chore(deps): update composer dev dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
carthage-software/mago	1.43.0 → 1.45.0
rector/rector (source)	2.5.7 → 2.6.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

carthage-software/mago (carthage-software/mago)

v1.45.0: Mago 1.45.0

Compare Source

Mago 1.45.0

This release teaches the analyzer to build keyed array shapes from get_object_vars(), adds @param-closure-this support and an auto-fix for overly-wide return types, introduces a linter rule preferring DateTimeImmutable::createFromTimestamp(), fixes a batch of analyzer false positives, and makes empty reports valid SARIF/JSON documents for CI.

✨ Features

Analyzer

• get_object_vars() shapes: returns keyed array shapes built from the object's visible properties. (#​2110, a729ce1)
• @param-closure-this: supports the docblock tag for typing a closure parameter's $this. (#​2131, 6000d41)
• Overly-wide return types: adds an auto-fix that narrows the declared return type. (#​2068, #​2120, 9e4d186)

Linter

• prefer-datetimeimmutable-create-from-timestamp: suggests the factory over new DateTimeImmutable('@...'). (#​2118, 38b6152)

🐛 Bug Fixes

Analyzer

• Readonly promotion: detects reinitialization of promoted readonly properties in parent constructors. (#​2127, 490452e)
• Escaping breaks: preserves breaks that escape nested loops in reachability analysis. (#​2124, 635eeab)
• Guarded members: tracks method_exists guards on descendant members. (#​2125, d1b6e9c)
• PSL analysis: eliminates false positives when analyzing PSL-based code. (6527f24)
• array_map shapes: preserves array shapes for untyped closures. (#​2122, 816578a)
• Catch variables: refines definedness for precise conditions in try/catch. (#​2119, aa469b9)
• Hooked properties: tracks property-hook writes against the read type. (#​2112, bd95ea5)
• Split property types: supports distinct @property-read and @property-write types. (#​2079, #​2108, b54a881)
• @property visibility: resolves tags according to call-site visibility. (#​2106, a4b077d)

Codex

• Enum case literals: infers literal values from class constants, tightening integer conditions. (#​2111, 237465e)

Prelude

• array_diff: relaxes value parameters to string-castable types. (#​2116, f290239)

Reporting

• Empty reports: emits valid SARIF, JSON, GitLab, and Checkstyle documents when there are no issues. (#​2128, 003ff32)

Playground

• Analyzer settings: forwards playground settings so they take effect. (#​2121, 4184888)

🙏 Thank You

Contributors

A huge thank you to everyone who contributed code to this release:

• @​dotdash: #​2106, #​2108, #​2112, #​2120, #​2122, #​2123, #​2131

Issue Reporters

Thank you to everyone who reported issues that shaped this release:

• @​UweOhse: #​2068
• @​mytskine: #​2079
• @​Norbytus: #​2110
• @​BafS: #​2111, #​2119, #​2124, #​2125
• @​mathroc: #​2116, #​2118
• @​dotdash: #​2121
• @​PellegrinoDurante: #​2126
• @​maximal: #​2127
• @​gsteel: #​2128

Full Changelog: carthage-software/mago@1.44.0...1.45.0

v1.44.0: Mago 1.44.0

Compare Source

Mago 1.44.0

A faster release with stronger dependent-type analysis, richer guard and linter configuration, and fixes across the CLI, formatter, analyzer, and semantics.

✨ Features

Analyzer

• Override return types: reports overriding methods that omit a declared return type. (#​2100, 90c04c0)

Linter

• no-missing-format-argument: detects missing format arguments. (#​2062, 38857dd)
• missing-docs exclusions: supports configurable exclusions. (#​2102, 4488055)
• Disallowed symbol levels: configures levels for functions and type instantiations. (#​2101, 34ed400)

Guard

• @final validation: supports the annotation during structure validation. (#​2065, 78cbbf0)
• Restrictions: supports dependency restrictions and public-method allowlists. (#​2074, 8d6d359)

CLI

• -y self-update: adds a shorthand for --no-confirm. (#​2011, d231964)

🐛 Bug Fixes

Analyzer

• Dependent types: resolve them across calls, partials, unpacks, and intersections. (a629700, a231709, 81be763)
• Integer conditions: preserve ranges for correct impossible and redundant-condition reports. (#​2085, #​2087, 2037b9a, 6d71045)
• Loop conditions: stabilize types and avoid false diagnostics in do-while iterations. (#​2078, 0205e49, 7afc4eb)
• isset flow: retains unsafe access and try/catch uncertainty after failed checks. (#​2076, #​2096, b70350c, 23203e5)
• Readonly initialization: accepts deferred initialization of readonly properties. (#​2095, ad495bd)
• Magic methods: resolves @method calls backed by inherited methods. (#​2089, fda90f8)
• Mixin receiver types: binds $this and static to mixin receivers. (#​2086, 07086c5)
• Property overrides: reports incomparable override types. (#​2103, 80dbbfe)
• Dynamic property names: reports $property, not $$property. (#​2066, 5d2116d)
• PHPDoc returns: permits void in nullable docblock return types. (#​2081, #​2082, cdfd166)
• Optional shapes: recognises optional string-keyed shapes as lists. (#​2073, b15f9e1)

Codex

• Enum case identity: distinguishes cases during type identity checks. (#​2071, 683220c, 2637cf8)
• Backed enum values: preserves literal values from known ->value access. (#​2064, 45ad41b)
• Trait bounds: accepts exact @require-extends classes when validating traits. (#​2069, 84c0766)

Semantics

• Enum magic methods: permits __call, __callStatic, and __invoke. (#​2075, d0487f2)

Linter

• Namespaced imports: prevents overlapping fixes in global function imports. (#​2072, 9b40611)

Formatter

• Binary continuations: preserves indentation and match-arm docblocks. (#​2060, #​2063, 3057c15)
• Multiline chains: keeps short chains attached after receiver arguments wrap. (#​1711, #​2030, bc0090e)
• Aligned assignments: respects print width and indents continuations. (#​2093, #​2094, 035d956, 2923585)

Guard

• @self: scopes permits to the active rule namespace. (#​2084, 6a2a317)

CLI

• Piped output: restores SIGPIPE handling, avoiding a panic with head. (#​2090, #​2097, 9e504a6)

Distribution

• Composer package: excludes the repository-only tests suite. (#​2098, 722e39b)

🏗️ Internal

Performance

• Formatter: reduces printer and pipeline overhead. (f6520a2, ed94713)
• Linter: reduces traversal and allocation overhead. (d818460)
• Project analysis: speeds up end-to-end analysis and word interning. (d473383, c0d27c6)

Toolchain

• Rust: bumps the minimum Rust version to 1.97.0 and removes the nightly pin. (8c8262e, a43077b)

🙏 Thank You

Contributors

A huge thank you to everyone who contributed code to this release:

• @​Norbytus: #​2065
• @​mvanhorn: #​2030, #​2097
• @​dotdash: #​2066, #​2075, #​2086, #​2088, #​2089, #​2098, #​2100, #​2103
• @​xHeaven: #​2082
• @​maximal: #​2011
• @​adam-ja: #​2101, #​2102

Issue Reporters

Thank you to everyone who reported issues that shaped this release:

• @​simbig: #​2060
• @​dantleech: #​2062
• @​BafS: #​2064, #​2076, #​2085, #​2087
• @​gsteel: #​2069, #​2072
• @​ddanielou: #​2071
• @​zonuexe: #​2073
• @​bram-pkg: #​2074
• @​UweOhse: #​2078
• @​mathroc: #​2081
• @​mansurs: #​2084
• @​innocenzi: #​1711
• @​cweiske: #​2090, #​2093, #​2094
• @​Tastaturberuf: #​2095
• @​datahari: #​2096

Full Changelog: carthage-software/mago@1.43.0...1.44.0

rectorphp/rector (rector/rector)

v2.6.1

Compare Source

v2.6.0

Compare Source

v2.5.9: Released Rector 2.5.9

Compare Source

Bugfixes 🐛

• [DeadCode] Remove unreachable class-like checks in Class_-only rules (#​8217)
• [CodingStyle] Use native php-parser node API over class reflection (#​8218)
• [Php80] Remove AstResolver usage on AddParamBasedOnParentClassMethodRector (#​8196)
• Wire RichParser node visitors via DI factory instead of private property hack (#​8215)
• [Php80] Skip promoting a property the parent declares without a native type in ClassPropertyAssignToConstructorPromotionRector (#​8232)
• [DeadCode] Keep empty __construct() in anonymous class that extends parent on RemoveEmptyClassMethodRector (#​8219)
• [DeadCode] Skip negative zero on RemoveDeadZeroAndOneOperationRector (#​8213)
• [DeadCode] Skip protected property on non-final class on RemoveDefaultValueFromAssignedPropertyRector (#​8214)
• [DeadCode] Skip array dim fetch assign on RemoveDefaultValueFromAssignedPropertyRector (#​8212)
• [DeadCode] Skip if/else in loop on RemoveDefaultValueFromAssignedPropertyRector (#​8211)
• [DeadCode] Skip early return in constructor on RemoveDefaultValueFromAssignedPropertyRector (#​8209)

Set changes 🗑️

NullToStrictStringFuncCallArgRector out of the PHP 8.1 set (#​8234)

The rule and all its fixtures stay, so it can still be opted into:

->withRules([NullToStrictStringFuncCallArgRector::class])

Deprecations 💀

TypeDeclarationDocblocks: 3 data provider docblock rules (#​8235)

Data provider docblock typing is not relevant to code quality — it increases maintenance cost and decreases readability of the test class.

Deprecated rules:

• AddReturnArrayDocblockFromDataProviderParamRector
• AddReturnDocblockDataProviderRector
• AddParamArrayDocblockFromDataProviderRector

rectorphp/rector-symfony 🎵

• [Symfony72] Match push() to its own RequestStack variable in PushRequestToRequestStackConstructorRector (#​971)
• [Symfony44] Skip custom isGranted() service calls in controllers in AuthorizationCheckerIsGrantedExtractorRector (#​973)
• [Symfony42] Update Cookie fixture after NewToStaticCallRector config removal (#​974)
• Drop rector/type-perfect, its rules ship in tomasvotruba/type-coverage 2.3 now (#​972)
• Bump dev dependencies, PHPUnit 13 (#​976)
• [deps] Bump symfony/config to ^8.1 (#​977)

Deprecated: SimplifyFormRenderingRector (#​975)

The rule removed the explicit ->createView() call when a form was passed to render():

Symfony supports passing the FormInterface directly, but the shorthand is ambiguous and breaks dynamic forms: forms modified in PRE_SET_DATA/POST_SUBMIT listeners and submitted over AJAX end up with a 422 response and no clear error. Keeping the explicit ->createView() call is the reliable form. See symfony/symfony#50542.

rectorphp/rector-phpunit 🧪

• [PHPUnit 13] Fix class in expectExceptionMessage() rename to TestCase (#​735)

rectorphp/rector-downgrade-php ⬇️

• [DowngradePhp81] Reference MHASH_* constants by name in DowngradeHashAlgorithmXxHashRector to fix PHP 8.5 deprecation (#​386)

v2.5.8: Released Rector 2.5.8

Compare Source

New Features 🥳

• [dx] Add "if" set with if/else/ternary rules (#​8199)
• [DeadCode] Add RemoveDeadInstanceOfAssertRector (#​8202)
• [DeadCode] Add RemoveDoubleSelfAssignRector (#​8203)
• [DeadCode] Add RemoveParentDelegatingClassMethodRector (#​8204)
• [DeadCode] Add RemoveDefaultValueFromAssignedPropertyRector (#​8207)
• [TypeDeclaration] Fix incomplete type on yield variable + yield from in AddParamTypeBasedOnPHPUnitDataProviderRector (#​8206)

Bugfixes 🐛

• Fix LogicalToBooleanRector: parenthesize assignments nested under unary/binary operators (#​8184)
• [TypeDeclaration] Skip trait methods on ParamTypeByMethodCallType rules (#​8189)
• [Php80] Skip promotion when property type is wider than constructor param on ClassPropertyAssignToConstructorPromotionRector (#​8170), Thanks @​ximki-vinki!
• [Php85] Skip outer spread on NestedFuncCallsToPipeOperatorRector (#​8191)
• [DeadCode] Fix crash on float version arg in ConditionResolver (#​8192)
• Make NestedFuncCallsToPipeOperatorRector minimum depth configurable (#​8193)
• Fix codeception data provider detection (#​8194), Thanks @​d-mitrofanov-v!
• Make PHPStan DI-Container available in bootstrap files (#​8190), Thanks @​staabm!
• [Privatization] Skip Symfony Command protected static property in PrivatizeFinalClassPropertyRector (#​8201)
• Bump to PHPStan ^2.2.6 and Fix its Container compatibility in RichParser (#​8208)

Removed 💀

• skip @​ return this on RemoveReturnTagIncompatibleWithNativeTypeRector on Traits (#​8185)
• [DeadCode] Skip string scalar sub type on RemoveReturnTagIncompatibleWithNativeTypeRector (#​8186)

rectorphp/rector-symfony 🎵

• [Symfony73] Remove empty configure() method in CommandHelpToAttributeRector (#​969)
• [Symfony73] Keep AbstractExtension when Twig extension overrides a built-in function/filter (#​968)
• [Symfony73] Wrap scalar groups option in array in ConstraintOptionsToNamedArgumentsRector (#​967)
• [Symfony61] Remove empty configure() method even with empty body (#​966)
• [Symfony61] Remove now empty configure() method in CommandConfigureToAttributeRector (#​965)
• [CodeQuality] Respect typeGuardedClasses and skip closure-only returns in ResponseReturnTypeControllerActionRector (#​964)
• [Symfony44] Return 1 instead of (int) false in ConsoleExecuteReturnIntRector (#​963)
• [CodeQuality] Add union and method call return type support to ResponseReturnTypeControllerActionRector (#​961)
• [Twig30] Add new set for Twig 30 (#​960), Thanks @​MrYamous

rectorphp/rector-doctrine 🟠

• [DataFixtures 17] add new set for doctrine data-fixtures 17 (#​487), Thanks @​MrYamous

rectorphp/rector-phpunit 🟢

• [PHPUnit 13] Add PHPUnit 13 config set (#​733)
• [CodeQuality] Skip super global variables on AssertIssetToSpecificMethodRector (#​732)
• [CodeQuality] Skip anonymous classes in AssertClassToThisAssertRector (#​729)
• [CodeQuality] Move AssertClassToThisAssertRector hook from Class_ to ClassMethod (#​728)
• AssertEqualsToSameRector: skip arrays whose actual value key order is not provably identical (#​727)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.