composer(deps-dev): bump the minor-patch-dependencies group with 5 updates

.github/dependabot.yml

@@ -19,15 +19,11 @@ updates:
       # Specify a name for the group, which will be used in pull request titles
       # and branch names
       minor-patch-dependencies:
+        applies-to: "version-updates"
         # Define patterns to include dependencies in the group (based on
         # dependency name)
         patterns:
           - "*"
-        # update-types:
-        #   - "minor"
-        #   - "patch"
-        # exclude-patterns:
-        #   - "gc_ruboconfig"
 
     open-pull-requests-limit: 10
 
@@ -48,16 +44,89 @@ updates:
       include: "scope"
       prefix: "composer"
 
+    #allow:
+    #  - '*'
+
     ignore:
-      - dependency-name: "psr/container"
-        versions:
-          - ">= 0"
       - dependency-name: "laminas/laminas-servicemanager"
-        versions:
-          - ">= 0"
+      - dependency-name: "psr/container"
+      - dependency-name: "nikic/php-parser"
       - dependency-name: "infection/infection"
-        versions:
-          - ">= 0"
+      - dependency-name: "psr/http-message"
+      - dependency-name: "psr/simple-cache"
+      - dependency-name: "illuminate/view"
+      - dependency-name: "illuminate/config"
+      - dependency-name: "endorphin-studio/browser-detector-tests"
+      - dependency-name: "laminas/laminas-diactoros"
+      - dependency-name: "symfony/console"
+      - dependency-name: "symfony/finder"
+      - dependency-name: "symfony/yaml"
+      - dependency-name: "symfony/http-foundation"
+      - dependency-name: "psr/log"
+      - dependency-name: "browscap/browscap"
+
+    # Disable rebasing for all pull requests
+    rebase-strategy: "disabled"
+
+  #- package-ecosystem: "composer"
+  #
+  #  directory: "/"
+  #
+  #  schedule:
+  #    interval: "weekly"
+  #    day: "wednesday"
+  #    time: "04:00"
+  #    timezone: "Europe/Berlin"
+  #
+  #  groups:
+  #    # Specify a name for the group, which will be used in pull request titles
+  #    # and branch names
+  #    minor-patch-dependencies:
+  #      applies-to: "version-updates"
+  #      # Define patterns to include dependencies in the group (based on
+  #      # dependency name)
+  #      patterns:
+  #        - "*"
+  #
+  #  open-pull-requests-limit: 10
+  #
+  #  reviewers:
+  #    - "mimmi20"
+  #
+  #  assignees:
+  #    - "mimmi20"
+  #
+  #  labels:
+  #    - "dependencies"
+  #
+  #  versioning-strategy: "widen"
+  #
+  #  target-branch: "master"
+  #
+  #  commit-message:
+  #    include: "scope"
+  #    prefix: "composer"
+  #
+  #  allow:
+  #    - dependency-name: "psr/container"
+  #    - dependency-name: "infection/infection"
+  #    - dependency-name: "nikic/php-parser"
+  #    - dependency-name: "psr/http-message"
+  #    - dependency-name: "laminas/laminas-servicemanager"
+  #    - dependency-name: "psr/simple-cache"
+  #    - dependency-name: "illuminate/view"
+  #    - dependency-name: "illuminate/config"
+  #    - dependency-name: "endorphin-studio/browser-detector-tests"
+  #    - dependency-name: "laminas/laminas-diactoros"
+  #    - dependency-name: "symfony/console"
+  #    - dependency-name: "symfony/finder"
+  #    - dependency-name: "symfony/yaml"
+  #    - dependency-name: "symfony/http-foundation"
+  #    - dependency-name: "psr/log"
+  #    - dependency-name: "browscap/browscap"
+  #
+  #  # Disable rebasing for all pull requests
+  #  rebase-strategy: "disabled"
 
   - package-ecosystem: "github-actions"
 
@@ -73,15 +142,11 @@ updates:
       # Specify a name for the group, which will be used in pull request titles
       # and branch names
       minor-patch-dependencies:
+        applies-to: "version-updates"
         # Define patterns to include dependencies in the group (based on
         # dependency name)
         patterns:
           - "*"
-        # update-types:
-        #   - "minor"
-        #   - "patch"
-        # exclude-patterns:
-        #   - "gc_ruboconfig"
 
     open-pull-requests-limit: 10
 
@@ -98,3 +163,6 @@ updates:
 
     commit-message:
       prefix: "github-actions"
+
+    # Disable rebasing for all pull requests
+    rebase-strategy: "disabled"

.github/renovate.json5

@@ -51,9 +51,13 @@
       "rangeStrategy": "widen"
     },
     {
-      "matchPackageNames": ["nikic/php-parser", "infection/infection"],
+      "matchPackageNames": ["nikic/php-parser", "infection/infection", "psr/container", "psr/http-message", "laminas/laminas-servicemanager", "psr/simple-cache", "illuminate/view", "illuminate/config", "endorphin-studio/browser-detector-tests", "laminas/laminas-diactoros", "symfony/console", "symfony/finder", "symfony/yaml", "symfony/http-foundation", "psr/log", "browscap/browscap"],
       "rangeStrategy": "widen"
     },
+    {
+      "matchPackageNames": ["vitest", "@vitest/coverage-istanbul", "@vitest/ui"],
+      "enabled": false
+    },
     {
       "groupName": "all non-major dependencies",
       "groupSlug": "all-minor-patch-dependencies",

.github/workflows/continuous-integration.yml

@@ -57,7 +57,7 @@ jobs:
       skip-phpmd: false
 
   tests:
-    name: "UnitTests & Code Coverage"
+    name: "UnitTests with PHPUnit"
 
     needs: "analytics"
 

.github/workflows/lint-workflow-files.yml

@@ -18,6 +18,14 @@ jobs:
           lfs: false
           persist-credentials: false
 
+      - name: "install libimagequant-dev"
+        run: "sudo apt-get install libimagequant-dev -y"
+
+      - name: "Use Node.js 22"
+        uses: "actions/setup-node@v4"
+        with:
+          node-version: "22"
+
       - name: "Check workflow files"
         uses: "raven-actions/actionlint@v1"
         with:

composer.json

@@ -24,22 +24,23 @@
   "require-dev": {
     "infection/infection": "^0.27.11 || ^0.28.1",
     "laminas/laminas-config": "^3.9.0",
-    "laminas/laminas-modulemanager": "^2.15.0",
+    "laminas/laminas-modulemanager": "^2.16.0",
     "laminas/laminas-navigation": "^2.19.1",
     "laminas/laminas-permissions-acl": "^2.16.0",
     "laminas/laminas-servicemanager": "^3.22.1 || ^4.0.0",
-    "mimmi20/coding-standard": "^5.2.33",
+    "mimmi20/coding-standard": "^5.2.35",
     "mimmi20/mezzio-generic-authorization": "^3.0.6",
     "mimmi20/mezzio-navigation": "^3.0.6",
     "phpstan/extension-installer": "^1.4.1",
-    "phpstan/phpstan": "^1.11.4",
+    "phpstan/phpstan": "^1.11.5",
     "phpstan/phpstan-deprecation-rules": "^1.2.0",
     "phpstan/phpstan-phpunit": "^1.4.0",
     "phpunit/phpunit": "^10.5.20",
     "rector/rector": "^1.1.0",
-    "symplify/phpstan-rules": "^12.7.0",
+    "rector/type-perfect": "^0.1.6",
+    "symplify/phpstan-rules": "^13.0.0",
     "tomasvotruba/cognitive-complexity": "^0.2.3",
-    "tomasvotruba/type-coverage": "^0.3.0",
+    "tomasvotruba/type-coverage": "^0.3.1",
     "tomasvotruba/unused-public": "^0.3.9"
   },
   "suggest": {

phpstan.neon

@@ -15,10 +15,10 @@ parameters:
     - %currentWorkingDirectory%/vendor/squizlabs/php_codesniffer/src/Util/Tokens.php
 
   # reports occurrences of type-checking functions always evaluated to true
-  checkAlwaysTrueCheckTypeFunctionCall: false
+  checkAlwaysTrueCheckTypeFunctionCall: false # todo: fix
 
   # reports instanceof occurrences always evaluated to true
-  checkAlwaysTrueInstanceof: false
+  checkAlwaysTrueInstanceof: false # todo: fix
 
