composer(deps-dev): bump the version-updates group with 5 updates

[dependabot]

Updates the requirements on phpstan/phpstan, rector/rector, rector/type-perfect, tomasvotruba/type-coverage and tomasvotruba/unused-public to permit the latest version.
Updates phpstan/phpstan to 1.12.6

Release notes

Sourced from phpstan/phpstan's releases.

1.12.6

Bleeding edge 🔪

• Added absent type checks about @phpstan-assert PHPDoc tags (phpstan/phpstan-src@ca0a7e9), #11780

If you want to see the shape of things to come and adopt bleeding edge features early, you can include this config file in your project's phpstan.neon:

includes:
	- vendor/phpstan/phpstan/conf/bleedingEdge.neon

Of course, there are no backwards compatibility guarantees when you include this file. The behaviour and reported errors can change in minor versions with this file included. Learn more

Improvements 🔧

• Update nikic/php-parser to v4.19.4 (phpstan/phpstan-src@0b9ce98)
• Process ClassConstFetch::$class when it's a Name node (phpstan/phpstan-src@712c33e)
• Process ClassConstFetch::$name (phpstan/phpstan-src@b38c852)
• Fix unused private property is not sometimes detected (#3539), #11802, thanks @​staabm!

Bugfixes 🐛

• Fixes for lowercase-string
  • Keep lowercase when trim (#3491), thanks @​VincentLanglet!
  • Add support for str_repeat and str_pad for lowercase string (#3490), thanks @​VincentLanglet!
  • Update ReplaceFunctionsDynamicReturnTypeExtension for lowercase-string (#3489), thanks @​VincentLanglet!
  • Update parse_str for lowercase string (#3492), thanks @​VincentLanglet!
  • More precise IntegerRangeType::toString() (#3475), thanks @​staabm!
  • Add support for lowercase-string on parse_url() (#3493), thanks @​VincentLanglet!
  • Improve Vsprintf inference (#3496, #3501), thanks @​VincentLanglet!
  • Offset access on lowercase-string is lowercase-string (#3502), thanks @​staabm!
  • IntegerType::toString() is lowercase (#3510), thanks @​VincentLanglet!
  • Handle lowercase string in sprintf (#3498), thanks @​VincentLanglet!
• Update composer/pcre (phpstan/phpstan-src@3cdac94), #11786
• Fix a few regex class parsing usecases (#3488), thanks @​mvorisek!
• Fix preg_match_all with PREG_SET_ORDER does not see capture group as optional (#3506), #11661, thanks @​staabm!
• Fix false-positive with preg_match(): Strict comparison using === between '' and non-falsy-string…ween '' and non-falsy-string (#3509), #11744, thanks @​staabm!

Function signature fixes 🤖

• functionMap: a bit more precise get_defined_constants (#3537), thanks @​janedbal!
• token_name() returns non-empty-string (#3540), thanks @​staabm!

... (truncated)

Commits

• dc4d2f1 PHPStan 1.12.6
• eb6a95a Updated PHPStan to commit eb6a95a9230d9c40e738c92edfef4f89e56678d2
• 7125e1b Updated PHPStan to commit 7125e1ba3d3c474ea8895f57da5865ea42bd8360
• 133c60e Updated PHPStan to commit 133c60e766fd8874254e1889c01cc474f8558d4d
• 83ba597 Updated PHPStan to commit 83ba5972466d0b9bdfa4592996ccf381de625b1f
• 3078f1a Updated PHPStan to commit 3078f1a175d2245aab64f77c8bc5f9fe9cc884f5
• c6db9a9 Updated PHPStan to commit c6db9a920c35493e09458236f18a267a7548fec3
• e2654b7 Updated PHPStan to commit e2654b7dc87951e1481bc46d8f1f7ff587e3f484
• 58b3397 Updated PHPStan to commit 58b33972621d3faf25ac6c7b82b8a6703349b496
• ca0a7e9 Updated PHPStan to commit ca0a7e9955397eef453b38c94ac67ba6faf7356b
• Additional commits viewable in compare view

Updates rector/rector to 1.2.6

Release notes

Sourced from rector/rector's releases.

Released Rector 1.2.6

New Features 🥳

• [TypeDeclaration] Add isset(), empty(), and negation support on BoolReturnTypeFromBooleanStrictReturnsRector (#6339)
• [TypeDeclaration] Add NativeMethodReflection support on ReturnStrictTypeAnalyzer (#6344)
• [DX] Show paths not match any file/directory on ProcessCommand when given path not exists (#6307)

Bugfixes 🐛

• [TypeDeclaration] Convert inline @​var tag to assert() (#6300), Thanks @​carlos-granados!
• Fix incorrect result after using RemoveByType in PhpDocInfo (#6301), Thanks @​carlos-granados!
• [TypeDeclaration] Skip nullable callable on TypedPropertyFromAssignsRector (#6308)
• Fix LocallyCalledStaticMethodToNonStaticRector when static function is called using the class name (#6310), Thanks @​carlos-granados!
• [Php81] Handle crash on ArrowFunction attribute on FirstClassCallableRector (#6313)
• [Performance] Reduce double traverse on StrictNativeFunctionReturnTypeAnalyzer (#6320)
• [PhpParser] Alternative PR for findInstancesOfScoped() to keep existing performance (#6324)
• [CodingStyle] Use double quote to escape quotes in EncapsedStringsToSprintfRector (#6326)
• [TypeDeclaration] Handle crash on func call not found on BoolReturnTypeFromBooleanStrictReturnsRector (#6327)
• Fix first class callable to use combineAcceptors() to avoid assert Arg instance error (#6330)
• [Php81] Allow used as assign expr on ReadOnlyPropertyRector (#6331)
• Skip arrow function in scoped search (#6333)
• [TypeDeclaration] Better approach for native type check on ReturnStrictTypeAnalyzer (#6343)
• [DeadCode] Skip extension load append variable on RemoveAlwaysTrueIfConditionRector (#6332)
• [TypeDeclaration] Remove only void type on ReturnedNodesReturnTypeInfererTypeInferer (#6340)
• [DeadCode] Skip indirect next line definition of @​var on RemoveNonExistingVarAnnotationRector (#6348)

