build: bump vimeo/psalm from 5.15.0 to 5.17.0

[dependabot[bot]]

Bumps vimeo/psalm from 5.15.0 to 5.17.0.

Release notes

Sourced from vimeo/psalm's releases.

5.17.0

What's Changed

Features

• Implement by-ref closure use analysis by @​danog in vimeo/psalm#10419

Fixes

• Update MongoDB stubs for 1.17 by @​alcaeus in vimeo/psalm#10402
• Fix backtick analysis by @​danog in vimeo/psalm#10409
• Declare we do not support document highlighting by @​tm1000 in vimeo/psalm#10408
• update define types to be correct by @​kkmuffme in vimeo/psalm#10423
• Fix return type of DOMXPath::query by @​nielsdos in vimeo/psalm#10443
• Fix CLI -r error by @​kkmuffme in vimeo/psalm#10442
• Use correct file path while adding unused suppressions for virtual __… by @​danog in vimeo/psalm#10434
• Restore support for null coalesce on match expressions by @​tscni in vimeo/psalm#10422
• Fix static magic method pureness not being inherited from traits by @​tscni in vimeo/psalm#10429
• Fix POSIX only detection of absolute paths by @​rarila in vimeo/psalm#10441
• Emit UnusedPsalmSuppress issues for suppressed issues already removed by @​danog in vimeo/psalm#10431
• Use keyed arrays when assigning literal union keys & assertion fixes by @​danog in vimeo/psalm#10439

Internal changes

• use branch name to randomize tests to ensure test dependencies will error by @​kkmuffme in vimeo/psalm#10424

New Contributors

• @​nielsdos made their first contribution in vimeo/psalm#10443

Full Changelog: https://github.com/vimeo/psalm/compare/5.16.0...5.17.0

5.16.0

What's Changed

Features

• Show success message and type stats with GHA formatter by @​weirdan in vimeo/psalm#10145
• New sinks for TaintedCallable #10117 by @​cgocast in vimeo/psalm#10154
• Properly inherit assertions from parents or implemented faces by @​boesing in vimeo/psalm#10157
• Flag invalid declares by @​weirdan in vimeo/psalm#10176
• Narrow ArrayObject TKey template by @​boesing in vimeo/psalm#10190
• Allow object assertions for mixed values by @​boesing in vimeo/psalm#10207
• Issue handlers priority by @​gmessier in vimeo/psalm#10202
• Check for declare strict_types in block mode by @​tuqqu in vimeo/psalm#10234
• feat(LSP): Improve the autocomplete for nested array shape by @​ging-dev in vimeo/psalm#10230
• Add alias support to psalm-check-type by @​robchett in vimeo/psalm#10264
• Allow parameter names in callable docblocks with templates by @​robchett in vimeo/psalm#10261
• Disallow never type for parameters by @​tuqqu in vimeo/psalm#10266
• Fix auto completion by partial property or method by @​issidorov in vimeo/psalm#10320
• Add stubs for rdKafka by @​robchett in vimeo/psalm#10351
• Suppressing NoValue should not treat subsequent code as unevaluated by @​kkmuffme in vimeo/psalm#10303
• Fix misc callable bugs by @​kkmuffme in vimeo/psalm#10370

Fixes

• Added more gc_status return fields by @​weirdan in vimeo/psalm#10138

... (truncated)

Commits

• c620f6e Merge pull request #10439 from nicelocal/fix_literal_union_key
• 390df68 Merge branch '5.x' into fix_literal_union_key
• 1cca558 Merge pull request #10419 from nicelocal/byref_closure_use
• 37cf82e Merge branch '5.x' into fix_literal_union_key
• 75633cb Merge remote-tracking branch 'hub/5.x' into byref_closure_use
• 62f32f4 Merge pull request #10431 from nicelocal/fix_unused_psalm_suppress
• a2d89d0 Fixup
• eb54624 Fixup
• 18a6c0b Implement by-ref closure use analysis
• de53638 Fixes
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #321.