TECH Bump vimeo/psalm from 5.25.0 to 5.26.0

[dependabot[bot]]

Bumps vimeo/psalm from 5.25.0 to 5.26.0.

Release notes

Sourced from vimeo/psalm's releases.

5.26.0

What's Changed

Features

• Add mysqli.execute-query as sink for TaintedSql by @​cgocast in vimeo/psalm#11021
• Add TaintedCallable sinks for 4 core generic functions by @​cgocast in vimeo/psalm#11090
• Improve mysql fetch_field* return type by @​MoonE in vimeo/psalm#11009
• Check for psalm.dist.xml as well by @​HypeMC in vimeo/psalm#11031

Fixes

• Change ReflectionParameter::getName() result type to non-empty-string by @​vjik in vimeo/psalm#11037
• Fix mysqli_real_escape_string stub by @​kamil-tekiela in vimeo/psalm#11078
• Fix mysqli_get_client_version by @​kamil-tekiela in vimeo/psalm#11074
• Up the minimum required version of nikic/php-parser to 4.17 by @​chesn0k in vimeo/psalm#10968
• Fix callable/lowercase strings coercion by @​weirdan in vimeo/psalm#11091
• Consistently emit issues for properties on classes with unknown mixins by @​issidorov in vimeo/psalm#11081

New Contributors

• @​chesn0k made their first contribution in vimeo/psalm#10968

Full Changelog: https://github.com/vimeo/psalm/compare/5.25.0...5.26.0

Commits

• 4787eaf Merge pull request #11081 from issidorov/regression-tests-with-undefined-mixin
• 8b528ad Merge pull request #11091 from weirdan/callable-and-lowercase-strings-are-coe...
• b6cea6e Fix callable/lowercase strings coercion
• 2a64d1c Merge pull request #10968 from chesn0k/chesn0k-patch-1
• 3c13a5b Merge pull request #11031 from HypeMC/check-for-psalm.dist.xml-as-well
• c2bdb40 Merge pull request #11009 from MoonE/mysqli-fetch-field
• 10a987b Merge pull request #11074 from kamil-tekiela/mysqli_get_client_version
• 4324122 Merge pull request #11078 from kamil-tekiela/mysqli_real_escape_string
• 3ff52fb Merge pull request #11090 from cgocast/core_function_sinks
• cf148ac Add TaintedCallable sinks for 4 core generic functions
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sibprogrammer]

@dependabot rebase

[dependabot[bot]]

Superseded by #168.