rectorphp/rector-symfony 🎵

• Added return type declaration rules for FormTypeInterface (#670), Thanks @​stollr

rectorphp/rector-phpunit 🟢

• [CodeQuality] Add NarrowSingleWillReturnCallbackRector (#374)
• [CodeQuality] Add SingleWithConsecutiveToWithRector (#370)
• [CodeQuality] Add NarrowIdenticalWithConsecutiveRector (#369)
• [CodeQuality] Add AddParentSetupCallOnSetupRector (#364)
• Include match() to invoke counting in WithConsecutiveRector (#362)
• Move WithConsecutiveRector to its PHPUnit100 namespace, CreateMockToAnonymousClassRector + PreferPHPUnitSelfCallRector to CodeQuality (#360)
• Add existing willReturnCallback() support to WithConsecutiveRector (#358)

Commits

• 6ca85da Rector 1.2.6
• c154424 Updated Rector to commit c0c7502f55a3884f67a5885ed05ae2443ff53802
• 68c7b4d Updated Rector to commit b88e910957a85adafd6fb75fbe50991b9ec871d1
• a3f6293 Updated Rector to commit 0c9edebe4e1ca753d5bbe99e5109378155e87dde
• b555bd2 Updated Rector to commit d17d3e814eada2fa3ada3601034407df01d84568
• cdbdb1b Updated Rector to commit 697b37b340c3b4c73ad6f8e4cea26b7bf60ddf62
• b86f338 Updated Rector to commit a11fc615d18396cef284c18de269711114630676
• a5a5200 Updated Rector to commit 54a66206986e685787d7e038929618a66e98ec42
• 32c2df7 Updated Rector to commit 6b065efef08c34f6e3f69ebd24e24f2418f93007
• 3df699e Updated Rector to commit 6b065efef08c34f6e3f69ebd24e24f2418f93007
• Additional commits viewable in compare view

Updates rector/type-perfect to 1.0.0

Commits

• 827a706 release PHP 7.2 downgraded
• 14689aa Add error identifiers (#43)
• fcb0ea2 Early return Collectors when narrow-param is disabled (#44)
• See full diff in compare view

Updates tomasvotruba/type-coverage to 1.0.0

Commits

• 01498b5 release PHP 7.2 downgraded
• 7c6d267 Update README.md (#43)
• See full diff in compare view

Updates tomasvotruba/unused-public to 1.0.0

Commits

• 8c8a94c release PHP 7.2 downgraded
• c82b690 Reduce memory consumption of collectors (#131)
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
composer/phpstan/phpstan	>= 1.12.6, < 2.0.0	🟢 6.3	Details Check Score Reason Code-Review ⚠️ 0 Found 0/30 approved changesets -- score normalized to 0 Maintained 🟢 10 30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Signed-Releases 🟢 8 5 out of the last 5 releases have a total of 5 signed artifacts. Branch-Protection ⚠️ -1 internal error: error during GetBranch(1.12.x): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration SAST ⚠️ 0 no SAST tool detected Binary-Artifacts 🟢 10 no binaries found in the repo Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow ⚠️ -1 no workflows found Token-Permissions ⚠️ -1 No tokens found Fuzzing ⚠️ 0 project is not fuzzed Vulnerabilities 🟢 10 0 existing vulnerabilities detected Pinned-Dependencies ⚠️ -1 no dependencies found Security-Policy 🟢 10 security policy file detected
composer/rector/rector	>= 1.2.6, < 2.0.0	🟢 4.8	Details Check Score Reason Code-Review ⚠️ 0 Found 0/30 approved changesets -- score normalized to 0 Maintained 🟢 10 30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow ⚠️ -1 no workflows found Token-Permissions ⚠️ -1 No tokens found Security-Policy ⚠️ 0 security policy file not detected Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 no SAST tool detected Binary-Artifacts 🟢 9 binaries present in source code Pinned-Dependencies ⚠️ -1 no dependencies found Vulnerabilities 🟢 10 0 existing vulnerabilities detected
composer/rector/type-perfect	>= 1.0.0, < 2.0.0	Unknown	Unknown
composer/tomasvotruba/type-coverage	>= 1.0.0, < 2.0.0	Unknown	Unknown
composer/tomasvotruba/unused-public	>= 1.0.0, < 2.0.0	Unknown	Unknown

Scanned Manifest Files

composer.json

• phpstan/phpstan@>= 1.12.6, < 2.0.0
• rector/rector@>= 1.2.6, < 2.0.0
• rector/type-perfect@>= 1.0.0, < 2.0.0
• tomasvotruba/type-coverage@>= 1.0.0, < 2.0.0
• tomasvotruba/unused-public@>= 1.0.0, < 2.0.0
• phpstan/phpstan@>= 1.12.5, < 2.0.0
• rector/rector@>= 1.2.5, < 2.0.0
• rector/type-perfect@>= 0.2.0, < 0.3.0
• tomasvotruba/type-coverage@>= 0.3.1, < 0.4.0
• tomasvotruba/unused-public@>= 0.4.0, < 0.5.0

[codeclimate]

Code Climate has analyzed commit 107511f and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 100.0% (0.0% change).

View more on Code Climate.