src@e0eb850)
• Narrowing list type with count() results in type loss (#2811), #10264, thanks @​staabm!
• Fix LevelsTestCase for PHPUnit 10 (phpstan/phpstan-src@fa5d5f9)

Function signature fixes 🤖

• Update return type information for SimpleXMLElement::addChild (#2808), #10269, thanks @​DaveLiddament!

Commits

• 087ed4b PHPStan 1.10.48
• 8ada96c Update baselines
• fa5d5f9 Updated PHPStan to commit fa5d5f958b051b088fb0824d377a091273d6436c
• 34dfd6a Updated PHPStan to commit 34dfd6aa45963c83cb5f733dae4890ed1a63cbda
• cf2c8bb Updated PHPStan to commit cf2c8bbd9ebd2ebe300dbd310e136ad603d7def3
• a1fffb3 Updated PHPStan to commit a1fffb3346e09f1e8e8d987d4282263295a55142
• 3a12724 Updated PHPStan to commit 3a12724fd636b1bcf36c22b36e8f765d97150895
• 0a3a968 Updated PHPStan to commit 0a3a968b86773a54e102baee4f63d39a556c97fc
• 1b126c9 Updated PHPStan to commit 1b126c9a49ec934b381e35a58bf412292762cbef
• 942eaa4 Update baselines
• Additional commits viewable in compare view

Updates phpunit/phpunit to 10.5.2

Changelog

Sourced from phpunit/phpunit's changelog.

10.5.2 - 2023-12-05

Fixed

• #5561: JUnit XML logger does not handle assertion failures in before-test methods
• #5567: Infinite recursion when recursive / self-referencing arrays are checked whether they contain only scalar values

10.5.1 - 2023-12-01

Fixed

• #5593: Return Value Generator fails to correctly create test stub for method with static return type declaration when used recursively
• #5596: PHPUnit\Framework\TestCase has @internal annotation in PHAR

10.5.0 - 2023-12-01

Added

• #5532: #[IgnoreDeprecations] attribute to ignore E_(USER_)DEPRECATED issues on test class and test method level
• #5551: Support for omitting parameter default values for willReturnMap()
• #5577: --composer-lock CLI option for PHAR binary that displays the composer.lock used to build the PHAR

Changed

• MockBuilder::disableAutoReturnValueGeneration() and MockBuilder::enableAutoReturnValueGeneration() are no longer deprecated

Fixed

• #5563: createMockForIntersectionOfInterfaces() does not automatically register mock object for expectation verification

Commits

• 5aedff4 Prepare release
• 704d653 Update Psalm baseline
• d9fb12a Delete unused code
• dce0d1b Reorganize
• fa43e67 Delete unused code
• cf52ea4 Rename method
• fb1789f Fix Util\Exporter::export() to dump "null"
• 6d121ca Make this test portable
• 61037fc Closes #5561
• 7fc1b6b Update Psalm baseline
• Additional commits viewable in compare view

Updates rector/rector to 0.18.12

Release notes

Sourced from rector/rector's releases.

Released Rector 0.18.12

New Features 🥳

• [CodeQuality] Add RemoveUselessIsObjectCheckRector (#5316)
• [PHP83] Implements a rule to add types to class constants (#5290), Thanks @​peterfox!

