Bump the phpstan group with 4 updates

[dependabot]

Updates the requirements on phpstan/phpstan, phpstan/phpstan-strict-rules, spaze/phpstan-disallowed-calls and shipmonk/phpstan-rules to permit the latest version.
Updates phpstan/phpstan to 2.1.11

Release notes

Sourced from phpstan/phpstan's releases.

2.1.11

Improvements 🔧

• RegexArrayShapeMatcher - more precise subject types (#3897), #12749, thanks @​staabm!

Bugfixes 🐛

• Fix narrowing of superglobals (#3901), #12771, #12772, #12776, thanks @​herndlm!
• String value passed to Identifier cannot be empty (phpstan/phpstan-src@a3039ef), #12778

Function signature fixes 🤖

• Fix SessionHandlerInterface::read return type (#3884), #12748, thanks @​sayuprc!

Commits

• 8ca5f79 PHPStan 2.1.11
• f2f2ddf Updated PHPStan to commit f2f2ddf44425cc58b5b1537ddce7cd06a9bba074
• a3ce38e Updated PHPStan to commit a3ce38e6f1489aab4ddc475802d70a9d5af231d6
• dca2a16 Update playground-api
• a3039ef Updated PHPStan to commit a3039ef58efe8b303e9618272e50dfe85e74ff53
• 02eb0a8 Updated PHPStan to commit 02eb0a833897bfa5c0ea5d4d2566ef71f3d13ae2
• d27602f Update playground-runner
• 051a3b6 PHPStan 2.1.10
• 72d2f3b Updated PHPStan to commit 72d2f3b5b10faf9f388ad68b8271ece94bb53bc5
• e6a3b1f Updated PHPStan to commit e6a3b1faf6f957fba1ec8bee7199f147d97d2ee5
• Additional commits viewable in compare view

Updates phpstan/phpstan-strict-rules to 2.0.4

Release notes

Sourced from phpstan/phpstan-strict-rules's releases.

2.0.4

• 3e139cb - Check for boolean in while conditions
• b20f78c - Fix build
• 51abacd - Fix build
• 342fa26 - Update LICENSE
• a0e1926 - Update LICENSE

Commits

• 3e139cb Check for boolean in while conditions
• b20f78c Fix build
• 51abacd Fix build
• 342fa26 Update LICENSE
• a0e1926 Update LICENSE
• See full diff in compare view

Updates spaze/phpstan-disallowed-calls to 4.4.1

Release notes

Sourced from spaze/phpstan-disallowed-calls's releases.

Classes in method params can be allowed by method attributes

This is a follow-up to the allowInMethodsWithAttributes feature added in 4.3.1.

When you disallow the Event class (with disallowedClasses) and would like to allow it again in a method that has the Attr attribute (see the example code below), the Event class should be allowed even in the method signature. Previously, it was flagged as a disallowed usage (#315)

class Handler
{
    #[Attr]
    public function foo(Event $event) // should be allowed too
    {
        $event = new Event(); // allowed
    }
}

Commits

• b24661b Can get method/function attributes for params of disallowed classes (#315)
• f462528 Can get method/function attributes for params of disallowed classes
• a1eec11 Exclude ClassConstantTypeHint because we support older PHPs too (#313)
• 6a03b44 Exclude ClassConstantTypeHint because we support older PHPs too
• See full diff in compare view

Updates shipmonk/phpstan-rules to 4.1.1

Release notes

Sourced from shipmonk/phpstan-rules's releases.

4.1.1

Fixes:

• forbidCast: fix custom blacklist configuration (#297, @​forrest79)

Dependencies

• phpstan/phpstan requires ^2.1.8 (#296)

Commits

• bf6c463 ForbidCastRule: fix custom blacklist (#297)
• 79692c6 Fix build for latest PHPStan 2.1.8 (#296)
• 45c9ff8 Bump dev dependencies (#294)
• 207bdba EnforceIteratorToArrayPreserveKeysRule: fix test for latest PHPStan (#293)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @xificurk.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[xificurk]

@dependabot squash and merge