Update vimeo/psalm requirement from ^3.14 to ^4.1

[dependabot[bot]]

Updates the requirements on vimeo/psalm to permit the latest version.

Release notes

Sourced from vimeo/psalm's releases.

Support PHP 8 Attributes

Features

This adds basic support for PHP 8 attributes (#4367). Psalm checks attribute arguments, and also emits a UndefinedAttributeClass issue if the attribute cannot be found.

This version of Psalm can also be installed when using PHP 8.

Bugfixes

• class getIterator calls are used inside loops (#3625)
• allow Psalm to understand more assignments when evaluating implicit else (#4374)
• promoted properties are always used in the constructor (#4386)
• arraylike-object should be Countable too (#4398)
• signature types (return & param types) weren't being invalidated when their use changed, now they are
• allow multiple @psalm-assert-if-true on a single variable (#4414)
• uses better path normalisation when resolveFromConfig="true" so that existing baselines need only small adjustments (#4410)
• @BenMorel improved some ext-ds stubs (#4415)
• allow implicit null->offsetGet() inside an isset call (#4397)
• fix try analysis on assigned vars when they're typed to mixed (#4418)
• any class with a __toString method in PHP 8 is assumed to implement Stringable (#4429)
• fix crash when encountering no-argument str_replace, DOMNode::appendChild, crypt, get_class_methods, iterator_to_array, get_object_vars calls
• prevent unused variable false-positive when (bool) or (float) casts are used (#4435)
• @enumag improved ext-ds stubs with immutable data structures (#4425)

Commits

• 8929bde Add psalm-mutation-free to ext-ds (#4425)
• 4bb675e Pass CodeLocation to FunctionParamsProviderInterface interface (#4444)
• 82f35c1 Ensure Stringable is always available to tests that need it
• 438bcc6 Use softer return
• 2e95d1f Use more robust check for Stringable stub
• 5c784dc Fix #4435 - ensure casts are always flow-sensitive
• fce5c26 Remove subpar test
• dab1aac Protect more calls
• f43dba8 Use more accurate comparison for non-empty-lists
• 083102a Fix count call
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @lptn.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)