[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
vimeo/psalm	7.0.0-beta20 → 7.0.0-beta22

---

Release Notes

vimeo/psalm (vimeo/psalm)

v7.0.0-beta22

Compare Source

What's Changed

Features

• [6.x] Support the PHP 8.5 #[\NoDiscard] attribute by @​alies-dev in #​11892

Fixes

• Fix the MongoDB\Driver\Manager stub binding Cursor with two type parameters by @​danog in #​11970
• Fix closure param type inference by @​danog in #​11972
• Don't mint a type variable for a purely-mixed construction inference by @​danog in #​11973
• Add the PHP 8.5 trace key to error_get_last() by @​janedbal in #​11975
• Fix/type variable union return equality by @​danog in #​11980

Internal changes

• Check out branch-specific baselines for test-with-real-projects by @​danog in #​11957

Other changes

• [6.x] Substitute self in @property type tokens at scan time by @​alies-dev in #​11846
• Resolve leaked type variables at property-fetch receivers by @​danog in #​11976
• Resolve nested type variables to a fixpoint by @​danog in #​11977
• Resolve leaked type variables when casting to string by @​danog in #​11978

New Contributors

• @​janedbal made their first contribution in #​11975

Full Changelog: vimeo/psalm@7.0.0-beta21...7.0.0-beta22

v7.0.0-beta21

Compare Source

What's Changed

Features

• Restore custom taint map from cache; make taint analysis deterministic by @​danog in #​11946
• Add nosql taint type and mark MongoDB sinks by @​danog in #​11944
• Taint php://input & STDIN sources, and propagate taint through closures by @​danog in #​11945

Fixes

• [7.x] Fix taint-analysis crash on first-class callables by @​alies-dev in #​11950
• Update nikic/php-parser version to ^5.2.0 by @​danielmorell in #​11927

Internal changes

• Use upstreamed amphp/parallel ForkContext by @​danog in #​11947
• Resolve the taint graph to a fixed point with sink-reachability pruning by @​danog in #​11951
• Key taint argument nodes by declared parameter index (fix named-argument sinks) by @​danog in #​11954

Other changes

• Derive data-flow node locations & sink taints from storage (deterministic taint findings) by @​danog in #​11952
• Make DataFlowNode locations deterministic by construction (private constructor) by @​danog in #​11953
• Hoist specialized_calls serialization out of the per-edge taint-resolution loop by @​danog in #​11956
• Fix crash on first-class callables in taint analysis by @​Portll in #​11932
• Fix MissingOverrideAttribute false positive for private trait methods by @​Eljees in #​11926

New Contributors

• @​Portll made their first contribution in #​11932
• @​danielmorell made their first contribution in #​11927
• @​Eljees made their first contribution in #​11926

Full Changelog: vimeo/psalm@7.0.0-beta20...7.0.0-beta21

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • "before 5am on saturday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.