composer(deps-dev): bump the minor-patch-dependencies group with 5 updates

[dependabot]

Updates the requirements on laminas/laminas-servicemanager, mimmi20/coding-standard, mimmi20/mezzio-generic-authorization, mimmi20/mezzio-navigation and rector/rector to permit the latest version.
Updates laminas/laminas-servicemanager to 4.0.0

Release notes

Sourced from laminas/laminas-servicemanager's releases.

4.0.0

Release Notes for 4.0.0

Release Notes for 4.0.0

laminas-servicemanager 4.0.0 is here and finally enables projects to consume psr/container v2.0.0 after 2 years along with several type-additions and plugin manager decoupling.

The migration guide is not written yet but will be at some point (once we added support for SM v4 to other components) later.

Added

• Several native type-additions including property-, argument- and return-types and a lot more psalm types
• ServiceManager#get, PluginManagerInterface#get and ServiceLocatorInterface#build now explicitly implement mixed as return-type to synchronize types with ContainerInterface#get
• Support for psr/container v1.1 and v2.0
• Ahead of Time factory creation for services explicitly using ReflectionBasedAbstractFactory via laminas-cli

Removed

• Dropped support for PHP <8.1
• Removed deprecated interfaces such as
  • Laminas\ServiceManager\AbstractFactoryInterface
  • Laminas\ServiceManager\FactoryInterface
  • Laminas\ServiceManager\InitializerInterface
  • Laminas\ServiceManager\DelegatorFactoryInterface
• CLI commands which were exposed via vendor/bin are removed in favor of the laminas-cli integration. All CLI commands of v3.x are accessible via vendor/bin/laminas servicemanager:<v3.x command name> once laminas/laminas-cli is required in the projects dependencies
• Removed deprecated ConfigInterface and Config-class since these files did not provide any validation logic and were just used to proxy the configuration array structure
• Removed AbstractPluginManager#validate and AbstractPluginManager::$instanceOf property as in v3.x, implementing plugin managers were able to implicitly validate mixed. In case an implementing plugin manager is providing a single $instanceOf such as laminas-cache, there is a new class AbstractSingleInstancePluginManager available which requires the $instanceOf property to be configured

Breaking Changes

• AbstractPluginManager does not extend ServiceManager anymore and instead uses an own ServiceManager instance under the hood to manage plugin manager related services which can be configured the same way as in v3.x
• Dedicated CLI commands which were previously linked to vendor/bin are now integrated via laminas-cli and can be called via vendor/bin/laminas once laminas/laminas-cli is part of the projects requirements. Read more about how to consume these commands here.
• AbstractPluginManager does not provide the validate-Method anymore and requires migration action such as:
  • extend AbstractSingleInstancePluginManager in case the plugin manager only provides instances of a specific interface- or class-string (please be aware that the $instanceOf property now requires native string property type)
  • implement validate method and verify whatever type has to be returned and/or just allow mixed as v3.x did when omitting $instanceOf property
• Removed deprecated ConfigInterface and Config-class since these files did not provide any validation logic and were just used to proxy the configuration array structure
• neither ServiceManager nor AbstractPluginManager do validate the provided configuration at runtime anymore. due to the psalm-types provided to ServiceManager#__construct, ServiceManager#configure, AbstractPluginManager#__construct and AbstractPluginManager#configure, the configuration schema is strictly typed and thus, a miss-configuration can be mitigated on static-analysis level prior actual runtime
• AbstractPluginManager#get does not accept options anymore, in case an instance with options needs to be created, AbstractPluginManager#build has to be used

4.0.0

• Total issues resolved: 7
• Total pull requests resolved: 14
• Total contributors: 6

Enhancement

• 204: Introduce plugin manager static analysis file thanks to @​boesing
• 200: Replace scope to retrieve plugin manager from $this to self thanks to @​boesing
• 194: Narrow return type of single instance plugin managers thanks to @​boesing
• 187: Remove removed binaries from composer thanks to @​boesing
• 171: AOT factory creation CLI command for ReflectionBasedAbstractFactory mapped factories thanks to @​boesing
• 58: Merge release 3.5.0 into 4.0.x thanks to @​github-actions[bot]

... (truncated)

Commits

• aa4b0f5 Merge pull request #225 from boesing/docs/console-tools-bugfix
• e3ec60c bugfix: link to proper AoT factory section
• aa074ae Merge pull request #224 from laminas/renovate/lock-file-maintenance
• e80b222 Lock file maintenance
• d69bfef Merge pull request #206 from laminas/renovate/lock-file-maintenance
• c7edb25 Lock file maintenance
• a18bb35 Merge pull request #204 from boesing/qa/static-analysis
• ee7ab4e qa: remove redundant method implementations
• b79a3d4 qa: ignore `SlevomatCodingStandard.Commenting.InlineDocCommentDeclaration.NoA...
• 9fa7191 qa: update psalm to latest stable version
• Additional commits viewable in compare view

Updates mimmi20/coding-standard to 5.2.17

Commits

• c05e51b Merge pull request #459 from mimmi20/dependabot/composer/master/friendsofphp/...
• fd4353e composer(deps): update friendsofphp/php-cs-fixer requirement
• 0bfbac9 Merge pull request #458 from mimmi20/dependabot/github_actions/master/minor-p...
• 6d4cacc github-actions: bump the minor-patch-dependencies group with 1 update
• See full diff in compare view

Updates mimmi20/mezzio-generic-authorization to 3.0.5

Release notes

Sourced from mimmi20/mezzio-generic-authorization's releases.

update dependencies

What’s Changed

🕸 Dependencies:

• github-actions: bump the minor-patch-dependencies group with 1 update by @​dependabot (#272)
• composer(deps-dev): bump the minor-patch-dependencies group with 4 updates by @​dependabot (#271)
• composer(deps-dev): bump the minor-patch-dependencies group with 3 updates by @​dependabot (#270)
• composer(deps-dev): bump the minor-patch-dependencies group with 1 update by @​dependabot (#269)
• github-actions: bump the minor-patch-dependencies group with 3 updates by @​dependabot (#267)
• composer(deps-dev): bump the minor-patch-dependencies group with 3 updates by @​dependabot (#268)
• composer(deps-dev): bump the minor-patch-dependencies group with 2 updates by @​dependabot (#266)
• github-actions: bump the minor-patch-dependencies group with 1 update by @​dependabot (#264)
• composer(deps-dev): bump the minor-patch-dependencies group with 4 updates by @​dependabot (#263)

🧹 Maintenance:

• update pipeline by @​mimmi20 (#274)
• add badges and codeclimate upload by @​mimmi20 (#265)

📦 Documentation:

• add badges and codeclimate upload by @​mimmi20 (#265)

👨🏼‍💻 Contributors

@​dependabot, @​dependabot[bot] and @​mimmi20

Commits

• e197a18 Merge pull request #274 from mimmi20/updates
• 8df3bc8 update pipeline
• 8575277 Merge pull request #272 from mimmi20/dependabot/github_actions/master/minor-p...
• 73d0f5d github-actions: bump the minor-patch-dependencies group with 1 update
• 4396dcc Merge pull request #271 from mimmi20/dependabot/composer/master/minor-patch-d...
• 83f4d9e composer(deps-dev): bump the minor-patch-dependencies group with 4 updates
• 372ea24 Merge pull request #270 from mimmi20/dependabot/composer/master/minor-patch-d...
• 9caf76f composer(deps-dev): bump the minor-patch-dependencies group with 3 updates
• 7c3557b Merge pull request #269 from mimmi20/dependabot/composer/master/minor-patch-d...
• 2288968 composer(deps-dev): bump the minor-patch-dependencies group with 1 update
• Additional commits viewable in compare view

Updates mimmi20/mezzio-navigation to 3.0.5

Release notes

Sourced from mimmi20/mezzio-navigation's releases.

update dependencies

What’s Changed

🕸 Dependencies:

• github-actions: bump the minor-patch-dependencies group with 1 update by @​dependabot (#236)
• composer(deps-dev): bump the minor-patch-dependencies group with 3 updates by @​dependabot (#235)
• composer(deps-dev): bump the minor-patch-dependencies group with 3 updates by @​dependabot (#234)
• composer(deps-dev): bump the minor-patch-dependencies group with 2 updates by @​dependabot (#233)
• github-actions: bump the minor-patch-dependencies group with 3 updates by @​dependabot (#232)
• composer(deps-dev): bump the minor-patch-dependencies group with 3 updates by @​dependabot (#231)
• composer(deps-dev): bump the minor-patch-dependencies group with 2 updates by @​dependabot (#230)
• composer(deps): bump the minor-patch-dependencies group with 5 updates by @​dependabot (#227)
• github-actions: bump the minor-patch-dependencies group with 1 update by @​dependabot (#228)
• composer(deps-dev): bump the minor-patch-dependencies group with 4 updates by @​dependabot (#226)

