Update dependency vimeo/psalm to v5.26.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
vimeo/psalm	5.7.4 -> 5.26.1

---

Release Notes

vimeo/psalm (vimeo/psalm)

v5.26.1

Compare Source

What's Changed

Fixes

• Fix JSON formatter crashes with invalid UTF in error messages by @​weirdan in https://github.com/vimeo/psalm/pull/11092

Full Changelog: vimeo/psalm@5.26.0...5.26.1

v5.26.0

Compare Source

What's Changed

Features

• Add mysqli.execute-query as sink for TaintedSql by @​cgocast in https://github.com/vimeo/psalm/pull/11021
• Add TaintedCallable sinks for 4 core generic functions by @​cgocast in https://github.com/vimeo/psalm/pull/11090
• Improve mysql fetch_field* return type by @​MoonE in https://github.com/vimeo/psalm/pull/11009
• Check for psalm.dist.xml as well by @​HypeMC in https://github.com/vimeo/psalm/pull/11031

Fixes

• Change ReflectionParameter::getName() result type to non-empty-string by @​vjik in https://github.com/vimeo/psalm/pull/11037
• Fix mysqli_real_escape_string stub by @​kamil-tekiela in https://github.com/vimeo/psalm/pull/11078
• Fix mysqli_get_client_version by @​kamil-tekiela in https://github.com/vimeo/psalm/pull/11074
• Up the minimum required version of nikic/php-parser to 4.17 by @​chesn0k in https://github.com/vimeo/psalm/pull/10968
• Fix callable/lowercase strings coercion by @​weirdan in https://github.com/vimeo/psalm/pull/11091
• Consistently emit issues for properties on classes with unknown mixins by @​issidorov in https://github.com/vimeo/psalm/pull/11081

New Contributors

• @​chesn0k made their first contribution in https://github.com/vimeo/psalm/pull/10968

Full Changelog: vimeo/psalm@5.25.0...5.26.0

v5.25.0

Compare Source

What's Changed

Features

• Casting int-range should keep literals by @​kkmuffme in https://github.com/vimeo/psalm/pull/10941
• Update help panel by @​llaville in https://github.com/vimeo/psalm/pull/11000
• Add support for phpstan-pure by @​VincentLanglet in https://github.com/vimeo/psalm/pull/10975
• Precise preg_match_all return type by @​VincentLanglet in https://github.com/vimeo/psalm/pull/10969

Fixes

• Fix-GH-10933-And-GH-10951 by @​jack-worman in https://github.com/vimeo/psalm/pull/10953
• redis: add possible types for Redis#auth method by @​boesing in https://github.com/vimeo/psalm/pull/10934
• Avoid false positive about array which are non-callable by @​VincentLanglet in https://github.com/vimeo/psalm/pull/10935
• Fix literal-string|non-empty-literal-string by @​VincentLanglet in https://github.com/vimeo/psalm/pull/10930
• Fix signature of Locale::canonicalize. by @​ADmad in https://github.com/vimeo/psalm/pull/11010

New Contributors

• @​llaville made their first contribution in https://github.com/vimeo/psalm/pull/11000

Full Changelog: vimeo/psalm@5.24.0...5.25.0

v5.24.0

Compare Source

What's Changed

Features

• Allow specifying flags to Codebase::isTypeContainedByType by @​danog in https://github.com/vimeo/psalm/pull/10829
• Allow more callable types as subtypes of callable by @​weirdan in https://github.com/vimeo/psalm/pull/10805
• Report parent being used in callable context when the class does not extend anything by @​kkmuffme in https://github.com/vimeo/psalm/pull/10838
• Report error for additional deprecated arg types in PHP 8.1/8.3 by @​kkmuffme in https://github.com/vimeo/psalm/pull/10824
• Add MissingClassConstType Issue by @​jack-worman in https://github.com/vimeo/psalm/pull/10828
• Enforce parameter names for consistent constructors by @​kkmuffme in https://github.com/vimeo/psalm/pull/10821
• Add misc missing errors for invalid callable methods by @​kkmuffme in https://github.com/vimeo/psalm/pull/10839

Fixes

• Forbid named arguments for ArrayAcccess methods by @​weirdan in https://github.com/vimeo/psalm/pull/10804
• Don't crash on invalid templates by @​weirdan in https://github.com/vimeo/psalm/pull/10806
• report error for single param name mismatch too since named args can even be used then by @​kkmuffme in https://github.com/vimeo/psalm/pull/10822
• add support for named arguments for filter_var and filter_input by @​pilif in https://github.com/vimeo/psalm/pull/10815
• When inside isset, make array fetch result nullable by @​edsrzf in https://github.com/vimeo/psalm/pull/10756
• Promoted properties missing in extended __construct should report PropertyNotSetInConstructor by @​kkmuffme in https://github.com/vimeo/psalm/pull/10817
• Updating signature of getmxrr() by @​ThomasLandauer in https://github.com/vimeo/psalm/pull/10847
• Improve string-int juggle consistency in array keys and display for int-like strings in type by @​kkmuffme in https://github.com/vimeo/psalm/pull/10814
• Fix storage not available in thread for intersection doc types by @​simonberger in https://github.com/vimeo/psalm/pull/10856
• Don't emit MissingOverrideAttribute for implicit Stringable implementations by @​edsrzf in https://github.com/vimeo/psalm/pull/10858
• Specify array return type of session_get_cookie_params by @​jorgsowa in https://github.com/vimeo/psalm/pull/10859
• Unknown @​psalm annotation should not make whole docblock invalid by @​kkmuffme in https://github.com/vimeo/psalm/pull/10885
• Add mail to impure functions list by @​smaddock in https://github.com/vimeo/psalm/pull/10923
• Update PHP 8.2 Call map delta with refined types for string comparison functions by @​gsteel in https://github.com/vimeo/psalm/pull/10883

Docs

• document that @​psalm-internal works for namespace + class too by @​kkmuffme in https://github.com/vimeo/psalm/pull/10866

Internal changes

• fix tests running with other than called PHP binary if called with a non-default PHP binary by @​kkmuffme in https://github.com/vimeo/psalm/pull/10842
• Explicitly set value in config to fix warning in tests by @​kkmuffme in https://github.com/vimeo/psalm/pull/10843
• [PHP 8.4] Fixes for implicit nullability deprecation by @​Ayesh in https://github.com/vimeo/psalm/pull/10832
• Throw exception instead of silently logging issues occurred during scan by @​danog in https://github.com/vimeo/psalm/pull/10902

Other changes

• Fix conditional on non empty literal string by @​VincentLanglet in https://github.com/vimeo/psalm/pull/10912
• Ignore jsonSerialize for implementors of JsonSerializable by @​josephwynn-sc in https://github.com/vimeo/psalm/pull/10891
• Add XML functions to ImpureFunctionsList #​10882 by @​DKhalil in https://github.com/vimeo/psalm/pull/10887

New Contributors

• @​Ayesh made their first contribution in https://github.com/vimeo/psalm/pull/10832
• @​smaddock made their first contribution in https://github.com/vimeo/psalm/pull/10923
• @​josephwynn-sc made their first contribution in https://github.com/vimeo/psalm/pull/10891
• @​DKhalil made their first contribution in https://github.com/vimeo/psalm/pull/10887

Full Changelog: vimeo/psalm@5.23.1...5.24.0

v5.23.1

Compare Source

What's Changed

Fixes

• Fixed analysis of existing static methods if the __callStatic() method exists by @​issidorov in https://github.com/vimeo/psalm/pull/10812

Full Changelog: vimeo/psalm@5.23.0...5.23.1

v5.23.0

Compare Source

What's Changed

Features

• Update PHP 8.2 stubs to include SensitiveParameterValue by @​gsteel in https://github.com/vimeo/psalm/pull/10726
• Add list of statements to BeforeFileAnalysisEvent by @​ohader in https://github.com/vimeo/psalm/pull/10728
• Forbid iterating over generators with non-nullable send() by @​weirdan in https://github.com/vimeo/psalm/pull/10697
• Initial support for named parameters for callables by @​weirdan in https://github.com/vimeo/psalm/pull/10772

Fixes

• Improve randomizer stubs by @​danog in https://github.com/vimeo/psalm/pull/10709
• Fix detecting magic static methods by @​issidorov in https://github.com/vimeo/psalm/pull/10704
• Fix non-empty-lowercase-string handling with literal non-lowercase strings by @​kkmuffme in https://github.com/vimeo/psalm/pull/10722
• Fix RiskyTruthyFalsyComparison irrelevant errors when there is no explicit truthy/falsy type by @​kkmuffme in https://github.com/vimeo/psalm/pull/10733
• Allow Override attribute to be used in pure contexts by @​weirdan in https://github.com/vimeo/psalm/pull/10734
• Revert "Allow tainted numerics except for 'html' and 'has_quotes'" by @​ohader in https://github.com/vimeo/psalm/pull/10729
• Fix loading stubs from phar file on Windows by @​weirdan in https://github.com/vimeo/psalm/pull/10748
• Fix a false flag issue with InvalidConstantAssignmentValue by @​MelechMizrachi in https://github.com/vimeo/psalm/pull/10738
• Set inside_isset false when analyzing ArrayDimFetch index by @​edsrzf in https://github.com/vimeo/psalm/pull/10752
• Set inside_isset = false when analyzing arguments by @​edsrzf in https://github.com/vimeo/psalm/pull/10753
• Fix PHP notice - crash on invalid taint-escape by @​kkmuffme in https://github.com/vimeo/psalm/pull/10760
• Fix version comparison for @since by @​weirdan in https://github.com/vimeo/psalm/pull/10764
• Since annotations outside phpstub should not infer php version by @​kkmuffme in https://github.com/vimeo/psalm/pull/10769
• Backport WeakMap iterator fix from master by @​weirdan in https://github.com/vimeo/psalm/pull/10778
• Namespace anonymous classes by @​weirdan in https://github.com/vimeo/psalm/pull/10779
• Update CallMap for sqlsrv_connect and sqlsrv_errors to match reflection by @​theodorejb in https://github.com/vimeo/psalm/pull/10781
• $resource parameter of mkdir() is nullable since PHP 7.3 by @​weirdan in https://github.com/vimeo/psalm/pull/10802
• Use wider class-string when combining class strings with intersections by @​weirdan in https://github.com/vimeo/psalm/pull/10800

Internal changes

• Use TaintKind/TaintKindGroup constants instead of string values by @​ohader in https://github.com/vimeo/psalm/pull/10746
• Skip symlink test on Windows by @​weirdan in https://github.com/vimeo/psalm/pull/10749
• Avoid duplicating code for RiskyTruthyFalsyComparison by @​theodorejb in https://github.com/vimeo/psalm/pull/10765
• fix PHP 8 tests running with wrong --php-version=/phpVersion= if not explicitly specified by @​kkmuffme in https://github.com/vimeo/psalm/pull/10776
• CS fix by @​weirdan in https://github.com/vimeo/psalm/pull/10801

New Contributors

• @​MelechMizrachi made their first contribution in https://github.com/vimeo/psalm/pull/10738

Full Changelog: vimeo/psalm@5.22.2...5.23.0

v5.22.2

Compare Source

What's Changed

Fixes

• Catch missing classlike exceptions during scanning by @​weirdan and @​ohader in https://github.com/vimeo/psalm/pull/10720

Full Changelog: vimeo/psalm@5.22.1...5.22.2

v5.22.1

Compare Source

What's Changed

Fixes

• Improve parsing of @psalm-type by @​weirdan in https://github.com/vimeo/psalm/pull/10713

Full Changelog: vimeo/psalm@5.22.0...5.22.1

v5.22.0

Compare Source

What's Changed

Features

• Allow inline comments in typedef shapes by @​weirdan in https://github.com/vimeo/psalm/pull/10623
• allow typedef imports from any kind of classlike by @​weirdan in https://github.com/vimeo/psalm/pull/10625
• Allow enum cases to be global constants by @​weirdan in https://github.com/vimeo/psalm/pull/10634
• New InvalidOverride issue for Override attribute by @​edsrzf in https://github.com/vimeo/psalm/pull/10644
• Analyze dynamic names for static property and const fetches by @​edsrzf in https://github.com/vimeo/psalm/pull/10629
• New MissingOverrideAttribute issue by @​edsrzf in https://github.com/vimeo/psalm/pull/10651
• Flag stdClass::__construct() calls that have arguments by @​weirdan in https://github.com/vimeo/psalm/pull/10661
• Improve Reflection stubs by @​vudaltsov in https://github.com/vimeo/psalm/pull/10091
• Forbid constructors from returning any values by @​weirdan in https://github.com/vimeo/psalm/pull/10686
• Report first class callables generated for unknown static methods by @​weirdan in https://github.com/vimeo/psalm/pull/10691
• Process @psalm-this-out on __construct() as well by @​weirdan in https://github.com/vimeo/psalm/pull/10690
• Report invalid number of arguments for psalm-taint-* by @​staabm in https://github.com/vimeo/psalm/pull/10699

Fixes

• Fix ownerDocument type in dom-ext classes by @​fluffycondor in https://github.com/vimeo/psalm/pull/10619
• Fix numeric scalar validate filter var input return type wrong by @​kkmuffme in https://github.com/vimeo/psalm/pull/10621
• Stable baseline by @​weirdan in https://github.com/vimeo/psalm/pull/10633
• Allow sebastian/diff v6 by @​simPod in https://github.com/vimeo/psalm/pull/10639
• CallMap: Adjust return type for inotify_add_watch() to int|false by @​UlrichEckhardt in https://github.com/vimeo/psalm/pull/10637
• Fix check-type when using builtin types from within a namespace by @​robchett in https://github.com/vimeo/psalm/pull/10648
• Do not add callable as a native property type by @​weirdan in https://github.com/vimeo/psalm/pull/10654
• Fix additional places where base_dir was broken due to missing separator by @​kkmuffme in https://github.com/vimeo/psalm/pull/10630
• Late binding of enum cases by @​weirdan in https://github.com/vimeo/psalm/pull/10655
• Suppress UndefinedClass in whatever_exists() by @​weirdan in https://github.com/vimeo/psalm/pull/10659
• Fix parsing magic method annotations by @​issidorov in https://github.com/vimeo/psalm/pull/10665
• Strip callmap prefixes from parameter names by @​weirdan in https://github.com/vimeo/psalm/pull/10666
• Narrow ord() return type to int<0,255> by @​weirdan in https://github.com/vimeo/psalm/pull/10676
• Template union object incorrect assertions by @​robchett in https://github.com/vimeo/psalm/pull/10677
• Don't show backtrace in InvalidDocblock issue message by @​weirdan in https://github.com/vimeo/psalm/pull/10679
• Class consts in array shapes by @​weirdan in https://github.com/vimeo/psalm/pull/10678
• Prevent mixed|null by @​robchett in https://github.com/vimeo/psalm/pull/10675

Internal changes

• Drop unused local composer repo by @​weirdan in https://github.com/vimeo/psalm/pull/10647
• Clarify that Pull request labels failure is to be resolved by maintainers by @​weirdan in https://github.com/vimeo/psalm/pull/10649
• Fix unstable hasFullyQualified(Interface|Enum)() by @​weirdan in https://github.com/vimeo/psalm/pull/10603
• Revert partial mistakenly pushed fix by @​danog in https://github.com/vimeo/psalm/pull/10671

Full Changelog: vimeo/psalm@5.21.1...5.22.0

v5.21.1

Compare Source

What's Changed

Fixes

• Fix baseline loading for path specified on the command line by @​weirdan in https://github.com/vimeo/psalm/pull/10628

Full Changelog: vimeo/psalm@5.21.0...5.21.1

v5.21.0

Compare Source

What's Changed

Features

• Allow importing typedefs from enums by @​weirdan in https://github.com/vimeo/psalm/pull/10617

Fixes

• Fix #​10552 by @​danog in https://github.com/vimeo/psalm/pull/10572
• Unit test improvements for php-parser 5 by @​edsrzf in https://github.com/vimeo/psalm/pull/10574
• Fix template replacement edge case by @​klimick in https://github.com/vimeo/psalm/pull/10586
• Switch condition order by @​edsrzf in https://github.com/vimeo/psalm/pull/10594
• Partial revert "Fix auto completion by partial property or method" by @​issidorov in https://github.com/vimeo/psalm/pull/10588
• [LSP] Add issue type in description by @​weirdan in https://github.com/vimeo/psalm/pull/10607
• Do not validate callable arguments in lenient contexts by @​weirdan in https://github.com/vimeo/psalm/pull/10601
• readgzfile() is impure by @​weirdan in https://github.com/vimeo/psalm/pull/10600
• Allow properties on intersections with enum interfaces by @​weirdan in https://github.com/vimeo/psalm/pull/10599
• key_exists() is an alias for array_key_exists() by @​weirdan in https://github.com/vimeo/psalm/pull/10598
• Fix language server running with opcache.save_comments=0 by @​weirdan in https://github.com/vimeo/psalm/pull/10614
• Report MissingConstructor for natively typed mixed properties by @​weirdan in https://github.com/vimeo/psalm/pull/10615

Internal changes

• Bump actions/cache from 3 to 4 by @​dependabot in https://github.com/vimeo/psalm/pull/10584
• Baseline update by @​jorgsowa in https://github.com/vimeo/psalm/pull/10593
• Re-work CheckTrivialExprVisitor by @​edsrzf in https://github.com/vimeo/psalm/pull/10612
• Minor php-parser tweaks by @​edsrzf in https://github.com/vimeo/psalm/pull/10605

New Contributors

• @​jorgsowa made their first contribution in https://github.com/vimeo/psalm/pull/10593

Full Changelog: vimeo/psalm@5.20.0...5.21.0

v5.20.0

Compare Source

What's Changed

Features

• report error for non-strict or empty comparison on truthy+falsy union by @​kkmuffme in https://github.com/vimeo/psalm/pull/10502

Fixes

• Fix template, conditional array keys by @​danog in https://github.com/vimeo/psalm/pull/10568

Full Changelog: vimeo/psalm@5.19.1...5.20.0

v5.19.1

Compare Source

What's Changed

Fixes

• Deprecated Template Classes are not ignored by @​psalm-suppress DeprecatedClass by @​samlitowitz in https://github.com/vimeo/psalm/pull/10518
• Implement __set method in SimpleXMLElement stub by @​kthaler in https://github.com/vimeo/psalm/pull/10536
• Make getrandmax type more specific and unserialize to require class-string by @​kkmuffme in https://github.com/vimeo/psalm/pull/10540
• Fix mb_get_info can return null - CI failing bc of reflection by @​kkmuffme in https://github.com/vimeo/psalm/pull/10543
• make basename & dirname return types more specific by @​kkmuffme in https://github.com/vimeo/psalm/pull/10545
• add support for extract to set variables for keyed arrays and respect EXTR_SKIP by @​kkmuffme in https://github.com/vimeo/psalm/pull/10544
• remove redundat directory separator which caused "//" in path not found errors by @​kkmuffme in https://github.com/vimeo/psalm/pull/10542
• Fix empty literal string becomes non-empty-string by @​kkmuffme in https://github.com/vimeo/psalm/pull/10499

New Contributors

• @​samlitowitz made their first contribution in https://github.com/vimeo/psalm/pull/10518
• @​kthaler made their first contribution in https://github.com/vimeo/psalm/pull/10536

Full Changelog: vimeo/psalm@5.19.0...5.20.0

v5.19.0

Compare Source

What's Changed

Features

• Reduce memory consumption of caching and parallel processing without igbinary by @​sj-i in https://github.com/vimeo/psalm/pull/10532
• filter_input & filter_var return type more specific by @​kkmuffme in https://github.com/vimeo/psalm/pull/10498

Fixes

• strtok always returns a non-empty-string when it does not return false by @​kkmuffme in https://github.com/vimeo/psalm/pull/10497
• Fix #​10512: Fixed SessionUpdateTimestampHandlerInterface parameter names by @​zerkms in https://github.com/vimeo/psalm/pull/10524
• Fix GH-10465 by @​florisluiten in https://github.com/vimeo/psalm/pull/10483
• Fix callable without args not handled correctly by @​kkmuffme in https://github.com/vimeo/psalm/pull/10500
• Add error when using readonly property in by-ref arg by @​kkmuffme in https://github.com/vimeo/psalm/pull/10505
• fix: #​10496 #​10503 by @​ging-dev in https://github.com/vimeo/psalm/pull/10508

New Contributors

• @​florisluiten made their first contribution in https://github.com/vimeo/psalm/pull/10483

Full Changelog: vimeo/psalm@5.18.0...5.19.0

v5.18.0

Compare Source

What's Changed

Features

• Add support for Override attribute by @​delolmo in https://github.com/vimeo/psalm/pull/10493

Fixes

• Fix #​10460 by @​danog in https://github.com/vimeo/psalm/pull/10464
• Emit AfterCodebasePopulatedEvent even on partial scans by @​danog in https://github.com/vimeo/psalm/pull/10457
• Small assertion fix by @​danog in https://github.com/vimeo/psalm/pull/10455
• Fix shaped array class string key combination by @​danog in https://github.com/vimeo/psalm/pull/10450
• Fix remaining POSIX-only absolute path detection by @​theodorejb in https://github.com/vimeo/psalm/pull/10452
• dont combine empty string with numeric-string by @​kkmuffme in https://github.com/vimeo/psalm/pull/10459
• Fix type not equal when parent by @​kkmuffme in https://github.com/vimeo/psalm/pull/10477
• Use same parameter names in stubs by @​danog in https://github.com/vimeo/psalm/pull/10480
• fix false positive ArgumentTypeCoercion for callback param by @​kkmuffme in https://github.com/vimeo/psalm/pull/10454
• report error for invalid array key type by @​kkmuffme in https://github.com/vimeo/psalm/pull/10481
• fix literal int/string comparisons only using one literal by @​kkmuffme in https://github.com/vimeo/psalm/pull/10484
• add InvalidArgument error when passing false to true param by @​kkmuffme in https://github.com/vimeo/psalm/pull/10488
• Fix Uncaught RuntimeException: PHP Error: Uninitialized string offset 0 when $pattern is empty by @​iMu3ic in https://github.com/vimeo/psalm/pull/10489

Internal changes

• fix composer scripts running with inconsistent php versions by @​kkmuffme in https://github.com/vimeo/psalm/pull/10463
• update fidry/cpu-core-counter dependency by @​kkmuffme in https://github.com/vimeo/psalm/pull/10456
• fix psalm v4 hardcoded in tests by @​kkmuffme in https://github.com/vimeo/psalm/pull/10475

