composer(deps-dev): bump the minor-patch-dependencies group with 6 updates

[dependabot]

Updates the requirements on infection/infection, mimmi20/coding-standard, phpstan/phpstan, phpstan/phpstan-phpunit, phpunit/phpunit and rector/rector to permit the latest version.
Updates infection/infection to 0.27.4

Release notes

Sourced from infection/infection's releases.

Allow missing elements when destructuring arrays in foreach loops

Fixed:

• Allow missing elements when destructuring arrays in foreach loops by @​MidnightDesign in infection/infection#1880

Full Changelog: infection/infection@0.27.3...0.27.4

Commits

• 2789fdd Allow missing elements when destructuring arrays in foreach loops (#1880)
• 3dc7cce Update CHANGELOG.md
• See full diff in compare view

Updates mimmi20/coding-standard to 5.1.20

Commits

• d5fc9e7 Merge pull request #391 from mimmi20/dependabot/composer/master/friendsofphp/...
• b9ce481 composer(deps): update friendsofphp/php-cs-fixer requirement
• 547c5b8 Merge pull request #390 from mimmi20/dependabot/composer/master/minor-patch-d...
• 61f011f composer(deps-dev): bump the minor-patch-dependencies group with 1 update
• See full diff in compare view

Updates phpstan/phpstan to 1.10.38

Release notes

Sourced from phpstan/phpstan's releases.

1.10.38

Improvements 🔧

• Remove function signatures that were removed in PHP 8.0 (#2662), #9954, thanks @​Th3Cod3!

Bugfixes 🐛

• Update BetterReflection
  • Fix for non-backed enums (ondrejmirtes/BetterReflection@4dd0f2b)
• Do not invalidate types passed by value (phpstan/phpstan-src@0b8dca7), Conditionally defined variable - Variable might not be defined. phpstan/phpstan#9927
• Do not influence types of arguments before the function is called (phpstan/phpstan-src@c45d42d)
• Fixed collapsing of constant arrays (phpstan/phpstan-src@746de74), #9985

Internals 🔍

• Lazier type-resolving in isset checks (#2664), thanks @​staabm!
• Refactor to invalidate args inside processArgs (phpstan/phpstan-src@52eb6f8)
• Merge array types a bit later (phpstan/phpstan-src@adbc35a)

Commits

• 5302bb4 PHPStan 1.10.38
• e16a86d Update baselines
• adbc35a Updated PHPStan to commit adbc35a1c72585df4586131f8e99b882bb64677d
• 6348cc3 Updated PHPStan to commit 6348cc3ae8001fd3e2b1ef84f151fe4311e61487
• c45d42d Updated PHPStan to commit c45d42dd1d031016668099957d2b77706f208d67
• 0b8dca7 Updated PHPStan to commit 0b8dca74e5345244a955535b54e9874beae76713
• 205928f Updated PHPStan to commit 205928f62839de533d6840f2d3b82387db7a3c8b
• e242091 Updated PHPStan to commit e24209132c94f496b11c79bbb8ce5c6e283c0c7e
• 885d7e9 Updated PHPStan to commit 885d7e977ed43ac854ecfe980afd34bc277eb6f7
• 5e9c916 Updated PHPStan to commit 5e9c916bf810c2479b2af74b42f15edc566d33e8
• Additional commits viewable in compare view

Updates phpstan/phpstan-phpunit to 1.3.15

Release notes

Sourced from phpstan/phpstan-phpunit's releases.

1.3.15

• 70ecacc - AssertTypeSpecifyingExtensionHelper: rootExpr with unknown variable to avoid always-true false positives (#197)

Commits

• 70ecacc AssertTypeSpecifyingExtensionHelper: rootExpr with unknown variable to avoid ...
• See full diff in compare view

Updates phpunit/phpunit to 10.4.1

Changelog

Sourced from phpunit/phpunit's changelog.

10.4.1 - 2023-10-08

Fixed

• #5534: Cache for generated Test Double code was not updated for Test Stub and Mock Object distinction

10.4.0 - 2023-10-06

Added

• #5441: Baseline for E_(USER_)DEPRECATED, E_(USER_)NOTICE, E_STRICT, and E_(USER_)WARNING
• #5462: Support for multiple arguments
• #5471: assertFileMatchesFormat() and assertFileMatchesFormatFile()
• #5515: PHPUnit\Runner\Extension\Facade::requireExportOfObjects() so that test runner extensions can indicate that they require the export of objects for events such as Test\AssertionSucceeded and Test\AssertionFailed
• Test\PreparationFailed event
• Attribute id attribute for testCaseMethod elements in the XML document generated by --list-tests-xml

Changed

• #5505: Improve the failure description of StringContains-based assertions when the strings are encoded differently
• #5515: The Test\AssertionSucceeded and Test\AssertionFailed events are always emitted again
• #5515: --log-events-verbose-text enables the export of non-scalar values for the Test\AssertionSucceeded and Test\AssertionFailed events
• #5524: Do not export data passed to test for PHPUnit\Event\Code\TestMethod value object by default
• #5526: Do not limit number of columns to 80 on non-interactive TTY
• Exceptions thrown by third-party event subscribers are now reported as test runner warnings
• The name of the top-level test suite that is created when a directory or file path is passed as an argument to the test runner is now CLI Arguments
• Simplified the failure description for assertInstanceOf() and assertNotInstanceOf()
• Simplified the failure description for assertJson()
• The --enforce-time-limit CLI option and the enforceTimeLimit XML configuration file attribute no longer affect the running of PHPT tests
• The @codeCoverageIgnore, @codeCoverageIgnoreStart, and @codeCoverageIgnoreEnd annotations are no longer deprecated

Deprecated

• #5472: TestCase::assertStringNotMatchesFormat() and TestCase::assertStringNotMatchesFormatFile() (these methods only have a @deprecated annotation for now; using these methods will trigger a deprecation warning in PHPUnit 11; these methods will be removed in PHPUnit 12)
• #5481: dataSet attribute for testCaseMethod elements in the XML document generated by --list-tests-xml (the attribute will not be generated anymore starting with PHPUnit 11)
• #5513: IgnoreClassForCodeCoverage, IgnoreMethodForCodeCoverage, and IgnoreFunctionForCodeCoverage attributes (these attributes will be removed in PHPUnit 11)
• PHPUnit\TextUI\Configuration\Configuration::cliArgument() and PHPUnit\TextUI\Configuration\Configuration::hasCliArgument()
• PHPUnit\Framework\Constraint\Constraint::exporter()

Commits

• 62bd7af Prepare release
• afd049d Closes #5534
• c256f15 Merge branch '9.6' into 10.4
• 18a76cf Merge branch '8.5' into 9.6
• ad6fa5f Update tools
• 9784e87 Prepare release
• 0ebfdd8 Merge branch '10.3'
• dae56ef Merge branch '9.6' into 10.3
• 8f609fc Merge branch '8.5' into 9.6
• 3104183 Add note about API changes in internal code
• Additional commits viewable in compare view

Updates rector/rector to 0.18.5

Release notes

Sourced from rector/rector's releases.

Released Rector 0.18.5

New Features and Improvements 🥳

• [build] Remove duplicated phpstan/phpstan from the build, as require by build package in composer.json already (rectorphp/rector-src@51ed7b6)
• AddParamTypeBasedOnPHPUnitDataProviderRector: Check all data providers (#5068), Thanks @​jlherren!
• AddParamTypeBasedOnPHPUnitDataProviderRector: Enhance existing rule to handle PHPUnit 10+ DataProvider Attribute (#4925), Thanks @​mcampbell508!
• make PhpDocInfo::findByAnnotationClass() public to use in Symfony rules (#5103)

Bugfixes 🐛

• Feature/fix class annotation bad print (#5081), Thanks @​etshy!
• [Performance] Avoid ReflectionProvider check function exists on NameImportingPostRector (#5083)
• InlineConstructorDefaultToPropertyRector Readonly Class (#5085), Thanks @​beschoenen!
• [CodeQuality] Handle crash on variable variable on assign closure on OptionalParametersAfterRequiredRector (#5089)
• [NodeTypeResolver] Use isScalar()->yes() usage on StaticTypeAnalyzer and ScalarTypeComparator services (#5099)
• [ProcessAnalyzer] Ensure instanceof Stmt on check infinite loop on not yet has "created_by_rule" attribute (#5100)
• [DX] Rename shouldImportName() to shouldSkipName() on ClassNameImportSkipper (#5107)
• The ReturnTypeFromReturnNewRector must only handle new instances, to avoid leaking to everything (#5115)
• [Php80] Skip when already implements Stringable and has string return type on StringableForToStringRector (#5120)

Removed and Deprecated 💀

• [DX] Remove CurrentFileProvider dependency on ChangedNodeScopeRefresher (#5087)
• [DX] Remove DependencyClassMethodDecorator as not used anymore due to paralel nature (#5094)
• [PostRector] Remove CurrentFileProvider on PostFileProcessor (#5097)
• [Comments] Remove unused copy Node object on CommentRemover (#5103)
• [Performance][AutoImport] Remove just renamed check on ClassNameImportSkipper (#5106)
• Deprecate CountOnNullRector as depends on previous context and require manual adjustment of previous result (#5101)

Commits

• 2a3b82f Rector 0.18.5
• 90920e0 Updated Rector to commit 6aed089476ea0167835fbbdb42d876cddb4c77d4
• b1fd9df Updated Rector to commit 319e9f0694be4026734c932a3b6b8c31debdb0f8
• 9696ef6 Updated Rector to commit a6732a5b0e80868a6542c9bd5443f27750577e64
• a40e240 Updated Rector to commit a0f2f32c7970d925681fc4cec64efa1ee90b6ea8
• 1c164a6 Updated Rector to commit 8cab945ae45b651cdf66c8bfbb1603c514733896
• 68e7483 Updated Rector to commit fe2c85cde9f06c2ccb0e6e7bbbb24f8def25efa9
• b9cc02d Updated Rector to commit a24035cbbd7d86e6a45a025d60ebede4e00333f8
• 489d95e Updated Rector to commit b491f42c2acd125671c7908a3dacd86316048809
• dfbbc51 Updated Rector to commit 4e56b7c4a9fa9747cb12025c94e07b85a30155bc
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Manifest Files

composer.json

• infection/infection@>= 0.27.4, < 0.28.0
• mimmi20/coding-standard@>= 5.1.20, < 6.0.0
• phpstan/phpstan@>= 1.10.38, < 2.0.0
• phpstan/phpstan-phpunit@>= 1.3.15, < 2.0.0
• phpunit/phpunit@>= 10.4.1, < 11.0.0
• rector/rector@>= 0.18.5, < 0.19.0
• infection/infection@>= 0.27.3, < 0.28.0
• mimmi20/coding-standard@>= 5.1.19, < 6.0.0
• phpstan/phpstan@>= 1.10.37, < 2.0.0
• phpstan/phpstan-phpunit@>= 1.3.14, < 2.0.0
• phpunit/phpunit@>= 10.3.5, < 11.0.0
• rector/rector@>= 0.18.4, < 0.19.0

[dependabot]

Superseded by #558.