🧹 Maintenance:

• update pipeline by @​mimmi20 (#238)
• add badges and codeclimate upload by @​mimmi20 (#229)

📦 Documentation:

• add badges and codeclimate upload by @​mimmi20 (#229)

👨🏼‍💻 Contributors

@​dependabot, @​dependabot[bot] and @​mimmi20

Commits

• c337ad9 Merge pull request #238 from mimmi20/updates
• 84e7f21 update pipeline
• 3fc1d34 Merge pull request #236 from mimmi20/dependabot/github_actions/master/minor-p...
• 85b49ac github-actions: bump the minor-patch-dependencies group with 1 update
• f8ec1ea Merge pull request #235 from mimmi20/dependabot/composer/master/minor-patch-d...
• 0abc956 composer(deps-dev): bump the minor-patch-dependencies group with 3 updates
• 9d32a25 Merge pull request #234 from mimmi20/dependabot/composer/master/minor-patch-d...
• 473fa9a fix issues
• 824fe22 composer(deps-dev): bump the minor-patch-dependencies group with 3 updates
• 2f0e9bb Merge pull request #233 from mimmi20/dependabot/composer/master/minor-patch-d...
• Additional commits viewable in compare view

Updates rector/rector to 1.0.2

Release notes

Sourced from rector/rector's releases.

Released Rector 1.0.2

New Features and changes 🥳

• Add minimal memory limit for local run phpstan without result cache (#5624), Thanks @​integer!
• Add method RectorConfigBuilder::withSkipPath() (#5626), Thanks @​integer!
• Add basic validation for skipped path (#5628), Thanks @​integer!
• [Php80] Add DoctrineCoverterterAttributeDecorator to convert "false"/"true" string to false/true on nullable arg on Doctrine\ORM\Mapping\Column (#5629)
• Add const fetch to class const fetch rector. (#5627), Thanks @​micaherne!
• [DX] Add error message information for include full path to load internal phpstan bleedingEdge.neon config (#5635)
• [TypeDeclaration] Adds AddParamTypeForFunctionLikeWithinCallLikeArgDeclarationRector rule (#5547), Thanks @​peterfox!
• [Php83] Add type to final class constant (#5662), Thanks @​philbates35!

