Bump the production-dependencies group with 6 updates

[dependabot]

Bumps the production-dependencies group with 6 updates:

Package	From	To
phpstan/phpstan	2.1.39	2.2.8
phpstan/phpstan-deprecation-rules	2.0.4	2.0.5
phpstan/phpstan-strict-rules	2.0.10	2.0.12
slam/phpstan-extensions	6.8.0	6.9.0
symplify/phpstan-rules	14.9.11	14.12.0
thecodingmachine/phpstan-safe-rule	1.4.3	1.4.7

Updates phpstan/phpstan from 2.1.39 to 2.2.8

Commits

• See full diff in compare view

Updates phpstan/phpstan-deprecation-rules from 2.0.4 to 2.0.5

Release notes

Sourced from phpstan/phpstan-deprecation-rules's releases.

2.0.5

• 67bedd6 - Update github-actions (#197)
• 6be8bd3 - Update actions/cache action to v6 (#198)
• 0b310ec - Update github-actions to v3.0.1 (#195)
• 782d848 - Update github-actions to v7 (#196)
• 85fff9d - Update github-actions to f3e473d (#194)
• 54db580 - Update github-actions (#193)
• 99aff1a - Replace deprecated actions/create-release with softprops/action-gh-release
• 971f8e1 - Bump GitHub Actions across major versions
• 89fef35 - Bump GitHub Actions within their current majors
• 0652358 - Update github-actions
• 02119cc - Update github-actions
• 389c78c - latest infection does not support PHP 8.2 (#189)
• 899202d - Update release-toot.yml (#188)
• 016d677 - name-collision-detector (#187)
• 945df12 - Delete .github/workflows/claude-react-on-comment.yml
• a70b8b1 - Remove default branch determination from workflow
• 1faeb2e - Lint workflows
• 534891e - [StepSecurity] ci: Harden GitHub Actions
• 3acc664 - Remove PHPSTAN_BOT_TOKEN from checkout step
• 49efeb2 - React on issues opened and fall back to issue body
• 319c3f6 - Add PHP 8.5 to CI matrix for lint, tests, and static analysis
• 73feeba - Add missing export-ignore entries to .gitattributes
• c6d73e5 - Add CLAUDE.md with project documentation
• f9f68eb - Add Claude React on Comment workflow

Commits

• 67bedd6 Update github-actions (#197)
• 6be8bd3 Update actions/cache action to v6 (#198)
• 0b310ec Update github-actions to v3.0.1 (#195)
• 782d848 Update github-actions to v7 (#196)
• 85fff9d Update github-actions to f3e473d (#194)
• 54db580 Update github-actions (#193)
• 99aff1a Replace deprecated actions/create-release with softprops/action-gh-release
• 971f8e1 Bump GitHub Actions across major versions
• 89fef35 Bump GitHub Actions within their current majors
• 0652358 Update github-actions
• Additional commits viewable in compare view

Updates phpstan/phpstan-strict-rules from 2.0.10 to 2.0.12

Release notes

Sourced from phpstan/phpstan-strict-rules's releases.

2.0.12

• 2bc5ae1 - Allow GMP and BCMath\Number in arithmetic operations (#311)
• 70e3081 - Update github-actions (#324)
• 07a17dd - Update github-actions to v7 (#325)
• de9bdda - Update github-actions (#322)
• 80870ec - Replace deprecated actions/create-release with softprops/action-gh-release
• 109c14f - Bump GitHub Actions across major versions
• ebf31ff - Bump GitHub Actions within their current majors
• 727c193 - Update github-actions
• cc56619 - Update github-actions
• 1e72841 - Update release-toot.yml (#319)
• ada7e60 - CI: move name-collision job into build.yml (#318)
• 470946d - Add missing export-ignore entries to .gitattributes (#315)
• 8b14a8e - name-collision-detector (#314)

2.0.11

• 9b000a5 - Fix false positive UselessCast for (void) cast on #[\NoDiscard] calls
• eceb998 - Delete .github/workflows/claude-react-on-comment.yml
• d44f7a7 - Lint workflows
• 26cdbc1 - [StepSecurity] ci: Harden GitHub Actions
• 41e82cf - Update claude-react-on-comment.yml
• 3b3c435 - Add missing rule descriptions to README
• e8e9032 - React on issues opened and fall back to issue body
• a12a6a8 - Add PHP 8.5 to CI matrix for lint, tests, and static analysis
• f21225b - Add missing export-ignore entries to .gitattributes
• 803f353 - Add CLAUDE.md with project documentation
• 38c26a9 - Add Claude React on Comment workflow

Commits

• 2bc5ae1 Allow GMP and BCMath\Number in arithmetic operations (#311)
• 70e3081 Update github-actions (#324)
• 07a17dd Update github-actions to v7 (#325)
• de9bdda Update github-actions (#322)
• 80870ec Replace deprecated actions/create-release with softprops/action-gh-release
• 109c14f Bump GitHub Actions across major versions
• ebf31ff Bump GitHub Actions within their current majors
• 727c193 Update github-actions
• cc56619 Update github-actions
• 1e72841 Update release-toot.yml (#319)
• Additional commits viewable in compare view

Updates slam/phpstan-extensions from 6.8.0 to 6.9.0

Release notes

Sourced from slam/phpstan-extensions's releases.

