Bump phpstan/phpstan from 1.7.15 to 1.10.23

dependabot[bot] commented 1 year ago

Bumps phpstan/phpstan from 1.7.15 to 1.10.23.

Release notes

Sourced from phpstan/phpstan's releases.

1.10.23

Improvements 🔧

Fix false positives and false negatives about uninitialized properties (https://github.com/phpstan/phpstan-src/commit/348debc5c3b38c5f40448bae63d76cc99a6baea8), #7198

This leads to uninitialized properties being detected in more places

Lazy initialization of AnalyserResult::$errors (#2400), thanks @takaram!

Check additional assign of promoted readonly property (https://github.com/phpstan/phpstan-src/commit/8fe4401489c58da040889ed18bffda10ba89f05c)

Bugfixes 🐛

Fix readonly property assigned in if-else (https://github.com/phpstan/phpstan-src/commit/ce3c1641926e8abf7ce6dca055717e1657deb792), #6402

Fix ConstantArrayTypeBuilder's isList flag (#2408), thanks @jlherren!

TypeSpecifier - handle AlwaysRememberedExpr in handling Identical (https://github.com/phpstan/phpstan-src/commit/a769a1c90c7d9b051e42225104dbc3c83768a553), #9499

Fix processing traits with renamed methods (https://github.com/phpstan/phpstan-src/commit/c6035f3ca1511332c9fec762135a24f5963dee06), #7198, #6039, #4758

Function signature fixes 🤖

Allow null in mysqli*real_connect arguments (#2508), thanks @staabm!

Internals 🔍

Cheap checks first in IgnoredRegexValidator (#2505), thanks @mad-briller!

Do not use instanceof ThisType as it can be unreliable in case of intersection types (https://github.com/phpstan/phpstan-src/commit/79359450f36c073fa8444a7e87c0e29867f6b4c1)

1.10.22

Bleeding edge 🔪

More precise file() flags args (#2476, #2482), thanks @staabm!

Non-static methods cannot be used as static callables in PHP 8+ (#2420), thanks @staabm!

More precise flock() operation flags (#2477), thanks @staabm!

Rule for call_user_func() (#2479), thanks @staabm!

If you want to see the shape of things to come and adopt bleeding edge features early, you can include this config file in your project's phpstan.neon:
includes:
    - vendor/phpstan/phpstan/conf/bleedingEdge.neon
Of course, there are no backwards compatibility guarantees when you include this file. The behaviour and reported errors can change in minor versions with this file included. Learn more

Improvements 🔧

... (truncated)

Commits

65ab678 PHPStan 1.10.23
048a4e1 Updated PHPStan to commit 048a4e1876bfa1aa27dad0c0ce3a6124d2478b9f
7c846f2 Updated PHPStan to commit 7c846f27a9e78fabca4a6abcf8fdc74f3cf3c742
8339a49 Updated PHPStan to commit 8339a49af65e220022b00830128d202677872210
bed4e30 Updated PHPStan to commit bed4e3073f432e5af3d6d273305372bbfc0ab0cb
bb60882 Updated PHPStan to commit bb608829e419a9b84538c55392662a1b85a019a8
cf2df25 Update PMMP baseline
a7dad28 Updated PHPStan to commit a7dad28b39923ddc90758b4dc55a274b5a201484
c6035f3 Updated PHPStan to commit c6035f3ca1511332c9fec762135a24f5963dee06
fae4e23 Updated PHPStan to commit fae4e23dbbb129cfb11f1ead9008fbffe922fff5
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)