Skip to content

Bump phpstan/phpstan from 2.1.17 to 2.2.13 - #6

Merged
mlebkowski merged 1 commit into
mainfrom
dependabot/composer/phpstan/phpstan-2.2.13
Sep 7, 2026
Merged

mlebkowski merged 1 commit into
mainfrom
dependabot/composer/phpstan/phpstan-2.2.13

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps phpstan/phpstan from 2.1.17 to 2.2.13.

Release notes

Sourced from phpstan/phpstan's releases.

2.2.13

Result cache finally becomes usable for monorepo setups. It knows exactly what needs to be reanalysed when PHP files included via "type": "path" Composer dependencies are edited and also when files in scanFiles/scanDirectories are edited. 🔍✏️

Many result cache bugs were squashed 🐛 and the serialization format changed to a much more efficient one. 🏎️

Bleeding edge 🔪

  • Level 5: Report in-place sort calls that cannot change the array (#6296), #15126

If you want to see the shape of things to come and adopt bleeding edge features early, you can include this config file in your project's phpstan.neon:

includes:
	- vendor/phpstan/phpstan/conf/bleedingEdge.neon

Of course, there are no backwards compatibility guarantees when you include this file. The behaviour and reported errors can change in minor versions with this file included. Learn more

Improvements 🔧

  • Interpret array shape keys as @template types when a template of that name is in scope (#6322), #15145
    • Allows types like array{TKey: string} with @template TKey above

Bugfixes 🐛

  • Do not bind a template type to an argument absorbed by another union member (#6341), #8441
  • Normalize the result cache meta before comparing it with the restored one (#6346), #15125, #15152
  • Let OpenSslCipherMethodsProvider contribute its own result cache meta (#6338), thanks @​SanderMuller!
  • Resolve template defaults referencing other templates in composite types (#6329), thanks @​calebdw!
  • Rename the result cache into place instead of writing it over the old one (#6349, #6353), thanks @​SanderMuller!
  • Do not locate symbols declared by the symfony/polyfill-* packages bundled with PHPStan itself (#6351), #15150
  • Stop interning TypeCombinator results in the turbo extension (#6355), #15151
  • Cover a file newly appearing in a scanDirectories directory (#6352), #15149
  • Fixed various bugs where the result cache could become stale (#6357)
  • Fix result cache invalidation with @var referenced classes (#6343), thanks @​Mika-!
  • Re-analyse the files with errors when a Composer package changes (#6362), #15164
  • Do not let the exactness of new Foo() reach an inferred template argument (#6363), #15166
  • Invalidate the result cache when any extension file changes (#6368)

... (truncated)

Commits
  • 9ba9ac7 PHPStan 2.2.13
  • d6adcb4 Updated PHPStan to commit d6adcb4acc899ab49b7252ef38d3a74ae3b9e90a
  • 412d708 Updated PHPStan to commit 412d70813f1d4302e4b963e39417f03db5969902
  • 1712a9b Updated PHPStan to commit 1712a9ba7faa7aac00be1b443676eab4f7c2f15b
  • 5b21781 Updated PHPStan to commit 5b2178124c15bc99e532d375274307f321f2d109
  • fb4a292 Clarify ksort() explanation in sortArray.list.md
  • 5a84373 Update error docs - added sortArray.* identifiers
  • c65fd9b Updated PHPStan to commit c65fd9bc0fca51081f7b2bef4d1045c273ac2ffb
  • 59ded7b Updated PHPStan to commit 59ded7b4df0db69cb58691488b11622bde911648
  • c4c035e Updated PHPStan to commit c4c035e767bfdc151a71a42965ab2daf43dcdab0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [phpstan/phpstan](https://github.com/phpstan/phpstan) from 2.1.17 to 2.2.13.
- [Release notes](https://github.com/phpstan/phpstan/releases)
- [Changelog](https://github.com/phpstan/phpstan/blob/2.3.x/CHANGELOG.md)
- [Commits](phpstan/phpstan@2.1.17...2.2.13)

---
updated-dependencies:
- dependency-name: phpstan/phpstan
  dependency-version: 2.2.13
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Sep 7, 2026
@mlebkowski
mlebkowski merged commit b565346 into main Sep 7, 2026
2 checks passed
@dependabot
dependabot Bot deleted the dependabot/composer/phpstan/phpstan-2.2.13 branch September 7, 2026 08:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant