[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
phpstan/phpstan	2.3.1 → 2.3.2

---

Release Notes

phpstan/phpstan-phar-composer-source (phpstan/phpstan)

v2.3.2

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[artidezi-etke-cc]

Approved: no adaptation is required under the configured project policy.

Approve unchanged: the PR updates only the development dependency PHPStan from 2.3.1 to 2.3.2 within the existing 2.3.* constraint. Its merge base equals the recorded target, so integration requires no adaptation. Lockfile consistency checks passed and the supplied source CI reports successful PHP and frontend checks; dependency installation, audits and runtime suites were not rerun locally.

Agent-assessed risk: Low. A development-only patch update leaves dependency requirements, application code, runtime images and frontend assets unchanged, with successful supplied source CI.

Evidence (4 items)

• Local check: git merge-base d864c390815c8999549c7e77238b1cc0e51db70e refs/artidezi/inputs/source-pr; git diff d864c390815c8999549c7e77238b1cc0e51db70e...refs/artidezi/inputs/source-pr -- app/composer.lock — Merge base equals the recorded target; the sole changed file is app/composer.lock, updating PHPStan version, distribution reference/URL and release timestamp.
• Local check: Python JSON comparison of git show <target>:app/composer.lock and git show refs/artidezi/inputs/source-pr:app/composer.lock, plus composer.json constraints — PASS: only phpstan/phpstan changes among development packages; only version, dist and time fields differ. All package requirements and remaining lock metadata are unchanged. Composer manifests are identical and the declared PHPStan constraint is 2.3.*. This is a static consistency check, not Composer validation, installation or an audit.
• Local check: git diff --check d864c390815c8999549c7e77238b1cc0e51db70e...refs/artidezi/inputs/source-pr — PASS: no whitespace errors.
• Evidence: Supplied source CI snapshot for d7239ac84e7824a61b125f1ecdda4ef6b4f0a484 — PHP and frontend check runs are completed/success. Their underlying commands and logs were not independently inspected. No local PHPStan, PHP/Twig style, frontend lint/type/build, Composer validation/audit or npm audit was run; unchanged-input verification recipes were not duplicated. Controller forge gates remain authoritative.

Assessed source d7239ac84e7824a61b125f1ecdda4ef6b4f0a484.