composer(deps-dev): bump the minor-patch-dependencies group with 5 updates

[dependabot]

Updates the requirements on aws/aws-sdk-php, mimmi20/coding-standard, phpstan/phpstan, rector/rector and tomasvotruba/unused-public to permit the latest version.
Updates aws/aws-sdk-php to 3.316.8

Release notes

Sourced from aws/aws-sdk-php's releases.

Version 3.316.8

• Aws\ElasticLoadBalancingv2 - This release adds support for sharing trust stores across accounts and organizations through integration with AWS Resource Access Manager.
• Aws\ApplicationSignals - CloudWatch Application Signals now supports application logs correlation with traces and operational health metrics of applications running on EC2 instances. Users can view the most relevant telemetry to troubleshoot application health anomalies such as spikes in latency, errors, and availability.
• Aws\ECR - API and documentation updates for Amazon ECR, adding support for creating, updating, describing and deleting ECR Repository Creation Template.
• Aws\DataZone - Introduces GetEnvironmentCredentials operation to SDK
• Aws\BedrockRuntime - Provides ServiceUnavailableException error message
• Aws\SFN - This release adds support to customer managed KMS key encryption in AWS Step Functions.
• Aws\EC2 - EC2 Fleet now supports using custom identifiers to reference Amazon Machine Images (AMI) in launch requests that are configured to choose from a diversified list of instance types.
• Aws\CodeCommit - CreateRepository API now throws OperationNotAllowedException when the account has been restricted from creating a repository.
• Aws\EKS - This release adds support for EKS cluster to manage extended support.
• Aws\ApplicationAutoScaling - Application Auto Scaling is now more responsive to the changes in demand of your SageMaker Inference endpoints. To get started, create or update a Target Tracking policy based on High Resolution CloudWatch metrics.
• Aws\Outposts - Adding default vCPU information to GetOutpostSupportedInstanceTypes and GetOutpostInstanceTypes responses
• Aws\NetworkFirewall - You can now log events that are related to TLS inspection, in addition to the existing alert and flow logging.

Commits

• 9aff2e6 3.316.8 release
• fc2cf38 Update models for release
• 57ef050 3.316.7 release
• 93f19d9 Update models for release
• 230094a 3.316.6 release
• 5a25b3b Update models for release
• 1d89a73 3.316.5 release
• 11d7e69 Update models for release
• 9ad5067 chore: remove aws mobile hub service (#2963)
• 4f59484 enhancement: update to crt signing config (#2958)
• See full diff in compare view

Updates mimmi20/coding-standard to 5.2.37

Commits

• 2c5770a Merge pull request #533 from mimmi20/dependabot/composer/master/squizlabs/php...
• 5ca0fa2 update pipelines and configs
• 86f8981 composer(deps): update squizlabs/php_codesniffer requirement
• 0b659e0 Merge pull request #531 from mimmi20/dependabot/github_actions/master/minor-p...
• d8b8fa9 update config
• 2d386d7 github-actions: bump raven-actions/actionlint
• c2fc5f9 Merge pull request #529 from mimmi20/dependabot/github_actions/master/minor-p...
• c8e3f0b update config
• 5d698f3 github-actions: bump shivammathur/setup-php
• d8d58d9 Merge pull request #528 from mimmi20/renovate/all-minor-patch-dependencies
• Additional commits viewable in compare view

Updates phpstan/phpstan to 1.11.8

Release notes

Sourced from phpstan/phpstan's releases.

1.11.8

Bleeding edge 🔪

• Report useless return values of function calls like var_export without $return=true (#3225), #11320, thanks @​staabm!
• Check mixed in binary operator (#3231), #7538, #10440, thanks @​schlndh!
• Check vprintf/vsprintf arguments against placeholder count (#3126), thanks @​staabm!
• Check mixed in unary operator (#3253), thanks @​schlndh!
• Report "missing return" error closer to where the return is missing (phpstan/phpstan-src@04f8636)
• Stricter ++/-- operator check (#3255), thanks @​schlndh!
• Check preg_quote delimiter sanity (#3252), #11338, thanks @​staabm!

If you want to see the shape of things to come and adopt bleeding edge features early, you can include this config file in your project's phpstan.neon:

includes:
	- vendor/phpstan/phpstan/conf/bleedingEdge.neon

Of course, there are no backwards compatibility guarantees when you include this file. The behaviour and reported errors can change in minor versions with this file included. Learn more

Improvements 🔧

• Precise array shape for $matches from preg_match() improvements:
  • RegexArrayShapeMatcher - trailling groups are not optional when PREG_UNMATCHED_AS_NULL (#3219), #11311, thanks @​staabm!
  • Fix preg_match named capturing groups (#3228), #11323, thanks @​staabm!
  • RegexArrayShapeMatcher - Fix optional groups with PREG_UNMATCHED_AS_NULL (#3229), thanks @​staabm!
  • Allow overriding the PHP 7.2 support for PREG_UNMATCHED_AS_NULL (#3226), thanks @​Seldaek!
  • RegexArrayShapeMatcher - Fix PREG_UNMATCHED_AS_NULL with optional leading groups (#3234), #11331, thanks @​staabm!
  • RegexArrayShapeMatcher - Support preg_quote()'d patterns (#3233), #11332, thanks @​staabm!
  • RegexArrayShapeMatcher - Fix PREG_UNMATCHED_AS_NULL with top level alternation (#3238), thanks @​staabm!
  • RegexArrayShapeMatcher - More precise non-empty-string and numeric-string (#3249), thanks @​staabm!
  • Fix regex parsing by completing the grammar (#3244), thanks @​Seldaek!
  • RegexArrayShapeMatcher - (\d*) can be empty-string (#3257), thanks @​staabm!
• Add diagnose command to run DiagnoseExtensions (phpstan/phpstan-src@22c84d2)
• Diagnose extension: Info about extensions installed via extension-installer (phpstan/phpstan-src@db71f04)
• Diagnose extension - where is PHPStan running from (phpstan/phpstan-src@76464ee)
• Parallel scheduler becomes DiagnoseExtension (phpstan/phpstan-src@c7c9689)
• ResultCacheManager: output restore time in debug mode (#3224), thanks @​janedbal!
• Add hint as to what might be wrong when invalid identifiers are used (#3230), thanks @​Seldaek!
• Optimize array_map with many arrays (phpstan/phpstan-src@09fbc92), #11297
• Improved sprintf() inference (#3232), thanks @​staabm!
• Print elapsed analysis time with -v (#3239, #3242), thanks @​janedbal!
• More precise sprintf() format arg-based return type (#3192), #11248, #10493, thanks @​staabm!

Bugfixes 🐛

• Fix return type of round/ceil/floor in non strict type environment (#3223), #11319, thanks @​BackEndTea!

... (truncated)

Commits

• 6adbd11 PHPStan 1.11.8
• c4c0269 Updated PHPStan to commit c4c02698414934def38e0e1a4a002a2c139d9242
• c9a6d2e Updated PHPStan to commit c9a6d2e61edfad189a765df3c3a06674a10d4fb5
• 101467d Updated PHPStan to commit 101467d47d75cc793baaec89abf858342436e25a
• 7c2d8b4 Updated PHPStan to commit 7c2d8b45c30bc1a445be34d736b286f876805e4f
• 4a0ffab Updated PHPStan to commit 4a0ffab348f87b874d80ac7d8289213d419fb860
• fec3501 Update baselines
• 9db34df Updated PHPStan to commit 9db34dfbdffb2442ca21d6765b0fbfeb0154745d
• 2223dd9 Updated PHPStan to commit 2223dd9623522c223357c556189e7ec5280dba59
• a1e697b Updated PHPStan to commit a1e697b6949371b02bba5a2164ccc2ded020dd5e
• Additional commits viewable in compare view

Updates rector/rector to 1.2.2

Release notes

Sourced from rector/rector's releases.

Released Rector 1.2.2

New Features 🥳

• [TypeDeclaration] Add ReturnTypeFromMockObjectRector (#6166)
• [TypeDeclaration] Add missing usage of ClassMethodReturnTypeOverrideGuard on ReturnTypeFromMockObjectRector (#6169)
• [TypeDeclaration] Add TypedPropertyFromCreateMockAssignRector (#6177)

Bugfixes 🐛

• Skip phpdoc types in NumericReturnTypeFromStrictReturnsRector (#6153), Thanks @​staabm!
• [TypeDeclaration] Fix union type by multiple method calls on ParamTypeByMethodCallTypeRector (#6155)
• [TypeDeclaration] Handle throw without new on on ParamTypeByMethodCallTypeRector (#6156)
• [TypeDeclaration] Refactor CallerParamMatcher to avoid ambigous returns usage (#6157)
• [TypeDeclaration] Prevent uncaught exception in ReturnTypeFromReturnNewRector (#6159), Thanks @​staabm!
• Prevent uncaught class-not-found exceptions (#6160), Thanks @​staabm!
• [TypeDeclaration] Skip variadic on StrictArrayParamDimFetchRector (#6163)
• [CodeQuality] Skip used in next stmt on UnusedForeachValueToArrayKeysRector (#6164)
• [Scoper] Fix prefixed MockObject on ReturnTypeFromMockObjectRector (#6167)
• [TypeDeclaration] Flip position between bool return and return tyep from strict constant on TypeDeclarationLevel (#6168)
• [TypeDeclaration] Skip possible void and return by docblock on ReturnTypeFromMockObjectRector (#6170)
• [TypeDeclaration] Update fixture and example method name (#6171)
• [NodeTypeResolver] Handle crash on variable variable with assign on FirstClassCallableRector (#6173)
• [NodeTypeResolver] Clean up re-fill scope on PHPStanNodeScopeResolver on variable variable (#6174)
• [NodeTypeResolver] Fill scope of dynamic variable variable (#6175)
• fix: Convert DateTime to Carbon properly when hours/minutes/seconds are used (#6176), Thanks @​florisbosch!

Commits

• 044e636 Rector 1.2.2
• 19fc78b Updated Rector to commit 1aef75583cc0c1314f151c24fac27e7af69e7d7d
• b7033ef Updated Rector to commit fa84ab5de0c4b7be8125b7f6c4c60afbc2a27327
• 90fab4d Updated Rector to commit eba615375fc6b795827e4ef3135d88c58479719d
• ceea11f Updated Rector to commit 1a58300b7d6ccaa1adbb1760b4a355263dc41408
• 65dfd8c Updated Rector to commit 07fffd50f3b62196856f22622815768385554272
• 8d7c7fa Updated Rector to commit 417b208b58da94040e01c5f9629ae33db472df78
• cecbffb Updated Rector to commit b0c89a98a0eb4a62d3141d950484d6e3ea7fdbda
• dd8c5b5 Updated Rector to commit 29e926608b0008df286370f94cf5c26b4aa86226
• 5ab7399 Updated Rector to commit e4c27be2ed869ed495cb5631ec9e6efc0ddc68ee
• Additional commits viewable in compare view

Updates tomasvotruba/unused-public to 0.3.10

Commits

• 11c46ce release PHP 7.2 downgraded
• e96d688 Detect public properties used via Subclass (#123)
• f8c1349 Fix ClassConstFetchCollector (#122)
• 5da0ca6 Fix union-type handling in PublicStaticPropertyFetchCollector (#121)
• da62379 Fix union-type handling in PublicPropertyFetchCollector (#120)
• 21592f0 add phpstan error identifiers (#118)
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
composer/aws/aws-sdk-php	>= 3.316.8, < 4.0.0	🟢 5.3	Details Check Score Reason Code-Review ⚠️ 1 Found 5/30 approved changesets -- score normalized to 1 Maintained 🟢 10 30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Dangerous-Workflow ⚠️ -1 no workflows found Packaging ⚠️ -1 packaging workflow not detected Token-Permissions ⚠️ -1 No tokens found Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 10 0 existing vulnerabilities detected Security-Policy 🟢 10 security policy file detected Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ -1 no dependencies found
composer/mimmi20/coding-standard	>= 5.2.37, < 6.0.0	Unknown	Unknown
composer/phpstan/phpstan	>= 1.11.8, < 2.0.0	🟢 6.3	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10 Code-Review ⚠️ 0 Found 2/28 approved changesets -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases 🟢 8 5 out of the last 5 releases have a total of 5 signed artifacts. Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ -1 No tokens found Dangerous-Workflow ⚠️ -1 no workflows found Packaging ⚠️ -1 packaging workflow not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities 🟢 10 0 existing vulnerabilities detected Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies ⚠️ -1 no dependencies found Security-Policy 🟢 10 security policy file detected
composer/rector/rector	>= 1.2.2, < 2.0.0	🟢 4.8	Details Check Score Reason Code-Review ⚠️ 0 Found 0/30 approved changesets -- score normalized to 0 Maintained 🟢 10 30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ -1 no releases found Token-Permissions ⚠️ -1 No tokens found Dangerous-Workflow ⚠️ -1 no workflows found Packaging ⚠️ -1 packaging workflow not detected Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 no SAST tool detected Security-Policy ⚠️ 0 security policy file not detected Binary-Artifacts 🟢 9 binaries present in source code Pinned-Dependencies ⚠️ -1 no dependencies found Vulnerabilities 🟢 10 0 existing vulnerabilities detected
composer/tomasvotruba/unused-public	>= 0.3.10, < 0.4.0	Unknown	Unknown

Scanned Manifest Files

composer.json

• aws/aws-sdk-php@>= 3.316.8, < 4.0.0
• mimmi20/coding-standard@>= 5.2.37, < 6.0.0
• phpstan/phpstan@>= 1.11.8, < 2.0.0
• rector/rector@>= 1.2.2, < 2.0.0
• tomasvotruba/unused-public@>= 0.3.10, < 0.4.0
• aws/aws-sdk-php@>= 3.316.4, < 4.0.0
• mimmi20/coding-standard@>= 5.2.36, < 6.0.0
• phpstan/phpstan@>= 1.11.7, < 2.0.0
• rector/rector@>= 1.2.1, < 2.0.0
• tomasvotruba/unused-public@>= 0.3.9, < 0.4.0

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 92.12%. Comparing base (62fd672) to head (41f9359).

Additional details and impacted files

@@            Coverage Diff            @@
##             master     #554   +/-   ##
=========================================
  Coverage     92.12%   92.12%           
  Complexity      791      791           
=========================================
  Files           104      104           
  Lines          2781     2781           
=========================================
  Hits           2562     2562           
  Misses          219      219           

Flag	Coverage Δ
elasticsearch-8	89.35% <ø> (ø)
php-8.1	92.12% <ø> (ø)
php-amqplib	88.02% <ø> (ø)
phpunit	92.12% <ø> (ø)
swiftmailer	85.97% <ø> (ø)
ubuntu-22.04	92.12% <ø> (ø)
ubuntu-24.04	92.12% <ø> (?)
with-amqp	86.44% <ø> (ø)
with-curl	88.38% <ø> (ø)
with-mongodb	86.44% <ø> (ø)
with-sockets	88.02% <ø> (ø)
without-extensions	85.97% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[codeclimate]

Code Climate has analyzed commit 41f9359 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 85.5% (1.7% change).

View more on Code Climate.