[dependabot]

Bumps the composer-development group with 3 updates: phpstan/phpstan, rector/rector and symplify/easy-coding-standard.

Updates phpstan/phpstan from 2.3.1 to 2.3.4

Commits

• See full diff in compare view

Updates rector/rector from 2.7.0 to 2.8.2

Release notes

Sourced from rector/rector's releases.

Released Rector 2.8.2

Leaner PHPDoc stack and a fluent composer-based config 🚀

This release leans on phpstan/phpdoc-parser directly: Rector drops its own forked parser, printer, token iterator and type-node subclasses, and reuses the upstream parser, format-preserving printer, node traverser and type nodes. Fewer moving parts, one source of truth for PHPDoc handling, and it rides the PHPStan 2.3.3 bump. Thanks @​ondrejmirtes.

On the config side, withComposerBased() now auto-detects installed packages when called with no argument, and a fluent withComposerBasedRule() builder lands across core and the rector-* sets.

New features 🥳

• Add withComposerBasedRule() to the fluent RectorConfig::configure() builder (#8875)
• [Configuration] Auto-detect installed packages in withComposerBased() called with no argument (#8748) Thanks @​MadBox-99
• [TypeDeclaration] Prefer same-namespace classes over global PHPDoc types (#8869) Thanks @​MohannadElemary
• [dx] Report rule-scoped skips that matched a file but never changed it (#8853)

Performance Improvements 🚀

• Reduce memory usage on the LPT bucket by recycling workers and keeping files in discovery order (#8867) Thanks @​samsonasik
• Cache skip-filtered rules per node class for the current file in RectorRegistry::forNodeAndFile() (#8860) Thanks @​samsonasik
• Remove unneeded array_values() when arrays are already lists or called too early (#8857) Thanks @​samsonasik

Bugfixes 🐛

• [Php80] TernaryToNullsafeCoalesceRector: fix a redundant nullsafe property access under coalesce (#8864)
• [Php71] BinaryOpBetweenNumberAndStringRector: skip an array dim fetch (#8862)
• Resolve the item type of a union of arrays in ArrayCallbackParamTypeResolver (#8874) Thanks @​SanderMuller
• Sort root files in withRootFiles() to keep the cache hash stable (#8870) Thanks @​M-arcus
• Keep fixture lock files out of fixture directories (#8873) Thanks @​localheinz
• Check the configuration cache only in the main process (#8851) Thanks @​SanderMuller
• Restore preload-split-package.php to fix a PHPStan Turbo notice on rector-* packages (#8865) Thanks @​samsonasik
• Fix Windows CI tests under PHPStan Turbo (#8866, #8868) Thanks @​samsonasik

Internals ⚙️

• Use the phpstan/phpdoc-parser stack directly: parser without subclass, format-preserving printer, NodeTraverser, and move union dedup/array printing into type mappers (#8871, #8863, #8855, #8858) Thanks @​ondrejmirtes
• Remove the forked BetterTokenIterator, the BracketsAwareIntersectionTypeNode, and type-node subclasses that only changed __toString() (#8856, #8876, #8872) Thanks @​ondrejmirtes
• Bump to PHPStan 2.3.3 and remove stale workarounds (#8859) Thanks @​ondrejmirtes
• [cs] Apply the no-slash rule (#8852)

rector-doctrine 🟠

... (truncated)

Commits

• 03a365d Rector 2.8.2
• f5c6ce3 Updated Rector to commit bb468100badd8b7748466395cd0d9be89a042656
• 50fcdc5 Updated Rector to commit bb468100badd8b7748466395cd0d9be89a042656
• ccc0033 Updated Rector to commit 0bd315b21ef1f81c4bec3f39e806427adad11aaf
• fd0abe1 Updated Rector to commit 0bd315b21ef1f81c4bec3f39e806427adad11aaf
• 90572b3 Updated Rector to commit 30895a06b85e867f64a21c3d4c8cbe8ea9ac584a
• 3229890 Updated Rector to commit 66649dc0aef713bf3e437308b6ad7cd07b64f4f5
• 3b62dea Updated Rector to commit 6d207283128188853de50a3d3b46e97af32fb3b4
• a7dd784 Updated Rector to commit 1dcde919ca88e013b6558ed98b111018d1743875
• f8b90b1 Updated Rector to commit 80ce9c2040bd156b7b34f209820789891955fdb9
• Additional commits viewable in compare view

Updates symplify/easy-coding-standard from 13.3.8 to 13.3.11

Release notes

Sourced from symplify/easy-coding-standard's releases.

Released ECS 13.3.11

Improvements 🎉

New RemoveSlashFromNativeConstantFixer

Removes the leading backslash from true, false and null, turning \true into true. Only standalone keywords are touched - namespace segments like Foo\true or \true\Bar are left intact. Added to the namespaces set.

ecsphp/ecs-src#220

blink parity

The new fixer is ported to the blink Go runner, keeping both engines in sync.

ecsphp/ecs-src#221

Released ECS 13.3.10

Improvements 🎉

Leading-space console output

Bumps entropy/entropy to ^0.4.35. Listing items and success/warning/error status lines now start with a leading space, matching Rector / Symfony console output.

ecsphp/ecs-src#219

Released ECS 13.3.9

News Features 🎉

Readable run footer

The run footer printed after a check - e.g. // 120 files · 2.3 s · 42 MB - is greyed and separated by a blank line above. The grey now uses bright black, so it stays readable on both light and dark terminal backgrounds. Mirrored in blink.

ecsphp/ecs-src#216, ecsphp/ecs-src#217, ecsphp/ecs-src#218

as alias in blink OrderedImports

blink's OrderedImports now includes the as alias in its sort key, matching the PHP fixer.

ecsphp/ecs-src#214

Bugfixes 🐛

rector/swiss-knife open works alongside ECS

Drops symfony/process from Composer replace, so installing ECS no longer blocks rector/swiss-knife open.

ecsphp/ecs-src#215

Commits

• 3e1b33d ECS 13.3.11
• 23c1173 Updated ECS to commit 816aa0bb8e659c09430e2fc108c6e0b7f83b9334
• 0a8d2e7 Updated ECS to commit a74f5e0352e740751680b882cc2c4510b5bcaa8e
• c1fea8e ECS 13.3.10
• 9c848ee Updated ECS to commit 29afbe92e5c5a47160801081dc2f8ca4b68d75a9
• c4c68c8 ECS 13.3.9
• 675bf7d Updated ECS to commit 54fedf4f96efee190d87fe6b065ea971c86d8089
• 31639e7 Updated ECS to commit 9ec0c2438bf6d86d943c381296016d8dfc01c126
• 384936d Updated ECS to commit 308f1578e285a79eec0d1902be5b735837fb10e8
• da3bd89 Updated ECS to commit 108ba78836b226ae019c4c97fa9ebd9604d56169
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions