deps: bump the phpstan group in /dev-tools with 4 updates #8890

dependabot · 2025-07-25T10:48:17Z

Bumps the phpstan group in /dev-tools with 4 updates: phpstan/phpstan, phpstan/phpstan-phpunit, phpstan/phpstan-strict-rules and phpstan/phpstan-symfony.

Updates phpstan/phpstan from 2.1.18 to 2.1.19

Release notes

Sourced from phpstan/phpstan's releases.

2.1.19

Improvements 🔧

Remove manual wrapping for error table (#4035), thanks @schlndh!

Improve array_search inference (#4014), thanks @VincentLanglet!

Improve str_split() return type (#3999), thanks @VincentLanglet!

Detect more duplicate array keys (#4116), thanks @VincentLanglet!

Add support for multiple identifiers in ignoreErrors configuration (#4080), thanks @janedbal!

Fix missing detection of dead code in expressions (#4090), #13232, #11909, thanks @staabm!

Bugfixes 🐛

Fix IntersectionType::isIterableOnce() (#4106), #13248, thanks @VincentLanglet!

Fix false positive unreachable (#4112), #7531, thanks @VincentLanglet!

Improve array filter return type on PHP 8 (#4123), #12689, thanks @VincentLanglet!

Fix analysis on array_map with named arguments (#3763), #12317, thanks @takaram!

Fix ObjectType::getOffsetValueType() (#4126), #12125, #9575, #9456, #13144, thanks @VincentLanglet!

Fix for respecting rule levels for property.nameNotString (#4117), #13271

Improve trim on numeric string (#4130), #10860, thanks @VincentLanglet!

Fix intersection with substracted (#4132), thanks @VincentLanglet!

Understand at least one argument for non empty array unpacked (#4134), #10020, #8506, thanks @VincentLanglet!

Handle empty array case via ConstantArrayType::spliceArray() (#4140), #13279, thanks @herndlm!

Fix lowercase string usage in template (#4122), #12739, thanks @VincentLanglet!

Fix "Unsafe use of new static when trait enforces constructor via abstract method" (#4114), #9654, thanks @VincentLanglet!

Nothing is lower than null (#4131), #10719, #9141, thanks @VincentLanglet!

Hotfix - allow people to override exceptionTypeResolver in neon (phpstan/phpstan-src@e7febc3)

Function signature fixes 🤖

Improve sys_getloadavg return type (#4107), #13198, thanks @VincentLanglet!

Fix PDO quote return type (#4113), #10512, thanks @VincentLanglet!

Fix pg_lo_import definition (#4120), thanks @VincentLanglet!

Update eio function return type (#4124), thanks @VincentLanglet!

Update stream_filter_* signatures (#4125), #12380, thanks @VincentLanglet!

Update DomNode return type (#4137), thanks @VincentLanglet!

Update Spl methods with side effects (#4129), #10884, #9180, thanks @VincentLanglet!

Fix odbc definitions (#4119), thanks @VincentLanglet!

Internals 🔍

Added regression test (#4105), #8372, thanks @staabm!

Added regression test (#4109), #13043, thanks @VincentLanglet!

Add regression tests for strict rules issues (#4110), phpstan/phpstan-strict-rules#147, phpstan/phpstan-strict-rules#143, thanks @VincentLanglet!

... (truncated)

Commits

473a8c3 PHPStan 2.1.19
e7febc3 Updated PHPStan to commit e7febc360c027957945e1e8667b412952d0bca12
09e30b4 Updated PHPStan to commit 09e30b46b69d7e0f75ed99f0d192e310324796b4
0c32152 Updated PHPStan to commit 0c32152281ff5cf453ad1fdf0549a282713bb12a
e75e1a1 Update errors identifiers
89d0610 Updated PHPStan to commit 89d0610b26d21c07e06526e585bd9aea638582bc
9efaaee ignoring-errors: mention multiple identifiers in config
8e8eca7 Updated PHPStan to commit 8e8eca7178458ec2ecd1133debd96befa8efa574
f229935 Update errors identifiers
d066898 Updated PHPStan to commit d06689850bf2541b9933ab4b21bcddd11c15998a
Additional commits viewable in compare view

Updates phpstan/phpstan-phpunit from 2.0.6 to 2.0.7

Release notes

Sourced from phpstan/phpstan-phpunit's releases.

2.0.7

9a9b161 - Make AssertEqualsIsDiscouragedRule auto-fixable

2e07610 - Check isFirstClassCallable before accessing getArgs

22c6949 - Make phpunit.dataProviderStatic auto-fixable

d35895e - chore(deps): update metcalfc/changelog-generator action to v4.6.2

Commits

9a9b161 Make AssertEqualsIsDiscouragedRule auto-fixable
2e07610 Check isFirstClassCallable before accessing getArgs
22c6949 Make phpunit.dataProviderStatic auto-fixable
d35895e chore(deps): update metcalfc/changelog-generator action to v4.6.2
See full diff in compare view

Updates phpstan/phpstan-strict-rules from 2.0.4 to 2.0.6

Release notes

Sourced from phpstan/phpstan-strict-rules's releases.

2.0.6

f9f77ef - Add numeric check on unary plus and unary minus

2.0.5

1f1358d - UselessCastRule: do cheaper check first

73c5baa - Update metcalfc/changelog-generator action to v4.6.2

f203fec - Match Rule Descriptions with Configuration Parameters in README.md

3ecc310 - Use relative links for rules.neon

04f299f - Update metcalfc/changelog-generator action to v4.5.0

Commits

f9f77ef Add numeric check on unary plus and unary minus
1f1358d UselessCastRule: do cheaper check first
73c5baa Update metcalfc/changelog-generator action to v4.6.2
f203fec Match Rule Descriptions with Configuration Parameters in README.md
3ecc310 Use relative links for rules.neon
04f299f Update metcalfc/changelog-generator action to v4.5.0
See full diff in compare view

Updates phpstan/phpstan-symfony from 2.0.6 to 2.0.7

Release notes

Sourced from phpstan/phpstan-symfony's releases.

2.0.7

392f7ab - fix: Improve ParameterBag stub

9c272bd - Add PropertyAccessor stub file alongside PropertyAccessorInterface

Commits

392f7ab fix: Improve ParameterBag stub
9c272bd Add PropertyAccessor stub file alongside PropertyAccessorInterface
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the phpstan group in /dev-tools with 4 updates: [phpstan/phpstan](https://github.com/phpstan/phpstan), [phpstan/phpstan-phpunit](https://github.com/phpstan/phpstan-phpunit), [phpstan/phpstan-strict-rules](https://github.com/phpstan/phpstan-strict-rules) and [phpstan/phpstan-symfony](https://github.com/phpstan/phpstan-symfony). Updates `phpstan/phpstan` from 2.1.18 to 2.1.19 - [Release notes](https://github.com/phpstan/phpstan/releases) - [Changelog](https://github.com/phpstan/phpstan/blob/2.1.x/CHANGELOG.md) - [Commits](phpstan/phpstan@2.1.18...2.1.19) Updates `phpstan/phpstan-phpunit` from 2.0.6 to 2.0.7 - [Release notes](https://github.com/phpstan/phpstan-phpunit/releases) - [Commits](phpstan/phpstan-phpunit@2.0.6...2.0.7) Updates `phpstan/phpstan-strict-rules` from 2.0.4 to 2.0.6 - [Release notes](https://github.com/phpstan/phpstan-strict-rules/releases) - [Commits](phpstan/phpstan-strict-rules@2.0.4...2.0.6) Updates `phpstan/phpstan-symfony` from 2.0.6 to 2.0.7 - [Release notes](https://github.com/phpstan/phpstan-symfony/releases) - [Commits](phpstan/phpstan-symfony@2.0.6...2.0.7) --- updated-dependencies: - dependency-name: phpstan/phpstan dependency-version: 2.1.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: phpstan - dependency-name: phpstan/phpstan-phpunit dependency-version: 2.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: phpstan - dependency-name: phpstan/phpstan-strict-rules dependency-version: 2.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: phpstan - dependency-name: phpstan/phpstan-symfony dependency-version: 2.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: phpstan ... Signed-off-by: dependabot[bot] <support@github.com>

coveralls · 2025-07-25T10:56:51Z

coverage: 94.728%. remained the same
when pulling 5402051 on dependabot/composer/dev-tools/phpstan-29ec82902b
into ca3f4cb on master.

dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Jul 25, 2025

update lock file

3d392c1

kick CI

802a2cd

keradus approved these changes Jul 25, 2025

View reviewed changes

update baseline

5402051

keradus enabled auto-merge (squash) July 25, 2025 14:39

keradus merged commit 6f0c66d into master Jul 25, 2025
58 of 59 checks passed

keradus deleted the dependabot/composer/dev-tools/phpstan-29ec82902b branch July 25, 2025 15:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

deps: bump the phpstan group in /dev-tools with 4 updates #8890

deps: bump the phpstan group in /dev-tools with 4 updates #8890

Uh oh!

dependabot bot commented on behalf of github Jul 25, 2025

Uh oh!

coveralls commented Jul 25, 2025 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

deps: bump the phpstan group in /dev-tools with 4 updates #8890

deps: bump the phpstan group in /dev-tools with 4 updates #8890

Uh oh!

Conversation

dependabot bot commented on behalf of github Jul 25, 2025

2.1.19

Improvements 🔧

Bugfixes 🐛

Function signature fixes 🤖

Internals 🔍

2.0.7

2.0.6

2.0.5

2.0.7

Uh oh!

coveralls commented Jul 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

coveralls commented Jul 25, 2025 •

edited

Loading