v6.9.0

What's Changed

• Add missing identifiers by @​mfn in Slamdunk/phpstan-extensions#83

Full Changelog: Slamdunk/phpstan-extensions@v6.8.0...v6.9.0

Commits

• 98424c7 Add missing identifiers (#83)
• 6ec9ec7 Update dependency phpstan/phpstan to ^2.1.55
• b6ea2bb Update dependency phpunit/phpunit to ^13.1.10
• 1f01037 Update dependency phpunit/phpunit to ^13.1.9
• e91c5a2 Update dependency nette/neon to ^3.4.8
• d80d94d Update dependency nette/di to ^3.2.6
• 31fc258 Update dependency phpunit/phpunit to ^13.1.8
• 3cecba1 Update dependency phpstan/phpstan to ^2.1.54
• 9204bdf Update dependency phpstan/phpstan to ^2.1.53
• b011e94 Update dependency phpstan/phpstan to ^2.1.51
• Additional commits viewable in compare view

Updates symplify/phpstan-rules from 14.9.11 to 14.12.0

Release notes

Sourced from symplify/phpstan-rules's releases.

14.12.0

🔧 Changed

• Config parameters are now nested under the symplify vendor key, following convention. Update your phpstan.neon accordingly:

 parameters:
-    symfonyReturnType: true
-    laravelReturnType: true
-    pathStrings: true
+    symplify:
+        symfonyReturnType: true
+        laravelReturnType: true
+        pathStrings: true

🗑️ Removed

• The maximumIgnoredErrorCount feature has been removed. Drop it from your config:

 parameters:
-    maximumIgnoredErrorCount: 12

Released PHPStan Rules 14.11

What's Changed

Merged symplify/phpstan-extensions into this package (#270)

symplify/phpstan-extensions had only a few classes, so it now lives here. This brings:

• Return type extensions (in config/phpstan-extensions.neon, all opt-in, off by default):
  • Symfony Container::get($id) resolved to the $id type, and Finder SplFileInfo::getRealPath() resolved to string
  • Laravel Container::make($id) resolved to the $id type
  • Native getcwd() / dirname() / realpath() resolved to string
• SymplifyErrorFormatter — a compact error formatter, usable via errorFormat: symplify

New rules

• NewOverSettersRule ported from tomasvotruba/ctor — opt-in via ctor: true (#267)
• PHPUnit mock rules merged from rector/mockstan — opt-in via mocks: true (#268)

New parameters

Parameter	Default	What it enables
ctor	false	NewOverSettersRule + its collector — flags new followed by setter calls that should be constructor arguments (#267)
mocks	false	PHPUnit mock rules from rector/mockstan (#268)
symfonyReturnType	false	Symfony Container::get() and Finder SplFileInfo::getRealPath() return type extensions (#270)

... (truncated)

Commits

• 1b1cd70 release PHP 7.4 downgraded
• 3124240 Remove maximumIgnoredErrorCount feature (#274)
• 7a934c3 [config] nest parameters under symplify vendor, as convention (#273)
• b2ee64a cs
• 8a613aa Add #[attribute] support to NoEntityMockingRule (#272)
• ae512cb Merge symplify/phpstan-extenisons here, as only few classes (#270)
• 4c5162d bump to PHP 8.4 (#271)
• deb1f75 Add CLAUDE.md with project metadata (#269)
• 9534989 Merge rector/mockstan: PHPUnit mock rules enabled via "mocks: true" parameter...
• 71c2158 Add NewOverSettersRule ported from tomasvotruba/ctor (#267)
• Additional commits viewable in compare view

Updates thecodingmachine/phpstan-safe-rule from 1.4.3 to 1.4.7

Release notes

Sourced from thecodingmachine/phpstan-safe-rule's releases.

v1.4.7

What's Changed

• ReplaceSafeFunctionsDynamicReturnTypeExtension: fix typo by @​staabm in thecodingmachine/phpstan-safe-rule#71

Full Changelog: thecodingmachine/phpstan-safe-rule@v.1.4.5...v1.4.7

v.1.4.6

What's Changed

• ReplaceSafeFunctionsDynamicReturnTypeExtension: fix typo by @​staabm in thecodingmachine/phpstan-safe-rule#71

Full Changelog: thecodingmachine/phpstan-safe-rule@v.1.4.5...v.1.4.6

v.1.4.5

What's Changed

• Narrow subject on matches by @​staabm in thecodingmachine/phpstan-safe-rule#69

Full Changelog: thecodingmachine/phpstan-safe-rule@v1.4.4...v.1.4.5

v1.4.4

What's Changed

• Sync preg_match extensions with PHPStan upstream + expose identity-check narrowing bug by @​mvhirsch in thecodingmachine/phpstan-safe-rule#65
• work on fixing CI, fixes #66 by @​shish in thecodingmachine/phpstan-safe-rule#67
• Improve ReplaceSafeFunctions type inference by @​staabm in thecodingmachine/phpstan-safe-rule#70

New Contributors

• @​mvhirsch made their first contribution in thecodingmachine/phpstan-safe-rule#65

Full Changelog: thecodingmachine/phpstan-safe-rule@v1.4.3...v1.4.4

Commits

• 51fa2a3 ReplaceSafeFunctionsDynamicReturnTypeExtension: fix typo (#71)
• 70a2116 Narrow subject on matches (#69)
• 93a9f4d Improve ReplaceSafeFunctions type inference (#70)
• 669fc1c work on fixing CI, fixes #66
• 81d8daa reproducer
• a5aa2cd updates extensions to phpstan v2.1.41
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions