5.26.0

What's Changed

Features

• Add mysqli.execute-query as sink for TaintedSql by @cgocast in vimeo#11021
• Add TaintedCallable sinks for 4 core generic functions by @cgocast in vimeo#11090
• Improve mysql fetch_field* return type by @MoonE in vimeo#11009
• Check for psalm.dist.xml as well by @HypeMC in vimeo#11031

Fixes

• Change ReflectionParameter::getName() result type to non-empty-string by @vjik in vimeo#11037
• Fix mysqli_real_escape_string stub by @kamil-tekiela in vimeo#11078
• Fix mysqli_get_client_version by @kamil-tekiela in vimeo#11074
• Up the minimum required version of nikic/php-parser to 4.17 by @chesn0k in vimeo#10968
• Fix callable/lowercase strings coercion by @weirdan in vimeo#11091
• Consistently emit issues for properties on classes with unknown mixins by @issidorov in vimeo#11081

New Contributors

• @chesn0k made their first contribution in vimeo#10968

Full Changelog: vimeo/psalm@5.25.0...5.26.0