Update dependency psalm/plugin-laravel to v4.7.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
psalm/plugin-laravel	4.5.0 → 4.7.0

---

Release Notes

psalm/psalm-plugin-laravel (psalm/plugin-laravel)

v4.7.0: - Eloquent Builder

Compare Source

What's Changed

This release focuses on Eloquent Builder type coverage — new aggregate accessor resolution (withCount/withExists/withSum/withMin/withMax/withAvg), SoftDeletes on Builder instances, where{Column} dynamic methods on builder and relations, and several stub fixes that restore correct pivot types.

Features

• Add opt-out dynamic where{Column} method resolution on relation chains (#​714)
• Resolve withCount/withExists/withSum/withMin/withMax/withAvg aggregate accessor properties on Eloquent models (#​715)
• Support SoftDeletes methods resolving on base Builder instances (#​727)
• Update BelongsToMany/MorphToMany stubs to declare 4 template params, restoring pivot types in return values (#​716)
• Infer Carbon for now() and today() helpers (#​725)
• Validate dispatch() arguments against job/event constructor signature (#​726)
• Narrow Auth::guard() return type to the concrete guard class (#​711)
• Narrow Collection::whereNotNull() to remove null from TValue (#​713)
• Narrow env() return type based on the default value argument (#​712)

Fixes

• Fix collect() with no args to return Collection<never, never> (#​722)
• Add @property-read stubs for higher-order collection proxies (#​720)
• Add conditional return type stub for Str::replace() (#​719)
• Stub Conditionable::when()/unless() and Tappable::tap() to fix mixed return on fluent chains (#​710)
• Fix Collection::empty() and Collection::sum() return types (#​683)
• Add @psalm-this-out to paginator setCollection() (#​688)
• 🛡️ Add @psalm-taint-escape sql to parameterized Builder methods (#​691)
• 🛡️ Remove false-positive TaintedHtml sinks from Blade view data (#​690)

Full Changelog: psalm/psalm-plugin-laravel@v4.6.2...v4.7.0

v4.6.2

Compare Source

What’s Changed

Features

• 🛡️ Add @psalm-taint-source input for Http\Client\Response methods (#​676) @​alies-dev

Improvements

• Narrow Collection::sum() return type from mixed to int|float (#​680) @​alies-dev
• Add Collection::empty() stub with static<never, never> return type (#​679) @​alies-dev
• Detect missing views through View facade calls (#​668) @​alies-dev

Internal changes

• Support patch-version stub directories (#​681) @​alies-dev
• Add taint analysis tests for undertested stub sinks (#​675) @​alies-dev
• Refactor test app to Auto Repair Shop domain, reorganize type tests (#​667) @​alies-dev

Full Changelog: psalm/psalm-plugin-laravel@v4.6.1...v4.6.2

v4.6.1: - Relationships

Compare Source

What’s Changed

Features

• Model models variadic arguments: support for static (__callStatic) Model calls (#​663) @​alies-dev
• Custom Collections: support returns from Relation method calls (#​661) @​alies-dev

Full Changelog: psalm/psalm-plugin-laravel@v4.6.0...v4.6.1

v4.6.0: - Relationships

Compare Source

What's Changed

Deep relationship type resolution, Custom query builders, Custom Collections, and smarter validation shapes (thanks to @​MDG11).

Custom Query Builders

• Infer custom query builder types via #[UseEloquentBuilder] attribute and newEloquentBuilder() override (#​621) @​alies-dev
• Resolve scope methods on custom query builder instances (#​633) @​alies-dev
• Support SoftDeletes trait methods on custom query builders (#​632) @​alies-dev

Relationships

• Add MethodForwardingHandler for Relation method forwarding (#​642) @​alies-dev
• Resolve morphTo property type from docblock generic annotations (#​652) @​alies-dev
• Resolve custom collection types for relation property access (#​651) @​alies-dev
• Support #[CollectedBy] attribute for custom Eloquent collections (#​623) @​alies-dev

Validation

• Parse dot-notation validation rules into nested array shapes (#​625) @​MDG11 and @​alies-dev

Type Improvements

• Narrow Collection::flatten() and collapse() return types to preserve TValue (#​619) @​alies-dev
• Redeclare Model::increment()/decrement() as public in stub (#​618) @​alies-dev
• Skip ModelMakeDiscouraged when model has custom make() method (#​616) @​alies-dev

Security (Taint Analysis)

• 🛡️ Add @psalm-flow for Collection get()/first()/pull()/value() default parameter taint propagation (#​650) @​alies-dev

Internal

• Replace GNU time with hyperfine + github-action-benchmark (#​657) @​alies-dev
• Add CI performance benchmark workflow (#​655) @​alies-dev

New Contributors

• @​MDG11 made their first contribution in #​625 — dot-notation validation rule parsing

Full Changelog: psalm/psalm-plugin-laravel@v4.5.0...v4.6.0

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • "before 4pm every weekday except before 9am every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.