[maryo]

When a static method is called on anything but a literal class name, the rule ignores @param-immediately-invoked-callable on the target parameter (and allowedCheckedExceptionCallables as well) and reports the callable anyway. Both an object and a class-string in the class part are affected:

$this->instance::invoking(function () {
    throw new CheckedException(); // reported, though invoking() has @param-immediately-invoked-callable
});

$className = MyClass::class;
$className::invoking(function () { throw new CheckedException(); }); // the same

$this->instance::throwing(...); // the reverse: never reported, though it should be

Both whitelistAllowedCallables() and processFirstClassCallable() guarded their StaticCall branch by $node->class instanceof Name. They now resolve the caller type through the scope, the way the MethodCall branch already does; getObjectTypeOrClassStringObjectType() covers objects and class-strings alike. Anything else resolves to ErrorType, finds no method reflection and behaves as before.

Note for the release notes: fixing the missing report can surface new errors on $expr::methodWithThrows(...) in existing codebases.

The second commit is unrelated — FirstClassCallableTest declared testPassedCallbacksA6 twice, so the data file could not be loaded (tests/Rule/data is in the composer classmap).

🤖 Generated with Claude Code

[janedbal]

Thank you