Code development platform for open source projects from the European Union institutions

Skip to content

Update vimeo/psalm requirement from ^3.14.1 to ^4.1.1

Pol Dellaiera requested to merge dependabot/composer/vimeo/psalm-tw-4.1.1 into master

Created by: dependabot[bot]

Updates the requirements on vimeo/psalm to permit the latest version.

Release notes

Sourced from vimeo/psalm's releases.

More attribute checks

Features

More attribute checks

Psalm now checks that you're using attributes correctly (by verifying attribute targets).

int-mask and int-mask-of

This release also brings support for representing bitmasks concisely with the introduction of a new type int-mask.

int-mask<1, 2, 4> is automatically converted to 1|2|3|4|5|6|7.

Another new type, int-mask-of, allows you to represent masks of multiple values from a single source query

Given

class FileFlag {
    public const OPEN = 1;
    public const MODIFIED = 2;
    public const NEW = 4;
}

int-mask-of<FileFlag::*> is equivalent to int-mask<FileFlag::OPEN, FileFlag::MODIFIED, FileFlag::NEW>

Bugfixes

  • Psalm now supports multiline @extends and @implements docblock tags (#4453)
  • Psalm’s cache now gets busted in more situations when using a self-packaged Phar
  • Only treat two variables as the same if they were set in the same place (#4467)
  • Psalm now performs better inference after if (!class_exists($foo, false)) { return; } (#4466)
Commits
  • 16bfbd9 Fix function
  • 3d4e77b Fix int-mask-of expansion
  • 0922813 Use falsy value
  • 6922caf Fix #4466 use better differentiation for class_exists second param
  • 966b139 Fix dupe semicolons
  • 024d93b Fix #4467 - variables are only the same if they were set in the same location
  • f0a30b9 Invalidate child methods when signature changes
  • 6672204 Fix #4464 - bust cache when Psalm’s version changes, not just composer’s
  • 8f05cc9 Add aka
  • 4966754 Fix brackets
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Merge request reports