Bugfixes 🐛

• [Php83] Early check private method in child before check parent on AddOverrideAttributeToOverriddenMethodsRector (#5622)
• RectorConfigBuilder: skip and rules can be called multiple times (#5623), Thanks @​integer!
• [CodeQuality] Skip not autoloaded parent class on CompleteDynamicPropertiesRector (#5636)
• [Transform] Allow transform ruleWithConfiguration() to withConfiguredRule() on RectorConfigBuilderRector (#5637)
• [Rector] Allow transform sets() to withSets() on RectorConfigBuilderRector (#5638)
• [Transform] Allow transform disableParallel() to withoutParallel() on RectorConfigBuilderRector (#5640)
• [Transform] Allow transform fileExtensions() to withFileExtensions() (#5641)
• [Performance] [VendorLocker] Early allow change return type on private method on ClassMethodReturnTypeOverrideGuard::shouldSkipClassMethod() (#5642)
• [VendorLocker] Early return false on private method on ParentClassMethodTypeOverrideGuard::hasParentClassMethod() (#5644)
• [Renaming] Handle crash on RenameFunctionRector with die() and $_SESSION usage (#5646)
• Cleanup scope check on UnreachableStatementNodeVisitor (#5648)
• Keep comments in annotations when converting them to attributes (#5650), Thanks @​carlos-granados!
• [Util] Make consistent new line splitter to Util (#5651)
• [TypeDeclaration] Fix abs() returns on ReturnTypeFromStrictTypedCallRector (#5652)
• [TypeDeclaration] Allow abs() to return int when pass int arg on ReturnTypeFromStrictTypedCallRector (#5653)
• [TypeDeclaration] Skip possible returns false on ReturnTypeFromStrictNewArrayRector (#5654)
• [TypeDeclaration] Include MockObject&ClassName docblock with IntersectionTypeNode on TypedPropertyFromStrictSetUpRector (#5655)
• [Renaming] New Rule: RenameFunctionLikeParamWithinCallLikeArgRector (#5554), Thanks @​peterfox!
• [PHPStanStaticTypeMapper] Avoid double \ prefix on IntersectionTypeMapper (#5656)
• [BetterPhpDocParser] Clean up unnecessary create new ConstFetchNode() on ArrayItemClassNameDecorator (#5658)
• [Php71] Skip re-assign as string on AssignArrayToStringRector (#5659)
• [Privatization] Skip with suffix "TestCase" on FinalizeTestCaseClassRector (#5660)
• [Php71] Skip re-assign as string on AssignArrayToStringRector part 2 (#5661)
• [DeadCode] Fix infinite loop on RemoveDeadStmtRector + RemoveUnusedVariableAssignRector (#5666)
• [Php81] Skip execution operator on NullToStrictStringFuncCallArgRector (#5667)
• [Naming] Handle crash with numeric-string doc on RenamePropertyToMatchTypeRector (#5670)
• [CodeQuality] Handle crash on named arg on deep closure on OptionalParametersAfterRequiredRector (#5671)
• chore: bump min version of github actions (fix deprecations) (#5675), Thanks @​Chris53897!
• [PHP 8.0] Fix case insenstive false positive replacement for str_ends_with (#5677)
• [Transform] Allow transform phpVersion() to withPhpVersion() on RectorConfigBuilderRector (#5678)
• Fix duplicated fixture class name on StaticToSelfStaticMethodCallOnFinalClassRector test (#5679)
• [CodeQuality] Skip nested array on InlineArrayReturnAssignRector (#5680)
• [CodeQuality] Skip combine var with property fetch on InlineArrayReturnAssignRector (#5681)
• [CodeQuality] Handle array destructuring of unpack on ArrayMergeOfNonArraysToSimpleArrayRector (#5682)

... (truncated)

Commits

• 7596fa6 Rector 1.0.2
• 3a69e0f Updated Rector to commit 1ae68446ee021d88238f915bc06201559a0ec82d
• 769ac36 Updated Rector to commit 1cd83bef6196e8b8913d2252a6c8a826bafcf62a
• c34bb45 Updated Rector to commit 2846b015388fb1eb6d65941481fe9340908c1f79
• 659d1a4 Updated Rector to commit c591bd291650ab22554ffd819e76d01a1a405719
• 1dbac6e Updated Rector to commit ce70534b3c8406164f630acbe6c7a1b18623d757
• 6986e1f Updated Rector to commit c9fe3caacced982e1c21d7203e9ea0f1bb2092c8
• d31429d Updated Rector to commit dea2e16665cf567c20664c7ef9bac38d0d7d4f49
• 991980c Updated Rector to commit 7191fae140cc8c35a699b6487117e1efa8b4d2f5
• 695c190 Updated Rector to commit 94b5561ca87ee6825a098c7c506b774582bf3354
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Manifest Files

composer.json

• laminas/laminas-servicemanager@>= 3.22.1, < 4.0.0 || >= 4.0.0, < 5.0.0
• mimmi20/coding-standard@>= 5.2.17, < 6.0.0
• mimmi20/mezzio-generic-authorization@>= 3.0.5, < 4.0.0
• mimmi20/mezzio-navigation@>= 3.0.5, < 4.0.0
• rector/rector@>= 1.0.2, < 2.0.0
• laminas/laminas-servicemanager@>= 3.22.1, < 4.0.0
• mimmi20/coding-standard@>= 5.2.16, < 6.0.0
• mimmi20/mezzio-generic-authorization@>= 3.0.4, < 4.0.0
• mimmi20/mezzio-navigation@>= 3.0.4, < 4.0.0
• rector/rector@>= 1.0.1, < 2.0.0

[codeclimate]

Code Climate has analyzed commit b7f9ccb and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 100.0% (0.0% change).

View more on Code Climate.