New Contributors

• @​iMu3ic made their first contribution in https://github.com/vimeo/psalm/pull/10489
• @​delolmo made their first contribution in https://github.com/vimeo/psalm/pull/10493

Full Changelog: vimeo/psalm@5.17.0...5.18.0

v5.17.0

Compare Source

What's Changed

Features

• Implement by-ref closure use analysis by @​danog in https://github.com/vimeo/psalm/pull/10419

Fixes

• Update MongoDB stubs for 1.17 by @​alcaeus in https://github.com/vimeo/psalm/pull/10402
• Fix backtick analysis by @​danog in https://github.com/vimeo/psalm/pull/10409
• Declare we do not support document highlighting by @​tm1000 in https://github.com/vimeo/psalm/pull/10408
• update define types to be correct by @​kkmuffme in https://github.com/vimeo/psalm/pull/10423
• Fix return type of DOMXPath::query by @​nielsdos in https://github.com/vimeo/psalm/pull/10443
• Fix CLI -r error by @​kkmuffme in https://github.com/vimeo/psalm/pull/10442
• Use correct file path while adding unused suppressions for virtual __… by @​danog in https://github.com/vimeo/psalm/pull/10434
• Restore support for null coalesce on match expressions by @​tscni in https://github.com/vimeo/psalm/pull/10422
• Fix static magic method pureness not being inherited from traits by @​tscni in https://github.com/vimeo/psalm/pull/10429
• Fix POSIX only detection of absolute paths by @​rarila in https://github.com/vimeo/psalm/pull/10441
• Emit UnusedPsalmSuppress issues for suppressed issues already removed by @​danog in https://github.com/vimeo/psalm/pull/10431
• Use keyed arrays when assigning literal union keys & assertion fixes by @​danog in https://github.com/vimeo/psalm/pull/10439

Internal changes

• use branch name to randomize tests to ensure test dependencies will error by @​kkmuffme in https://github.com/vimeo/psalm/pull/10424

New Contributors

• @​nielsdos made their first contribution in https://github.com/vimeo/psalm/pull/10443

Full Changelog: vimeo/psalm@5.16.0...5.17.0

v5.16.0

Compare Source

What's Changed

Features

• Show success message and type stats with GHA formatter by @​weirdan in https://github.com/vimeo/psalm/pull/10145
• New sinks for TaintedCallable #​10117 by @​cgocast in https://github.com/vimeo/psalm/pull/10154
• Properly inherit assertions from parents or implemented faces by @​boesing in https://github.com/vimeo/psalm/pull/10157
• Flag invalid declares by @​weirdan in https://github.com/vimeo/psalm/pull/10176
• Narrow ArrayObject TKey template by @​boesing in https://github.com/vimeo/psalm/pull/10190
• Allow object assertions for mixed values by @​boesing in https://github.com/vimeo/psalm/pull/10207
• Issue handlers priority by @​gmessier in https://github.com/vimeo/psalm/pull/10202
• Check for declare strict_types in block mode by @​tuqqu in https://github.com/vimeo/psalm/pull/10234
• feat(LSP): Improve the autocomplete for nested array shape by @​ging-dev in https://github.com/vimeo/psalm/pull/10230
• Add alias support to psalm-check-type by @​robchett in https://github.com/vimeo/psalm/pull/10264
• Allow parameter names in callable docblocks with templates by @​robchett in https://github.com/vimeo/psalm/pull/10261
• Disallow never type for parameters by @​tuqqu in https://github.com/vimeo/psalm/pull/10266
• Fix auto completion by partial property or method by @​issidorov in https://github.com/vimeo/psalm/pull/10320
• Add stubs for rdKafka by @​robchett in https://github.com/vimeo/psalm/pull/10351
• Suppressing NoValue should not treat subsequent code as unevaluated by @​kkmuffme in https://github.com/vimeo/psalm/pull/10303
• Fix misc callable bugs by @​kkmuffme in https://github.com/vimeo/psalm/pull/10370

Fixes

• Added more gc_status return fields by @​weirdan in https://github.com/vimeo/psalm/pull/10138
• Filter baseline when checking individual files by @​edsrzf in https://github.com/vimeo/psalm/pull/10115
• Assertion enhancements regarding value-of in combination with backed enums by @​boesing in https://github.com/vimeo/psalm/pull/10150
• strrchr(): $before_needle parameter by @​weirdan in https://github.com/vimeo/psalm/pull/10151
• Update mysqli stub by @​weirdan in https://github.com/vimeo/psalm/pull/10155
• Fix crash on property access to undefined property on a class with a missing dependncy by @​weirdan in https://github.com/vimeo/psalm/pull/10159
• Prevent infinite-loop when resolving type-aliases by @​boesing in https://github.com/vimeo/psalm/pull/10156
• InheritorViolation was only being triggered on grand-childen classes by @​robchett in https://github.com/vimeo/psalm/pull/10169
• Restore support for namespaced functions in referencedFunction config by @​tscni in https://github.com/vimeo/psalm/pull/10186
• DateTimeZone::getName() always returns non-empty-string by @​gsteel in https://github.com/vimeo/psalm/pull/10187
• Only the binary op 'plus' works with two arrays by @​robchett in https://github.com/vimeo/psalm/pull/10209
• Add openssl_*_export_to_file to impure functions by @​robchett in https://github.com/vimeo/psalm/pull/10210
• add FILTER_SANITIZE_URL filter to filter_var by @​kkmuffme in https://github.com/vimeo/psalm/pull/10214
• Allow class-string where T is a union by @​MidnightDesign in https://github.com/vimeo/psalm/pull/10194
• Loop over PDOStatement::fetch() arguments by @​cgocast in https://github.com/vimeo/psalm/pull/10237
• Inherited assertions v2 by @​boesing in https://github.com/vimeo/psalm/pull/10189
• Resolve inherited conditional return types by @​boesing in https://github.com/vimeo/psalm/pull/10191
• Allow stringable objects in sprintf() values by @​MidnightDesign in https://github.com/vimeo/psalm/pull/10231
• fix: #​10239 by @​ging-dev in https://github.com/vimeo/psalm/pull/10240
• Remove duplicate namespace in InternalMethod error message by @​kkmuffme in https://github.com/vimeo/psalm/pull/10241
• Add stream_socket_shutdown socket_shutdown to impure function list by @​tuqqu in https://github.com/vimeo/psalm/pull/10244
• Emit MethodSignatureMismatch when descendant does not return by reference by @​tuqqu in https://github.com/vimeo/psalm/pull/10248
• Negated class_exist check on class-string converts to string instead of mixed by @​robchett in https://github.com/vimeo/psalm/pull/10262
• Fix error message for implicitly returning functions with never return type by @​tuqqu in https://github.com/vimeo/psalm/pull/10254
• Type check nested templates by @​klimick in https://github.com/vimeo/psalm/pull/10271
• Fix return of BadSqlTainter::afterExpressionAnalysis() by @​cgocast in https://github.com/vimeo/psalm/pull/10270
• Allow tainted numerics except for 'html' and 'has_quotes' by @​cgocast in https://github.com/vimeo/psalm/pull/10242
• fix final class constant type by @​kk-daniel in https://github.com/vimeo/psalm/pull/10279
• Fix inferring enum case value from a class constant by @​tuqqu in https://github.com/vimeo/psalm/pull/10274
• fix: #​10080 by @​ging-dev in https://github.com/vimeo/psalm/pull/10228
• Fix memory explosion with calls to method_exists by @​robchett in https://github.com/vimeo/psalm/pull/10290
• Additional caching fixes by @​ging-dev in https://github.com/vimeo/psalm/pull/10289
• str_replace / substr_replace signature improvements by [@​math

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud