Build(deps-dev): Bump phpstan/phpstan from 0.11 to 0.11.15

[dependabot-preview]

Bumps phpstan/phpstan from 0.11 to 0.11.15.

Release notes

Sourced from phpstan/phpstan's releases.

0.11.15

Bugfixes

• Fixed new static() in abstract class with final constructor (3e5905fcf3a80393c3f23e61532cbb449083fec6), #2368
• Fixed behaviour of abstract constructors with new static() (1be5b3a706db16ac472a4c40ec03cf4c810b118d), #2369

0.11.14

Improvements

• InstantiationRule - check new static() in final class, with final constructor, or when the constructor comes from an implemented interface (3e5cd7fba7655307cbc758142e265b475a106a57)

Bleeding edge

See explanation in previous release notes.

• new static() is safe only with final constructor or in final class - level 0 (3ebf508a9a51bc1d67c1015732eac51fbc4bd846). See the Twitter poll about this.

Bugfixes

• Fix resolving static in constant array (a02404b38bef15ae40ce9060c1e2de3da2d049a5), #2360
• PhpMethodReflection - fixed isDeprecated(), isInternal(), isFinal() (765179c4c9674211b8918cdb08c8a9f5f917a5de)
• IncompatiblePropertyPhpDocTypeRule - fixed complaining about mixed when property has native typehint but no phpDoc (89cf4b1fe02a4f3b7f1ba105f3d757110ea68f7e), #2363
• Password constants are no longer mixed (e93fd2fdb64360688a5f805fc11f900bf252a882), #2362
• Mark NeverType as explicit to allow its usage in phpDocs (01a76d14b681952ae26b501c91016f6a37d1c4b3), #2297
• Fixed internal error when checking class existence with leading backslash (47a5cd246a858c422a93d78407097c9959c3d83f), #2359
• Use more verbose type description when the parameter type contains callable (b343bbf83d0dd08db917408d8efd99b140ce04c6), #2353

0.11.13

Full PHP 7.4 support!

• Native property types (e54a7a5c1baf7b7ded863a8c6da9ea023d82f347), link to RFC
• Arrow functions (c78f5031b2a08db893cc2032a67e7205166bffb9), link to RFC
• Null coalesce assign operator ??= (955281199365e95ea3dd7fdf8a8445282354b86c), link to RFC
• Array spread operator (a3bcc5891bb74636431adb83ddc9462ac7b7202c), link to RFC
• Password hashing algorithm constant type is mixed (4c6c84c1e45f8577c8ae9395f1cbb81fefe02e0f)
• Signatures about new PHP 7.4 functions (493d12d4a98ba0d2a0b8e576d80e65c8e8068d08)
• Fixes deprecated call to ReflectionType::__toString() in PHP 7.4 (#2275), thanks @​brunowowk!

Bugfixes

• Inferring private property types - do not propagate ErrorType/NeverType (60ab1540f75363a56373ef9368c5da225febaa5c)

0.11.12

Fix inherited @return $this / @return static (56b3eb2a371b60537fd20794e24af9e7e8ed4e30), #1648, #2278

0.11.11

... (truncated)

Commits

• 1be5b3a Fixed behaviour of abstract constructors
• 3e5905f Fixed new static() in abstract class with final constructor
• b343bbf Use verbosity level value() when the parameter type contains callable
• 47a5cd2 Fixed fatal error when checking class existence with leading backslash
• 01a76d1 Mark NeverType as explicit to allow its usage in phpDocs
• f4b1cfe Fixed build
• e93fd2f Password constants are no longer mixed
• 89cf4b1 IncompatiblePropertyPhpDocTypeRule - fixed complaining about mixed when prope...
• 3e5cd7f InstantiationRule - test new static() in cases where it's possible
• 3ebf508 new static() is safe only with final constructor or in final class (level 0...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @localheinz.

---

Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in the .dependabot/config.yml file in this repo:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[localheinz]

@dependabot merge

[codecov]

Codecov Report

Merging #197 into 1.x will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##                1.x     #197   +/-   ##
=========================================
  Coverage     84.73%   84.73%           
  Complexity       38       38           
=========================================
  Files             2        2           
  Lines           190      190           
=========================================
  Hits            161      161           
  Misses           29       29

Impacted Files	Coverage Δ	Complexity Δ
src/NormalizePlugin.php	44.44% <0%> (ø)	3% <0%> (ø)	⬇️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 3ce31b5...e7e314e. Read the comment docs.

[localheinz]

@dependabot merge