Bugfixes 🐛

• [TypeDeclaration] Skip iterable already there in AddReturnTypeDeclarationFromYieldsRector (#5291)
• [TypeDeclaration] Remove ParamTypeFromStrictTypedPropertyRector as seems similar feature with AddParamTypeFromPropertyTypeRector (#5293)
• [CodingStyle] Remove AddArrayDefaultToArrayPropertyRector as based on docblock types and public contract, better use type declaration set instad (#5298)
• [TypeDeclaration] Skip return void in abstract empty class in AddVoidReturnTypeWhereNoReturnRector (#5311)
• [Php80] Skip PDO::query() on AddParamBasedOnParentClassMethodRector (#5313)
• [TypeDeclaration] Add If else assign support on TypedPropertyFromAssignsRector (#5314)
• [CodeQuality] Make CommonNotEqualRector skip if not <> (#5292)
• [Naming] Skip singularize "cms" on RenameForeachValueVariableToMatchExprVariableRector (#5294)
• [TypeDeclaration][Performance] Check typed param already early on ParamTypeByMethodCallTypeRector (#5295)
• [Strict] Fix DisallowedEmptyRuleFixerRector empty() allow string '0' check (#5296)
• [EarlyReturn] Skip duplicating complex expression in ChangeAndIfToEarlyReturnRector (#5301)
• [Scoped] Exclude symfony/console/Debug/CliRequest.php from parallel-lint PHP 7.2 syntax check (#5304)
• Skip RenameMethodRector in never (#5305), Thanks @​staabm!
• [CodeQuality] Skip with else on SimplifyForeachToCoalescingRector (#5307)
• [Doc] Typo fix on sample code documentation on SimplifyForeachToCoalescingRector (#5308)
• [Privatization] Skip call non-private method on non-final class on PrivatizeLocalGetterToPropertyRector (#5309)
• [Privatization] Fix first class callable in PrivatizeLocalGetterToPropertyRector (#5310)
• [TypeDeclaration] Keep constant false return type from strict native call (#5223), Thanks @​tomi85!
• [PHP 7.0] Skip mt_rand() replacement as not valuable (#5315)
• [Strict] Allow check '0' empty zero on BooleanInTernaryOperatorRuleFixerRector on string type (#5297)
• Fix annotation to attribute parsing string (#5317)
• [Instanceof] Fix combination of dead instance and compare (#5319)
• Remove isPositiveInteger() check for third argument to strpos() (#5257), Thanks @​ikari7789!
• Remove return type in case of void in RemoveUselessReturnTagRector (#5318)
• [DeadCode] Skip @​return never with void on RemoveUselessReturnTagRector (#5320)
• [DeadCode] Remove useless nullable @​return doc on RemoveUselessReturnTagRector (#5321)

Commits

• ed8d535 Rector 0.18.12
• 6cba206 Updated Rector to commit 80cf5781c3bf477076753e2a0c2890ae0ecbb4c1
• ee373e6 Updated Rector to commit 41729c25cb33ec5219433d5e101d6d54ed4045a2
• d9834a6 Updated Rector to commit 8e6d46a58fff8e6bd5276b9ae473bfb91460b487
• ab4ff53 Updated Rector to commit 026398c9e1078cb3ac5cac41767b620872166859
• 07dd432 Updated Rector to commit b8e6818ed04f3aa07218569509bd819db3649820
• 7124cd0 Updated Rector to commit 055ab62e3fa14a1aaccd2a5e7f2a9fd354fbd600
• e7fa7d1 Updated Rector to commit 18617f9880d098bceae210512c190c8d44aa7811
• 9d01b5b Updated Rector to commit d9c5d8f09bfd68e7496c07c23ddac03447cfbb32
• cd89d88 Updated Rector to commit e3f909cf030971b542c9c508298c729abb60eefe
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Fixes #347
Fixes #353

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Manifest Files

composer.json

• infection/infection@>= 0.27.9, < 0.28.0
• mimmi20/coding-standard@>= 5.2.1, < 6.0.0
• nikic/php-parser@>= 4.18.0, < 5.0.0
• phpstan/phpstan@>= 1.10.48, < 2.0.0
• phpunit/phpunit@>= 10.5.2, < 11.0.0
• rector/rector@>= 0.18.12, < 0.19.0
• infection/infection@>= 0.27.8, < 0.28.0
• mimmi20/coding-standard@>= 5.1.27, < 6.0.0
• nikic/php-parser@>= 4.17.1, < 5.0.0
• phpstan/phpstan@>= 1.10.47, < 2.0.0
• phpunit/phpunit@>= 10.5.1, < 11.0.0
• rector/rector@>= 0.18.11, < 0.19.0