chore(deps): update dependency vimeo/psalm to v7

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
vimeo/psalm	^6.14.2 -> ^7.0.0-beta14

---

Release Notes

vimeo/psalm (vimeo/psalm)

v7.0.0-beta14

Compare Source

What's Changed

Features

• More detailed progress for taint graph resolution by @​danog in #​11349
• Huge performance improvements for taint analysis by @​danog in #​11342
• Show progress when merging thread results by @​danog in #​11374
• Combined analysis by @​danog in #​11384
• Always run taint analysis by default by @​danog in #​11399

Fixes

• Fix assertions with empty lists by @​danog in #​11312
• Allow concatenation between (string|int) and similar types by @​haas-dtv in #​11364
• Fix conditional taints by @​danog in #​11628

Docs

• Update configuration.md: Adding --config= cli parameter by @​ThomasLandauer in #​11332

Other changes

• Tweak concurrency by @​danog in #​11361
• Fix paratest runs with default PHP unlike all other scripts by @​kkmuffme in #​11441

Full Changelog: vimeo/psalm@6.14.3...7.0.0-beta14

v7.0.0-beta13

Compare Source

What's Changed

Features

• Do not ignore null array offsets within isset by @​danog in #​11608

Full Changelog: vimeo/psalm@7.0.0-beta12...7.0.0-beta13

v7.0.0-beta12

Compare Source

What's Changed

Features

• Add PHP 8.5 support by @​MarjovanLier in #​11604
• Add PHP 8.5 support by @​danog

Fixes

• Replace unix clear command with ANSI escape codes to clear the screen by @​HenkPoley in #​11528

Internal changes

• Improve performance by avoiding repeated scanning of files included/required only once by @​mmcev106 in #​11478

Other changes

• feat(language server): add --on-open-debounce-ms by @​kk-daniel in #​11550
• fix(language server): fix --on-change-debounce-ms by @​kk-daniel in #​11549
• Replace deprecated __sleep method with __serialize by @​theodorejb in #​11563
• Fix the opcache status retrieval if restricted paths are set. by @​dmvrtx in #​11556
• Bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​11539
• fix: deprecations for PHP 8.5 by @​jorgsowa in #​11541
• ci: add nikic/php-parser deprecations to Psalm baseline by @​jorgsowa in #​11596
• fix: deprecated null offset by @​jorgsowa in #​11599
• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​11593

New Contributors

• @​dmvrtx made their first contribution in #​11556
• @​MarjovanLier made their first contribution in #​11604

Full Changelog: vimeo/psalm@7.0.0-beta11...7.0.0-beta12

v7.0.0-beta11

Compare Source

What's Changed

Features

• ✨ Full support for iterables for iterator_to_array by @​andrew-demb in #​11430
• Add an arrayCache configuration key that can be used to disable the newly introduced array cache: this will slightly slow down execution times while reducing RAM usage, avoiding OOM issues on bigger codebases by @​danog

Full Changelog: vimeo/psalm@7.0.0-beta10...7.0.0-beta11

v7.0.0-beta10

Compare Source

What's Changed

Fixes

• Fix false negatives with mixed in templated value-of/key-of by @​danog in #​11499
• Avoid tainting problems with first-class callables by @​danog

Full Changelog: vimeo/psalm@7.0.0-beta9...7.0.0-beta10

v7.0.0-beta9

Compare Source

Fixes:

• Normalize order of taint flow graph issues

Full Changelog: vimeo/psalm@7.0.0-beta8...7.0.0-beta9

v7.0.0-beta8

Compare Source

This release syncs up the 7.x branch with the 6.x branch.

What's Changed

Features

• Add plugin hook to polyfill custom autoloaders by @​danog in #​11422
• Implement cache consolidation with --consolidate-cache flag by @​danog in #​11450
• Add ignoreIncludeSideEffects configuration key by @​danog in #​11451

Fixes

• Fix #​11420 by @​danog in #​11421
• Cache refactoring by @​danog in #​11415
• Fix crash on numeric annotation by @​VincentLanglet in #​11445
• Disable diffing if not in diff run by @​danog in #​11447
• Update stubs for ext-mongodb 2.0 by @​alcaeus in #​11453
• Update stubs for ext-mongodb 2.1 by @​alcaeus in #​11454

Docs

• [Doc] Clarify union vs. intersection for numeric supertype by @​kylekatarnls in #​11444

Other changes

• Fix paratest runs with default PHP unlike all other scripts by @​kkmuffme in #​11441

New Contributors

• @​kylekatarnls made their first contribution in #​11444

Full Changelog: vimeo/psalm@7.0.0-beta7...7.0.0-beta8

v7.0.0-beta7

Compare Source

What's Changed

Fixes

• Deprecate reflection's setAccessible on 8.1 by @​danog in #​11401
• InvalidNamedArgument "objectOrClass" for ReflectionClass constructor due to incorrect stub by @​savinmikhail in #​11407
• DateTimeImmutable::setTimestamp rename argument to $timestamp by @​savinmikhail in #​11409
• fix: alter of ClassMustBeFinal inserts final before attributes by @​Tofandel in #​11390
• Add fix for PropertyHooks by @​craig-mcmahon in #​11411
• Disable diff mode by @​danog in #​11416

Other changes

• Better types for mb_substitute_character by @​danog in #​11400

New Contributors

• @​savinmikhail made their first contribution in #​11407
• @​craig-mcmahon made their first contribution in #​11411

Full Changelog: vimeo/psalm@7.0.0-beta6...7.0.0-beta7

v7.0.0-beta6

Compare Source

What's Changed

Features

• Enable taint analysis by default.

Fixes

• Deprecate reflection's setAccessible on 8.1 by @​danog in #​11401

Other changes

• Better types for mb_substitute_character by @​danog in #​11400

Full Changelog: vimeo/psalm@7.0.0-beta5...7.0.0-beta6

v7.0.0-beta5: Combined analysis!

Compare Source

This beta release adds a major new feature to Psalm v7: combined analysis!

Combined analysis allows running normal analysis, security analysis and dead code analysis all at the same time, within a single run, greatly reducing overall runtimes!

Future beta releases will also enable taint analysis by default, given that now it can be run alongside normal analysis.

What's Changed

Features

• Combined analysis by @​danog in #​11384

Full Changelog: vimeo/psalm@7.0.0-beta4...7.0.0-beta5

v7.0.0-beta4

Compare Source

Join the new official Psalm news channel and the Psalm community!

The news channel will be used to share inside exclusive news about upcoming Psalm features (including property hook support, coming within the next few releases!), and the community group can be used to discuss and share the way you use Psalm!

What's Changed

Features

• Add forceJit and noCache configuration keys by @​danog in #​11380
• Add rank to SARIF report by @​danog in #​11383

Full Changelog: vimeo/psalm@7.0.0-beta3...7.0.0-beta4

v7.0.0-beta3

Compare Source

Add git and composer to the docker image by @​danog.

Full Changelog: vimeo/psalm@7.0.0-beta2...7.0.0-beta3

v7.0.0-beta2

Compare Source

What's Changed

Features

• Show progress when merging thread results by @​danog in #​11374

Fixes

• Fix some possible JIT crashes in official docker image by @​danog
• Improve stub generation by @​danog
• Hotfix #​11363 by @​danog in #​11366
• Allow concatenation between (string|int) and similar types by @​haas-dtv in #​11364
• Backport #​11364 to 6.x by @​haas-dtv in #​11369
• Merge multiple docblocks for statements by @​robchett in #​11371

Internal changes

• Bump docker image to 8.4.5 by @​danog in #​11367

Full Changelog: vimeo/psalm@7.0.0-beta1...7.0.0-beta2

v7.0.0-beta1: First Psalm v7 beta!

Compare Source

Announcing the first public beta of Psalm v7!

Psalm v7 brings huge performance improvements to security analysis, up to 10x thanks to a full refactoring of both the internal representation of taints, and optimization of the graph resolution logic.

It also brings performance improvements to dead code analysis, and fixes for list types.

Even more performance improvements and new features will be released soon!

What's Changed

Breaking changes

See here for the full list of breaking changes between v6 and v7.

Features

• Huge performance improvements for taint analysis by @​danog in #​11342
• More detailed progress for taint graph resolution and JIT compilation by @​danog in #​11349

Fixes

• Fix assertions with empty lists by @​danog in #​11312

Other changes

• Tweak concurrency by @​danog in #​11361

Full Changelog: vimeo/psalm@6.9.0...7.0.0-beta1

v6.14.3

Compare Source

What's Changed

Fixes

• Remove redefinition of Attribute constants. by @​hschletz in #​11625
• Remove usages of deprecated curl_close() function by @​theodorejb in #​11626
• Declare NoDiscard attribute as immutable by @​Baptouuuu in #​11611
• dependencies : allow symfony 8 by @​NicolasDievart in #​11594

Internal changes

• Bump actions/cache from 4 to 5 by @​dependabot[bot] in #​11623

Other changes

New Contributors

• @​hschletz made their first contribution in #​11625
• @​Baptouuuu made their first contribution in #​11611
• @​NicolasDievart made their first contribution in #​11594

Full Changelog: vimeo/psalm@6.14.2...6.14.3

---

Configuration

📅 Schedule: Branch creation - "before 5am on tuesday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[SebastianKrupinski]

Lets wait for v7 stable