[dependabot]

Updates the requirements on phpstan/phpstan, phpstan/phpstan-strict-rules, phpstan/phpstan-nette, nepada/phpstan-nette-tester, spaze/phpstan-disallowed-calls and shipmonk/phpstan-rules to permit the latest version.
Updates phpstan/phpstan to 2.3.2

Commits

• See full diff in compare view

Updates phpstan/phpstan-strict-rules to 2.1.0

Release notes

Sourced from phpstan/phpstan-strict-rules's releases.

2.1.0

• 24ec515 - Update github-actions (#334)
• 19b5b5b - Name the node types the arithmetic operand rules want
• 25c1a99 - Merge remote-tracking branch 'origin/2.0.x' into 2.1.x
• aac2457 - Fix build (#336)
• b39a53a - Fix 2.3.x-dev build errors (#335)
• 4908484 - Report loop variable overwrites only for variables still in use
• 9db0b58 - Require PHPStan 2.3.0
• c58b775 - Open 2.1.x-dev
• 3c614d5 - Update github-actions (#331)
• 361d3d0 - Update github-actions (#330)
• 33d4b9e - Update github-actions (#329)
• f504dd3 - Update github-actions (#328)
• b04c8f7 - Update github-actions (#326)

Commits

• 24ec515 Update github-actions (#334)
• 19b5b5b Name the node types the arithmetic operand rules want
• 25c1a99 Merge remote-tracking branch 'origin/2.0.x' into 2.1.x
• aac2457 Fix build (#336)
• b39a53a Fix 2.3.x-dev build errors (#335)
• 4908484 Report loop variable overwrites only for variables still in use
• 9db0b58 Require PHPStan 2.3.0
• c58b775 Open 2.1.x-dev
• 3c614d5 Update github-actions (#331)
• 361d3d0 Update github-actions (#330)
• Additional commits viewable in compare view

Updates phpstan/phpstan-nette to 2.0.15

Release notes

Sourced from phpstan/phpstan-nette's releases.

2.0.15

• b108419 - Declare ArrayHash offset methods in the stub
• fbad840 - Detect getIterator() return type of ArrayHash by reflection
• b2ec94f - Update github-actions (#226)

Commits

• b108419 Declare ArrayHash offset methods in the stub
• fbad840 Detect getIterator() return type of ArrayHash by reflection
• b2ec94f Update github-actions (#226)
• a524f3d Make ArrayHash stub generic (#225)
• 7e40d51 Keep extensions for PHPDoc that states just object|array
• d327469 Do not override getValues() return type described in PHPDoc
• d85231c Update cbrgm/mastodon-github-action action to v2.2.5 (#223)
• 454ce52 Update github-actions (#221)
• 6913a02 Use stricter assertions in tests (#222)
• be1b54a Fix nette build (#220)
• Additional commits viewable in compare view

Updates nepada/phpstan-nette-tester to 2.1.2

Release notes

Sourced from nepada/phpstan-nette-tester's releases.

2.1.2

• Fix crash on Assert::type() with empty string
• Fix Assert::type() with fully qualified class name string
• Mark Tester\Environment::skip() as early terminating call
• PHP 8.6 support

Commits

• 5c2f8f7 Fix early terminating calls test on PHPStan < 2.2.7
• 3ec56e0 Run CI against PHP 8.6
• 03fb254 Allow PHP 8.6
• c8f1e8f Mark Tester\Environment::skip() as early terminating call
• 4579a29 Update README for PHPStan 2 always-true reporting
• 23f73d6 Fix Assert::type() with fully qualified class name string
• b0a65e5 Fix crash on Assert::type() with empty string
• 6293b6d typo
• b54f19a Update phpstan/phpstan-phpunit requirement (#111)
• 2ef57b4 Add support for Assert::hasKey() and Assert::hasNotKey()
• Additional commits viewable in compare view

Updates spaze/phpstan-disallowed-calls to 4.15.0

Release notes

Sourced from spaze/phpstan-disallowed-calls's releases.

More class usages reported and labelled by what they are, property hook fixes

New

• More usages of classes, interfaces, enums and traits disallowed with disallowedClasses or disallowedNamespaces are reported: instanceof, first-class callables like Foo::bar(...), DNF types like (A&B)|null, types of class constants, and interfaces extended by interfaces or implemented by enums (#444)
• Disallowed names are labelled by what they are, Class, Interface (with the new disallowed.interface identifier), Enum or Trait, also in static calls, extends and implements, which said Namespace before; only use imports keep Namespace because they can also import a namespace (#440, #443 - possible BC break)
• Property hooks are treated like methods by the attribute-based directives: an attribute placed on a hook counts as used in the hook, and allowInClassWithMethodAttributes sees attributes on hooks; matching hooks by name like Foo::$bar::get() in allowInMethods is now documented (#441, #445)

Bugfixes

• A disallowed enum case or constant like Suit::Hearts was reported twice, as a class and as an enum, now it's reported once as Enum (#440)
• A disallowed item used in a property hook crashed the analysis with ReflectionException when the config had allowInMethodsWithAttributes, allowExceptInMethodsWithAttributes or their aliases (#441)
• A disallowed item used in a named function declared inside another function or method caused "Reflection error" with the same directives, and the rest of the file wasn't analysed (#442)
• self::, static:: and parent:: calls aren't reported as Namespace self is forbidden. anymore when a wildcard pattern happens to match them (#443)
• str_contains() isn't used anymore, it doesn't exist on PHP 7.4 (#436)

Internal changes

• No errors with PHPStan 2.3, which analyses for the lowest PHP version in composer.json (#439)
• Testing on PHP 8.6 (#438)
• PHPStan1Compatibility renamed to PHPStanCompatibility, because it covers older PHPStan 2.x versions too (#441)
• The e2e workflow follows the moved monorepo dev tools (#437)

Possible BC break note: messages and identifiers changed for static calls, extends and implements (Namespace/disallowed.namespace is now Class, Interface, Enum or Trait), for interfaces and traits anywhere else (Class/disallowed.class is now Interface/disallowed.interface or Trait/disallowed.trait), and for enums in type declarations (Class is now Enum). The duplicate Class error for enum cases and constants is gone. If you match these errors in ignoreErrors or a baseline, they may need updating, and the newly reported usages can add errors.

Commits

• 3880759 Treat property hooks like methods in attribute-based allow directives, docume...
• 0a2d351 Document matching property hooks by name in allowInMethods
• 268b497 Count attributes on property hooks for allowInClassWithMethodAttributes
• 667bd33 Treat attributes placed on property hooks like attributes on methods
• 67c6c2c Report class usages in instanceof, first-class callables, DNF types, typed ...
• 6f05f0d Report class and enum usages in types of class constants
• 92da14a Report class and enum usages in DNF types
• 01b7406 Report class and enum usages in static first-class callables
• 4b65f1b Report interfaces extended by interfaces and implemented by enums
• 8caecae Report class and enum usages in instanceof
• Additional commits viewable in compare view

Updates shipmonk/phpstan-rules to 4.4.1

Release notes

Sourced from shipmonk/phpstan-rules's releases.

4.4.1

Fixes:

• forbidCheckedExceptionInCallable: resolve static call caller type from expressions (#368, @​maryo)
• requirePreviousExceptionPass: accept exception passed to nested call (#369)

Commits

• 67e54e4 RequirePreviousException: accept exception passed to nested call (#369)
• f72b888 ForbidCheckedExceptionInCallable: resolve static call caller type from expres...
• 96b9344 Update coverage-guard, ignore LogicException throws in coverage (#367)
• 15ab1a6 Adopt new shipmonk/coding-standard custom sniffs (#366)
• 67ad42b Add MIT license file (#365)
• 9b87e45 Use never return type in ThrowingSourceLocator (#363)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions