Bump the php-dev group across 1 directory with 3 updates

[dependabot]

Bumps the php-dev group with 2 updates in the / directory: phpstan/phpstan and slevomat/coding-standard.

Updates phpstan/phpstan from 1.12.20 to 1.12.23

Release notes

Sourced from phpstan/phpstan's releases.

1.12.23

Fix condition of fall-through case not used for exhaustive checks (#3900), #11064, #3488, #8719, #12722, thanks @​rvanvelzen!

1.12.22

Improvements 🔧

• More precise implode() return type (#3774), thanks @​staabm!

Bugfixes 🐛

• ArrayType - setting new offset with [] on array with constant-integer offset will add one to the offset (phpstan/phpstan-src@fe595cb), #9328, #9850, #10650
• Optimize scalar values in oversized constant arrays (phpstan/phpstan-src@791e708), #12671
• StaticPropertyFetch is an impure point (phpstan/phpstan-src@4111d0f)

1.12.21

Bugfixes 🐛

• Correctly infer template type from various callables (phpstan/phpstan-src@5920c98), #12691
• Fix accepting generic callable in CallableType and ClosureType (phpstan/phpstan-src@0e10531), #12691, #6828, #11942, #11861, #6828, #9167
• Fix generalizing constant arrays when the array is getting smaller (phpstan/phpstan-src@8734057), #12658, #8030

Function signature fixes 🤖

• Fix MongoCollection::findOne() return type (#3854), thanks @​aivchen!

Commits

• 29201e7 PHPStan 1.12.23
• ce0aaf2 Updated PHPStan to commit ce0aaf2bffcb61273675aea8c8c5251fe02bd58d
• 85b21fb PHPStan 1.12.22
• 4111d0f Updated PHPStan to commit 4111d0f5951338d3fa9735edd8ae38de90d15456
• 791e708 Updated PHPStan to commit 791e708efd0e4f2b845d6d9a34494f54c493ca81
• 9cd58b5 Updated PHPStan to commit 9cd58b5a912dd4d014effd431e1754ab145bef8f
• fe595cb Updated PHPStan to commit fe595cba71279d990a8be265d594b470265ea318
• 14276fd PHPStan 1.12.21
• 7d8742a Updated PHPStan to commit 7d8742a37c9103067f8750facea0557bb4a0dea8
• 8734057 Updated PHPStan to commit 8734057fed407949994e79eb3785cc0bed8f5520
• Additional commits viewable in compare view

Updates slevomat/coding-standard from 8.16.0 to 8.16.1

Release notes

Sourced from slevomat/coding-standard's releases.

8.16.1

🐛 Fixes

• Fixed BC break

Commits

• 490023f Revert "Enable PHP 7.4+ sniffs always"
• b58063e Fixed build status badge
• 0118b67 Fix reference to SlevomatCodingStandard.Arrays.ArrayAccess in README
• b7e363a Readme: add ClassConstantTypeHint sniff
• See full diff in compare view

Updates squizlabs/php_codesniffer from 3.11.3 to 3.12.0

Release notes

Sourced from squizlabs/php_codesniffer's releases.

3.12.0 - 2025-03-18

Added

• Added support for PHP 8.4 final properties to File::getMemberProperties() through a new is_final array index in the return value. #834
  • Thanks to Daniel Scherzer for the patch.
• Generators/HTML: each section title now has a unique anchor link, which can be copied when hovering over a title. #859
  • This should make sharing a link to a specific section of the documentation more straight-forward.
  • Thanks to Juliette Reinders Folmer for the patch.
• Documentation for the following sniffs:
  • Squiz.Classes.ClassFileName
  • Squiz.Classes.ValidClassName
  • Thanks to Brian Dunne for the patches.

Changed

• PHPCBF: the messaging when no fixable errors are found will now distinguish between "No violations" (at all) versus "No fixable errors". #806
  • Thanks to Peter Wilson for the patch.
• The -h (Help) option now contains a more extensive list of "config" options which can be set. #809
  • Thanks to Juliette Reinders Folmer for the patch.
• Improved error message when invalid sniff codes are supplied to --sniffs or --exclude command line arguments. #344
  • Thanks to Dan Wallis for the patch.
• Improved error message when an invalid generator name is supplied to the --generator command line argument. #709, #771
  • The generator name will now also always be handled case-insensitively, independently of the OS used.
  • Thanks to Rodrigo Primo for the patch.
• The user will be shown an informative error message for sniffs missing one of the required methods. #873
  • Previously this would result in a fatal error.
  • Thanks to Juliette Reinders Folmer for the patch.
• Ruleset processing will now be allowed to run to its conclusion - barring critical errors - before displaying all ruleset errors in one go. #857
  • Previously an error in a ruleset would cause PHPCS to exit immediately and show only one error at a time.
  • Thanks to Juliette Reinders Folmer for the patch.
• Generators: XML documentation files which don't contain any actual documentation will now silently be ignored. #755
  • Thanks to Juliette Reinders Folmer for the patch.
• Generators: when the title attribute is missing, the documentation generation will now fall back to the sniff name as the title. #820
  • Thanks to Juliette Reinders Folmer for the patch.
• Generators: cleaner output based on the elements of the documentation which are available. #819, #821
  • Thanks to Juliette Reinders Folmer for the patch.
• Generators/HTML: improved display of code tables by using semantic HTML. #854
  • Thanks to Juliette Reinders Folmer for the patch.
• Squiz.Classes.ClassFileName: recommend changing the file name instead of changing the class name. #845
  • This prevents unactionable recommendations due to the file name not translating to a valid PHP symbol name.
  • Thanks to Juliette Reinders Folmer for the patch.
• Squiz.Functions.FunctionDeclarationArgumentSpacing: incorrect spacing after a comma followed by a promoted property has an improved error message and will now be flagged with the SpacingBeforePropertyModifier or NoSpaceBeforePropertyModifier error codes. #792
  • This was previously already flagged, but using either the SpacingBeforeHint or NoSpaceBeforeHint error code, which was misleading.
  • Thanks to Juliette Reinders Folmer for the patch.
• Squiz.Functions.FunctionDeclarationArgumentSpacing: the sniff will now also check the spacing after property modifiers for promoted properties in constructor methods. #792
  • Thanks to Juliette Reinders Folmer for the patch.
• Squiz.WhiteSpace.ScopeKeywordSpacing: the sniff will now also check the spacing after the final and abstract modifier keywords. #604
  • Thanks to Klaus Purer for the patch.
• The following sniff(s) have received efficiency improvements:
  • Squiz.WhiteSpace.ScopeKeywordSpacing
  • Thanks to Juliette Reinders Folmer for the patches.
• Incorrectly set inline properties (in test case files) will be silently ignored again. #884

... (truncated)

Changelog

Sourced from squizlabs/php_codesniffer's changelog.

[3.12.0] - 2025-03-18

Added

• Added support for PHP 8.4 final properties to File::getMemberProperties() through a new is_final array index in the return value. #834
  • Thanks to [Daniel Scherzer][@​DanielEScherzer] for the patch.
• Generators/HTML: each section title now has a unique anchor link, which can be copied when hovering over a title. #859
  • This should make sharing a link to a specific section of the documentation more straight-forward.
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
• Documentation for the following sniffs:
  • Squiz.Classes.ClassFileName
  • Squiz.Classes.ValidClassName
  • Thanks to [Brian Dunne][@​braindawg] for the patches.

Changed

• PHPCBF: the messaging when no fixable errors are found will now distinguish between "No violations" (at all) versus "No fixable errors". #806
  • Thanks to [Peter Wilson][@​peterwilsoncc] for the patch.
• The -h (Help) option now contains a more extensive list of "config" options which can be set. #809
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
• Improved error message when invalid sniff codes are supplied to --sniffs or --exclude command line arguments. #344
  • Thanks to [Dan Wallis][@​fredden] for the patch.
• Improved error message when an invalid generator name is supplied to the --generator command line argument. #709, #771
  • The generator name will now also always be handled case-insensitively, independently of the OS used.
  • Thanks to [Rodrigo Primo][@​rodrigoprimo] for the patch.
• The user will be shown an informative error message for sniffs missing one of the required methods. #873
  • Previously this would result in a fatal error.
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
• Ruleset processing will now be allowed to run to its conclusion - barring critical errors - before displaying all ruleset errors in one go. #857
  • Previously an error in a ruleset would cause PHPCS to exit immediately and show only one error at a time.
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
• Generators: XML documentation files which don't contain any actual documentation will now silently be ignored. #755
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
• Generators: when the title attribute is missing, the documentation generation will now fall back to the sniff name as the title. #820
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
• Generators: cleaner output based on the elements of the documentation which are available. #819, #821
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
• Generators/HTML: improved display of code tables by using semantic HTML. #854
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
• Squiz.Classes.ClassFileName: recommend changing the file name instead of changing the class name. #845
  • This prevents unactionable recommendations due to the file name not translating to a valid PHP symbol name.
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
• Squiz.Functions.FunctionDeclarationArgumentSpacing: incorrect spacing after a comma followed by a promoted property has an improved error message and will now be flagged with the SpacingBeforePropertyModifier or NoSpaceBeforePropertyModifier error codes. #792
  • This was previously already flagged, but using either the SpacingBeforeHint or NoSpaceBeforeHint error code, which was misleading.
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
• Squiz.Functions.FunctionDeclarationArgumentSpacing: the sniff will now also check the spacing after property modifiers for promoted properties in constructor methods. #792
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
• Squiz.WhiteSpace.ScopeKeywordSpacing: the sniff will now also check the spacing after the final and abstract modifier keywords. #604
  • Thanks to [Klaus Purer][@​klausi] for the patch.
• The following sniff(s) have received efficiency improvements:
  • Squiz.WhiteSpace.ScopeKeywordSpacing
  • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patches.

... (truncated)

Commits

• 2d1b63d Merge pull request #885 from PHPCSStandards/feature/changelog-3.12.0
• c1bc347 Merge pull request #886 from PHPCSStandards/feature/minor-docs-fixes
• 85628bd Docs: various minor tweaks
• 22babe5 Changelog for the 3.12.0 release
• 97e340e Ruleset: handle invalid sniffs more graciously
• c6a579e Merge pull request #884 from PHPCSStandards/feature/messagecollector-follow-up
• 18578da Merge pull request #883 from PHPCSStandards/feature/errorsuppressiontest-mino...
• 27fd29a Remove some redundant code
• b4c50bb ErrorSuppressionTest: remove stray line of code
• d0d4411 Merge pull request #882 from PHPCSStandards/feature/ruleset-setproperty-add-e...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.