composer(deps-dev): bump the minor-patch-dependencies group with 5 updates

.github/dependabot.yml

@@ -12,22 +12,18 @@ updates:
     schedule:
       interval: "weekly"
       day: "monday"
-      time: "05:30"
+      time: "04:00"
       timezone: "Europe/Berlin"
 
     groups:
       # Specify a name for the group, which will be used in pull request titles
       # and branch names
       minor-patch-dependencies:
+        applies-to: "version-updates"
         # Define patterns to include dependencies in the group (based on
         # dependency name)
         patterns:
           - "*"
-        # update-types:
-        #   - "minor"
-        #   - "patch"
-        # exclude-patterns:
-        #   - "gc_ruboconfig"
 
     open-pull-requests-limit: 10
 
@@ -48,13 +44,77 @@ updates:
       include: "scope"
       prefix: "composer"
 
+    #allow:
+    #  - '*'
+
     ignore:
+      - dependency-name: "laminas/laminas-servicemanager"
+      - dependency-name: "psr/container"
       - dependency-name: "nikic/php-parser"
-        versions:
-          - ">= 0"
       - dependency-name: "infection/infection"
-        versions:
-          - ">= 0"
+      - dependency-name: "psr/http-message"
+      - dependency-name: "psr/simple-cache"
+      - dependency-name: "illuminate/view"
+      - dependency-name: "illuminate/config"
+      - dependency-name: "endorphin-studio/browser-detector-tests"
+      - dependency-name: "laminas/laminas-diactoros"
+
+    # Disable rebasing for all pull requests
+    rebase-strategy: "disabled"
+
+  #- package-ecosystem: "composer"
+  #
+  #  directory: "/"
+  #
+  #  schedule:
+  #    interval: "weekly"
+  #    day: "monday"
+  #    time: "04:00"
+  #    timezone: "Europe/Berlin"
+  #
+  #  groups:
+  #    # Specify a name for the group, which will be used in pull request titles
+  #    # and branch names
+  #    minor-patch-dependencies:
+  #      applies-to: "version-updates"
+  #      # Define patterns to include dependencies in the group (based on
+  #      # dependency name)
+  #      patterns:
+  #        - "*"
+  #
+  #  open-pull-requests-limit: 10
+  #
+  #  reviewers:
+  #    - "mimmi20"
+  #
+  #  assignees:
+  #    - "mimmi20"
+  #
+  #  labels:
+  #    - "dependencies"
+  #
+  #  versioning-strategy: "widen"
+  #
+  #  target-branch: "master"
+  #
+  #  commit-message:
+  #    include: "scope"
+  #    prefix: "composer"
+  #
+  #  allow:
+  #    - dependency-name: "psr/container"
+  #    - dependency-name: "infection/infection"
+  #    - dependency-name: "nikic/php-parser"
+  #    - dependency-name: "psr/http-message"
+  #    - dependency-name: "laminas/laminas-servicemanager"
+  #    - dependency-name: "psr/simple-cache"
+  #    - dependency-name: "illuminate/view"
+  #    - dependency-name: "illuminate/config"
+  #    - dependency-name: "endorphin-studio/browser-detector-tests"
+  #    - dependency-name: "laminas/laminas-diactoros"
+  #
+  #  # Disable rebasing for all pull requests
+  #  rebase-strategy: "disabled"
 
   - package-ecosystem: "github-actions"
 
@@ -63,22 +123,18 @@ updates:
     schedule:
       interval: "weekly"
       day: "monday"
-      time: "05:30"
+      time: "04:00"
       timezone: "Europe/Berlin"
 
     groups:
       # Specify a name for the group, which will be used in pull request titles
       # and branch names
       minor-patch-dependencies:
+        applies-to: "version-updates"
         # Define patterns to include dependencies in the group (based on
         # dependency name)
         patterns:
           - "*"
-        # update-types:
-        #   - "minor"
-        #   - "patch"
-        # exclude-patterns:
-        #   - "gc_ruboconfig"
 
     open-pull-requests-limit: 10
 
@@ -95,3 +151,6 @@ updates:
 
     commit-message:
       prefix: "github-actions"
+
+    # Disable rebasing for all pull requests
+    rebase-strategy: "disabled"

.github/renovate.json5

@@ -51,9 +51,13 @@
       "rangeStrategy": "widen"
     },
     {
-      "matchPackageNames": ["nikic/php-parser", "infection/infection"],
+      "matchPackageNames": ["nikic/php-parser", "infection/infection", "psr/container", "psr/http-message", "laminas/laminas-servicemanager", "psr/simple-cache", "illuminate/view", "illuminate/config", "endorphin-studio/browser-detector-tests", "laminas/laminas-diactoros"],
       "rangeStrategy": "widen"
     },
+    {
+      "matchPackageNames": ["vitest", "@vitest/coverage-istanbul", "@vitest/ui"],
+      "enabled": false
+    },
     {
       "groupName": "all non-major dependencies",
       "groupSlug": "all-minor-patch-dependencies",

.github/workflows/continuous-integration.yml

@@ -57,7 +57,7 @@ jobs:
       skip-phpmd: false
 
   tests:
-    name: "UnitTests & Code Coverage"
+    name: "UnitTests with PHPUnit"
 
     needs: "analytics"
 

.github/workflows/lint-workflow-files.yml

@@ -21,10 +21,10 @@ jobs:
       - name: "install libimagequant-dev"
         run: "sudo apt-get install libimagequant-dev -y"
 
-      - name: "Use Node.js 20"
+      - name: "Use Node.js 22"
         uses: "actions/setup-node@v4"
         with:
-          node-version: "20"
+          node-version: "22"
 
       - name: "Check workflow files"
         uses: "raven-actions/actionlint@v1"

composer.json

@@ -37,17 +37,18 @@
     "ext-xml": "*",
     "ext-xmlwriter": "*",
     "infection/infection": "^0.27.11 || ^0.28.1",
-    "mimmi20/coding-standard": "^5.2.33",
+    "mimmi20/coding-standard": "^5.2.34",
     "nikic/php-parser": "^4.19.1 || ^5.0.2",
-    "phpstan/extension-installer": "^1.4.0",
+    "phpstan/extension-installer": "^1.4.1",
     "phpstan/phpstan": "^1.11.4",
     "phpstan/phpstan-deprecation-rules": "^1.2.0",
     "phpstan/phpstan-phpunit": "^1.4.0",
-    "phpunit/phpunit": "^10.5.20",
+    "phpunit/phpunit": "^10.5.21",
     "rector/rector": "^1.1.0",
-    "symplify/phpstan-rules": "^12.7.0",
+    "rector/type-perfect": "^0.1.4",
+    "symplify/phpstan-rules": "^13.0.0",
     "tomasvotruba/cognitive-complexity": "^0.2.3",
-    "tomasvotruba/type-coverage": "^0.3.0",
+    "tomasvotruba/type-coverage": "^0.3.1",
     "tomasvotruba/unused-public": "^0.3.9"
   },
   "minimum-stability": "stable",

phpstan.neon

@@ -15,7 +15,7 @@ parameters:
     - %currentWorkingDirectory%/vendor/squizlabs/php_codesniffer/src/Util/Tokens.php
 
   # reports occurrences of type-checking functions always evaluated to true
-  checkAlwaysTrueCheckTypeFunctionCall: false
+  checkAlwaysTrueCheckTypeFunctionCall: false # todo: fix
 
   # reports instanceof occurrences always evaluated to true
   checkAlwaysTrueInstanceof: true
@@ -35,11 +35,8 @@ parameters:
   # reports function and method calls with incorrect name case
   checkFunctionNameCase: true
 
-  # it requires type variables always be specified in typehints
-  checkGenericClassInNonGenericObjectType: true
-
   # be strict about values with an unspecified (implicit mixed) type
-  checkImplicitMixed: false
+  checkImplicitMixed: false # todo: fix
 
   # reports references to built-in classes with incorrect name case
   checkInternalClassCaseSensitivity: true
@@ -75,7 +72,7 @@ parameters:
   reportMaybesInMethodSignatures: true
 
   # reports violations of property type invariance
-  reportMaybesInPropertyPhpDocTypes: false
+  reportMaybesInPropertyPhpDocTypes: false # todo: fix
 
   # reports violations of parameter type contravariance and return type covariance in static methods
   reportStaticMethodSignatures: true
@@ -114,13 +111,16 @@ parameters:
     constants: true
     local_methods: true
 
+  type_perfect:
+    null_over_false: true
+    no_mixed: true
+    narrow_param: true
+
 #  ignoreErrors:
 #    - '~Method UaDeviceType\\.*::getName\(\) never returns null so it can be removed from the return type~'
 
 rules:
   # code complexity
-  - Symplify\PHPStanRules\Rules\Explicit\NoMixedPropertyFetcherRule
-  - Symplify\PHPStanRules\Rules\Explicit\NoMixedMethodCallerRule
   - Symplify\PHPStanRules\Rules\NoDynamicNameRule
   # - Symplify\PHPStanRules\Rules\NoReturnArrayVariableListRule # todo: fix
 
@@ -130,25 +130,14 @@ rules:
   - Symplify\PHPStanRules\Rules\Domain\RequireExceptionNamespaceRule
   - Symplify\PHPStanRules\Rules\Domain\RequireAttributeNamespaceRule
   - Symplify\PHPStanRules\Rules\Enum\RequireUniqueEnumConstantRule
-  - Symplify\PHPStanRules\Rules\ForbiddenParamTypeRemovalRule
   - Symplify\PHPStanRules\Rules\PreventParentMethodVisibilityOverrideRule
 
   # paths
-  - Symplify\PHPStanRules\Rules\NoMissingDirPathRule
-  - Symplify\PHPStanRules\Rules\NoReferenceRule # References are required
-  - Symplify\PHPStanRules\Rules\NoArrayAccessOnObjectRule
-
-  - Symplify\PHPStanRules\Rules\NoNullableArrayPropertyRule
-
-  # dead-code
-  - Symplify\PHPStanRules\Rules\NoIssetOnObjectRule
+  - Symplify\PHPStanRules\Rules\NoReferenceRule
 
   # explicit naming
   - Symplify\PHPStanRules\Rules\ForbiddenMultipleClassLikeInOneFileRule
 
-  # comlexity
-  - Symplify\PHPStanRules\Rules\NarrowType\NoReturnFalseInNonBoolClassMethodRule
-
   - Symplify\PHPStanRules\Rules\Complexity\ForbiddenArrayMethodCallRule
   # - Symplify\PHPStanRules\Rules\CheckRequiredInterfaceInContractNamespaceRule
 
@@ -165,8 +154,4 @@ rules:
   - Symplify\PHPStanRules\Rules\NoReturnSetterMethodRule
   - Symplify\PHPStanRules\Rules\UppercaseConstantRule
   - Symplify\PHPStanRules\Rules\ClassNameRespectsParentSuffixRule
-  - Symplify\PHPStanRules\Rules\CheckTypehintCallerTypeRule
   - Symplify\PHPStanRules\Rules\CheckClassNamespaceFollowPsr4Rule
-
-includes:
-  - vendor/symplify/phpstan-rules/config/collector-rules.neon