   # reports === and !== occurrences always evaluated to true
   checkAlwaysTrueStrictComparison: true
@@ -35,11 +35,8 @@ parameters:
   # reports function and method calls with incorrect name case
   checkFunctionNameCase: true
 
-  # it requires type variables always be specified in typehints
-  checkGenericClassInNonGenericObjectType: true
-
   # be strict about values with an unspecified (implicit mixed) type
-  checkImplicitMixed: false
+  checkImplicitMixed: false # todo: fix
 
   # reports references to built-in classes with incorrect name case
   checkInternalClassCaseSensitivity: true
@@ -72,10 +69,10 @@ parameters:
   reportAlwaysTrueInLastCondition: true
 
   # reports violations of parameter type contravariance and return type covariance
-  reportMaybesInMethodSignatures: false
+  reportMaybesInMethodSignatures: false # todo: fix
 
   # reports violations of property type invariance
-  reportMaybesInPropertyPhpDocTypes: false
+  reportMaybesInPropertyPhpDocTypes: false # todo: fix
 
   # reports violations of parameter type contravariance and return type covariance in static methods
   reportStaticMethodSignatures: true
@@ -114,13 +111,16 @@ parameters:
     constants: true
     local_methods: true
 
+  type_perfect:
+    null_over_false: true
+    no_mixed: true
+    narrow_param: true
+
   ignoreErrors:
     - '~Parameter #1 \$options of method Mimmi20\\Mezzio\\Navigation\\Page\\PageFactoryInterface::factory\(\) expects array<string, array<string>\|bool\|string>, array<iterable<string>\|string> given~'
 
 rules:
   # code complexity
-  - Symplify\PHPStanRules\Rules\Explicit\NoMixedPropertyFetcherRule
-  - Symplify\PHPStanRules\Rules\Explicit\NoMixedMethodCallerRule
   - Symplify\PHPStanRules\Rules\NoDynamicNameRule
   # - Symplify\PHPStanRules\Rules\NoReturnArrayVariableListRule # todo: fix
 
@@ -130,25 +130,14 @@ rules:
   - Symplify\PHPStanRules\Rules\Domain\RequireExceptionNamespaceRule
   - Symplify\PHPStanRules\Rules\Domain\RequireAttributeNamespaceRule
   - Symplify\PHPStanRules\Rules\Enum\RequireUniqueEnumConstantRule
-  - Symplify\PHPStanRules\Rules\ForbiddenParamTypeRemovalRule
   - Symplify\PHPStanRules\Rules\PreventParentMethodVisibilityOverrideRule
 
   # paths
-  - Symplify\PHPStanRules\Rules\NoMissingDirPathRule
-  - Symplify\PHPStanRules\Rules\NoReferenceRule # References are required
-  - Symplify\PHPStanRules\Rules\NoArrayAccessOnObjectRule
-
-  - Symplify\PHPStanRules\Rules\NoNullableArrayPropertyRule
-
-  # dead-code
-  - Symplify\PHPStanRules\Rules\NoIssetOnObjectRule
+  - Symplify\PHPStanRules\Rules\NoReferenceRule
 
   # explicit naming
   - Symplify\PHPStanRules\Rules\ForbiddenMultipleClassLikeInOneFileRule
 
-  # comlexity
-  - Symplify\PHPStanRules\Rules\NarrowType\NoReturnFalseInNonBoolClassMethodRule
-
   - Symplify\PHPStanRules\Rules\Complexity\ForbiddenArrayMethodCallRule
   # - Symplify\PHPStanRules\Rules\CheckRequiredInterfaceInContractNamespaceRule
 
@@ -165,8 +154,4 @@ rules:
   - Symplify\PHPStanRules\Rules\NoReturnSetterMethodRule
   - Symplify\PHPStanRules\Rules\UppercaseConstantRule
   - Symplify\PHPStanRules\Rules\ClassNameRespectsParentSuffixRule
-  - Symplify\PHPStanRules\Rules\CheckTypehintCallerTypeRule
   - Symplify\PHPStanRules\Rules\CheckClassNamespaceFollowPsr4Rule
-
-includes:
-  - vendor/symplify/phpstan-rules/config/collector-rules.neon