Skip to content

[Dependabot] Update spaze/phpstan-disallowed-calls requirement from 4.14.0 to 4.15.0 - #2410

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/composer/spaze/phpstan-disallowed-calls-4.15.0
Oct 16, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/composer/spaze/phpstan-disallowed-calls-4.15.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on spaze/phpstan-disallowed-calls to permit the latest version.

Release notes

Sourced from spaze/phpstan-disallowed-calls's releases.

More class usages reported and labelled by what they are, property hook fixes

New

  • More usages of classes, interfaces, enums and traits disallowed with disallowedClasses or disallowedNamespaces are reported: instanceof, first-class callables like Foo::bar(...), DNF types like (A&B)|null, types of class constants, and interfaces extended by interfaces or implemented by enums (#444)
  • Disallowed names are labelled by what they are, Class, Interface (with the new disallowed.interface identifier), Enum or Trait, also in static calls, extends and implements, which said Namespace before; only use imports keep Namespace because they can also import a namespace (#440, #443 - possible BC break)
  • Property hooks are treated like methods by the attribute-based directives: an attribute placed on a hook counts as used in the hook, and allowInClassWithMethodAttributes sees attributes on hooks; matching hooks by name like Foo::$bar::get() in allowInMethods is now documented (#441, #445)

Bugfixes

  • A disallowed enum case or constant like Suit::Hearts was reported twice, as a class and as an enum, now it's reported once as Enum (#440)
  • A disallowed item used in a property hook crashed the analysis with ReflectionException when the config had allowInMethodsWithAttributes, allowExceptInMethodsWithAttributes or their aliases (#441)
  • A disallowed item used in a named function declared inside another function or method caused "Reflection error" with the same directives, and the rest of the file wasn't analysed (#442)
  • self::, static:: and parent:: calls aren't reported as Namespace self is forbidden. anymore when a wildcard pattern happens to match them (#443)
  • str_contains() isn't used anymore, it doesn't exist on PHP 7.4 (#436)

Internal changes

  • No errors with PHPStan 2.3, which analyses for the lowest PHP version in composer.json (#439)
  • Testing on PHP 8.6 (#438)
  • PHPStan1Compatibility renamed to PHPStanCompatibility, because it covers older PHPStan 2.x versions too (#441)
  • The e2e workflow follows the moved monorepo dev tools (#437)

Possible BC break note: messages and identifiers changed for static calls, extends and implements (Namespace/disallowed.namespace is now Class, Interface, Enum or Trait), for interfaces and traits anywhere else (Class/disallowed.class is now Interface/disallowed.interface or Trait/disallowed.trait), and for enums in type declarations (Class is now Enum). The duplicate Class error for enum cases and constants is gone. If you match these errors in ignoreErrors or a baseline, they may need updating, and the newly reported usages can add errors.

Commits
  • 3880759 Treat property hooks like methods in attribute-based allow directives, docume...
  • 0a2d351 Document matching property hooks by name in allowInMethods
  • 268b497 Count attributes on property hooks for allowInClassWithMethodAttributes
  • 667bd33 Treat attributes placed on property hooks like attributes on methods
  • 67c6c2c Report class usages in instanceof, first-class callables, DNF types, typed ...
  • 6f05f0d Report class and enum usages in types of class constants
  • 92da14a Report class and enum usages in DNF types
  • 01b7406 Report class and enum usages in static first-class callables
  • 4b65f1b Report interfaces extended by interfaces and implemented by enums
  • 8caecae Report class and enum usages in instanceof
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [spaze/phpstan-disallowed-calls](https://github.com/spaze/phpstan-disallowed-calls) to permit the latest version.
- [Release notes](https://github.com/spaze/phpstan-disallowed-calls/releases)
- [Commits](spaze/phpstan-disallowed-calls@v4.14.0...v4.15.0)

---
updated-dependencies:
- dependency-name: spaze/phpstan-disallowed-calls
  dependency-version: 4.15.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Oct 16, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) October 16, 2026 05:23
@github-actions
github-actions Bot merged commit e4b2182 into main Oct 16, 2026
47 checks passed
@github-actions
github-actions Bot deleted the dependabot/composer/spaze/phpstan-disallowed-calls-4.15.0 branch October 16, 2026 05:25
@coveralls

Copy link
Copy Markdown

Coverage Report for CI Build 38855510818

Warning

Build has drifted: This PR's base is out of sync with its target branch, so coverage data may include unrelated changes.
Quick fix: rebase this PR. Learn more →

Warning

No base build found for commit 32cb309 on main.
Coverage changes can't be calculated without a base build.
If a base build is processing, this comment will update automatically when it completes.

Coverage: 100.0%

Details

  • Patch coverage: No coverable lines changed in this PR.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

Requires a base build to compare against. How to fix this →


Coverage Stats

Coverage Status
Relevant Lines: 126
Covered Lines: 126
Line Coverage: 100.0%
Coverage Strength: 6.09 hits per line

💛 - Coveralls

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant