build: bump vimeo/psalm from 5.19.0 to 5.23.1

[dependabot[bot]]

Bumps vimeo/psalm from 5.19.0 to 5.23.1.

Release notes

Sourced from vimeo/psalm's releases.

5.23.1

What's Changed

Fixes

• Fixed analysis of existing static methods if the __callStatic() method exists by @​issidorov in vimeo/psalm#10812

Full Changelog: https://github.com/vimeo/psalm/compare/5.23.0...5.23.1

5.23.0

What's Changed

Features

• Update PHP 8.2 stubs to include SensitiveParameterValue by @​gsteel in vimeo/psalm#10726
• Add list of statements to BeforeFileAnalysisEvent by @​ohader in vimeo/psalm#10728
• Forbid iterating over generators with non-nullable send() by @​weirdan in vimeo/psalm#10697
• Initial support for named parameters for callables by @​weirdan in vimeo/psalm#10772

Fixes

• Improve randomizer stubs by @​danog in vimeo/psalm#10709
• Fix detecting magic static methods by @​issidorov in vimeo/psalm#10704
• Fix non-empty-lowercase-string handling with literal non-lowercase strings by @​kkmuffme in vimeo/psalm#10722
• Fix RiskyTruthyFalsyComparison irrelevant errors when there is no explicit truthy/falsy type by @​kkmuffme in vimeo/psalm#10733
• Allow Override attribute to be used in pure contexts by @​weirdan in vimeo/psalm#10734
• Revert "Allow tainted numerics except for 'html' and 'has_quotes'" by @​ohader in vimeo/psalm#10729
• Fix loading stubs from phar file on Windows by @​weirdan in vimeo/psalm#10748
• Fix a false flag issue with InvalidConstantAssignmentValue by @​MelechMizrachi in vimeo/psalm#10738
• Set inside_isset false when analyzing ArrayDimFetch index by @​edsrzf in vimeo/psalm#10752
• Set inside_isset = false when analyzing arguments by @​edsrzf in vimeo/psalm#10753
• Fix PHP notice - crash on invalid taint-escape by @​kkmuffme in vimeo/psalm#10760
• Fix version comparison for @since by @​weirdan in vimeo/psalm#10764
• Since annotations outside phpstub should not infer php version by @​kkmuffme in vimeo/psalm#10769
• Backport WeakMap iterator fix from master by @​weirdan in vimeo/psalm#10778
• Namespace anonymous classes by @​weirdan in vimeo/psalm#10779
• Update CallMap for sqlsrv_connect and sqlsrv_errors to match reflection by @​theodorejb in vimeo/psalm#10781
• $resource parameter of mkdir() is nullable since PHP 7.3 by @​weirdan in vimeo/psalm#10802
• Use wider class-string when combining class strings with intersections by @​weirdan in vimeo/psalm#10800

Internal changes

• Use TaintKind/TaintKindGroup constants instead of string values by @​ohader in vimeo/psalm#10746
• Skip symlink test on Windows by @​weirdan in vimeo/psalm#10749
• Avoid duplicating code for RiskyTruthyFalsyComparison by @​theodorejb in vimeo/psalm#10765
• fix PHP 8 tests running with wrong --php-version=/phpVersion= if not explicitly specified by @​kkmuffme in vimeo/psalm#10776
• CS fix by @​weirdan in vimeo/psalm#10801

New Contributors

• @​MelechMizrachi made their first contribution in vimeo/psalm#10738

Full Changelog: https://github.com/vimeo/psalm/compare/5.22.2...5.23.0

... (truncated)

Commits

• 8471a89 Merge pull request #10812 from issidorov/bug-10807
• fe42e88 Resolve fail test #10807
• 2a91bd6 Added test for #10807
• 005e318 Merge pull request #10800 from weirdan/10799-use-wider-classstring
• 739d87d Use wider class-string when combining class strings with intersections
• 87f7101 Merge pull request #10802 from weirdan/10796-nullable-resource-for-mkdir
• 5c780c7 $resource parameter of mkdir() is nullable since PHP 7.3
• 02b58a5 Merge pull request #10801 from weirdan/fix-trailing-commas-after-anon-functions
• 8e1aa46 CS fix
• dca888c Merge pull request #10781 from theodorejb/fix-sqlsrv-callmap
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot[bot]]

Superseded by #371.