composer(deps-dev): bump the minor-patch-dependencies group with 4 updates

[dependabot]

Updates the requirements on infection/infection, mimmi20/coding-standard, phpstan/phpstan and phpunit/phpunit to permit the latest version.
Updates infection/infection to 0.28.1

Release notes

Sourced from infection/infection's releases.

Use CI (GitHub, GitLab) variable to detect project path

Changed:

• feat: use CI variables to detect project path by @​darthf1 in infection/infection#1949

New Contributors

• @​darthf1 made their first contribution in infection/infection#1949

Full Changelog: infection/infection@0.28.0...0.28.1

Commits

• 1ee4ffa feat: use CI variables to detect project path (#1949)
• 499d617 Fix minimum MSI (#1950)
• 3d6b2b2 Require coverage metadata in phpunit.xml.dist (#1945)
• c7b185c Update CHANGELOG.md for 0.28.0
• 7375c55 Add PHP-Parser 5 support (#1909)
• bde0f4a Run rector rules for tests/phpunit folder (#1946)
• 0aa8299 Install pcntl in docker image as make autoreview fails with absent `SIGIN...
• af53859 Upgrade rector to the latest version (#1944)
• 85e6514 Upgrade phpstan to the latest version (#1943)
• c4cb2fa Fix InitialTestsRunnerTest (#1942)
• Additional commits viewable in compare view

Updates mimmi20/coding-standard to 5.2.26

Release notes

Sourced from mimmi20/coding-standard's releases.

allow @​api

What’s Changed

🧹 Maintenance:

• allow @api by @​mimmi20 (#487)
• add phpstan rules by @​mimmi20 (#486)

👨🏼‍💻 Contributors

@​mimmi20

Commits

• 1543a47 Merge pull request #487 from mimmi20/updates
• 9f44abc allow @​api
• 7e71029 Merge pull request #486 from mimmi20/updates
• 2eeb1a5 add phpstan rules
• a066410 Merge pull request #485 from mimmi20/updates
• b62cb67 fix deprecation notice
• f882349 Merge pull request #482 from mimmi20/dependabot/github_actions/master/minor-p...
• 3e334ee github-actions: bump shivammathur/setup-php
• 9c39522 Merge pull request #483 from mimmi20/dependabot/composer/master/squizlabs/php...
• c853ae4 composer(deps): update squizlabs/php_codesniffer requirement
• Additional commits viewable in compare view

Updates phpstan/phpstan to 1.10.67

Release notes

Sourced from phpstan/phpstan's releases.

1.10.67

This is the last release, or one of the last releases, in 1.10.x series. The next one is going to be PHPStan 1.11, and it's going to be released at some point in May 2024.

Improvements 🔧

• Forbid PHPUnitPHAR prefixed classes (#3002), thanks @​staabm!
• Improve error messages on unnamed parameters (#3010), #10814, thanks @​takaram!

Bugfixes 🐛

• Improve date() return types (#2888), #10468, #6613, thanks @​zonuexe!
• Default value null does not make promoted property type nullable (phpstan/phpstan-src@b2177e3), #9839
• Fix socket_select array types after call (phpstan/phpstan-src@24c5249), `if-this-is` alternative? phpstan/phpstan#10285
• Fix conditional types in PHPDocs from stubs for native functions (phpstan/phpstan-src@8ae0b28)
• Fix env int key problem (phpstan/phpstan-src@e606fbe), #10833
• Fix false positives about uninitialized properties (#2897), #10523, #10822, thanks @​staabm!
• Incremented numeric-string should change to int/float (#2797), #10122, #10187, thanks @​staabm!
• Do not generalize big array when combined with empty array (#3003), #10834, thanks @​RobertMe!
• Fix string concatenation with benevolent union type (phpstan/phpstan-src@4a4c739), #10863
• Treat get_defined_vars() as using constructor arguments (#3012), #10865, thanks @​rvanvelzen!
• Allow undefined variables passed into by-ref parameters only if the type is nullable (phpstan/phpstan-src@7f8f9cc, phpstan/phpstan-src@7961f7a), #1916

Function signature fixes 🤖

• More precise gc_status() signature for PHP8.3+ (#2996), thanks @​staabm!
• Add object shape for mysqli_result::fetch_fields (#3005), thanks @​schlndh!

Internals 🔍

• composer-dependency-analyser: update to 1.5.0 (support functions) (#3011), thanks @​janedbal!

Commits

• 16ddbe7 PHPStan 1.10.67
• 7961f7a Updated PHPStan to commit 7961f7ae1fe815b0796e4d73717f1b117d4a7163
• 7f8f9cc Updated PHPStan to commit 7f8f9cce7f3903e505916c7afe04b7912570b5e2
• f71da02 Updated PHPStan to commit f71da02958da0dd6b40193c64fcb6da12daf7227
• 074de75 Updated PHPStan to commit 074de75ff3bffd32e554e3ce8b0dbbde003e471e
• 1453c3f Updated PHPStan to commit 1453c3f160075f299dc4fc3b3098e8b0b3739b85
• 4a4c739 Updated PHPStan to commit 4a4c739f9ff85b6c73659c21f8f3b8b7af8c82c9
• 28c5729 Updated PHPStan to commit 28c57296288b78707902fdb4cdf9313a60eff363
• a80cd8a Update Larastan
• 336ab5c Update baselines
• Additional commits viewable in compare view

Updates phpunit/phpunit to 10.5.20

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 10.5.20

• #5771: JUnit XML logger may crash when test that is run in separate process exits unexpectedly
• #5819: Duplicate keys from different data providers are not handled properly

---

How to install or update PHPUnit

Changelog

Sourced from phpunit/phpunit's changelog.

[10.5.20] - 2024-04-24

• #5771: JUnit XML logger may crash when test that is run in separate process exits unexpectedly
• #5819: Duplicate keys from different data providers are not handled properly

[10.5.19] - 2024-04-17

Fixed

• #5818: Calling method() on a test stub created using createStubForIntersectionOfInterfaces() throws an unexpected exception

[10.5.18] - 2024-04-14

Deprecated

• #5812: Support for string array keys in data sets returned by data provider methods that do not match the parameter names of the test method(s) that use(s) them

Fixed

• #5795: Using @testWith annotation may generate PHP Warning: Uninitialized string offset 0

[10.5.17] - 2024-04-05

Changed

• The namespaces of dependencies are now prefixed with PHPUnitPHAR instead of just PHPUnit for the PHAR distribution of PHPUnit

[10.5.16] - 2024-03-28

Changed

• #5766: Do not use a shell in proc_open() if not really needed
• #5772: Cleanup process handling after dropping temp-file handling

Fixed

• #5570: Windows does not support exclusive locks on stdout

[10.5.15] - 2024-03-22

Fixed

• #5765: Be more forgiving with error handlers that do not respect error suppression

[10.5.14] - 2024-03-21

Changed

• #5747: Cache result of Groups::groups()
• #5748: Improve performance of NamePrettifier::prettifyTestMethodName()

... (truncated)

Commits

• 547d314 Prepare release
• 6da42ed Make this test work on Windows
• 371fc2c Update ChangeLog
• 77dc808 Use JUnit XML logfile as expectation instead of test runner output
• c722fb2 Do not crash when test run in child process ends unexpectedly and `--log-juni...
• b2b3555 Add --log-junit to test
• 94c00e3 Add test without --log-junit
• 9d1c41f Merge branch '9.6' into 10.5
• 33a0610 Merge branch '8.5' into 9.6
• 920716c Update tools
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details

Scanned Manifest Files

composer.json

• infection/infection@>= 0.28.1, < 0.29.0
• mimmi20/coding-standard@>= 5.2.26, < 6.0.0
• phpstan/phpstan@>= 1.10.67, < 2.0.0
• phpunit/phpunit@>= 10.5.20, < 11.0.0
• infection/infection@>= 0.27.11, < 0.28.0
• mimmi20/coding-standard@>= 5.2.20, < 6.0.0
• phpstan/phpstan@>= 1.10.66, < 2.0.0
• phpunit/phpunit@>= 10.5.17, < 11.0.0

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.