chore(deps): bump vimeo/psalm from 6.13.1 to ^6.18.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
vimeo/psalm	^6.13.1 → ^6.18.0

---

Release Notes

vimeo/psalm (vimeo/psalm)

v6.18.0

Compare Source

What's Changed

Features

• [6.x] Support the PHP 8.5 #[\NoDiscard] attribute by @​alies-dev in #​11892

Fixes

• Fix closure param type inference by @​danog in #​11972
• Don't mint a type variable for a purely-mixed construction inference by @​danog in #​11973
• Add the PHP 8.5 trace key to error_get_last() by @​janedbal in #​11975

Internal changes

• Check out branch-specific baselines for test-with-real-projects by @​danog in #​11957

Other changes

• [6.x] Substitute self in @property type tokens at scan time by @​alies-dev in #​11846

New Contributors

• @​janedbal made their first contribution in #​11975

Full Changelog: vimeo/psalm@6.17.2...6.18.0

v6.17.2

Compare Source

What's Changed

Fixes

• Fix function manipulator by @​danog in #​11671
• Update nikic/php-parser version to ^5.2.0 by @​danielmorell in #​11927

Other changes

• Fix crash on first-class callables in taint analysis by @​Portll in #​11932
• Fix MissingOverrideAttribute false positive for private trait methods by @​Eljees in #​11926

New Contributors

• @​Portll made their first contribution in #​11932
• @​danielmorell made their first contribution in #​11927
• @​Eljees made their first contribution in #​11926

Full Changelog: vimeo/psalm@6.17.1...6.17.2

v6.17.1

Compare Source

What's Changed

Fixes

• Fix #​11937 by @​danog in #​11938

Full Changelog: vimeo/psalm@6.17.0...6.17.1

v6.17.0

Compare Source

What's Changed

Features

• Support better template inference with type variables: class templates that cannot be inferred at the construction site are now tracked as type variables whose bounds are reconciled once the surrounding function has been analyzed. This legalizes widening within a template's declared bounds (e.g. new Box(1) followed by $box->set('two') under @template T of int|string) and introduces the new IncompatibleTypeParameters issue (level 1), documented in https://psalm.dev/docs/annotating_code/type_variables/ by @​muglug in #​11875

Fixes

• [6.x] Fix InterfaceAnalyzer crash when storage is overwritten by reflection by @​alies-dev in #​11760
• [6.x] Fix $this failing to parse inside generic type parameters by @​alies-dev in #​11768
• [6.x] Use macOS bundle ID for PhpStorm (support JetBrains Tool installed apps), respect PHPSTORM env var on Darwin by @​alies-dev in #​11801
• [6.x] Ignore inline covariant/contravariant keywords in generic type parameters instead of reporting UndefinedDocblockClass (backport) by @​alies-dev in #​11836
• Keep foreach key/value non-nullable after a breaking loop by @​muglug in #​11874
• PHP 8.5 compatibility: TLiteralFloat now renders NAN values as float(NAN) in type keys and IDs instead of crashing by @​danog in 9d6db9e and ca15124

Docs

• Add docs/annotating_code/type_variables.md and the IncompatibleTypeParameters issue page by @​muglug in #​11875

Internal changes

• [6.x] fix tests: drop incorrect impure- Closure prefix in TypeParseTest by @​alies-dev in #​11834
• [6.x] fix tests: whitelist Override in SuicidalAutoloader fixture by @​alies-dev in #​11835
• fix: pin GitHub Actions to SHA for supply chain security by @​riccardosarro in #​11863
• Clean up redundant assignment-conditions and repeated getArgs() calls by @​muglug in #​11888
• Remove dead write-only static properties and simplify ScopeAnalyzer break/continue logic by @​muglug in #​11889
• Fix test-with-real-projects.sh on macOS (use gsed when available, tolerate a missing phar) by @​danog in 9d6db9e
• Fix macOS CI: bump setup-php to v2.37.2 so PHP 8.5 installs on macos-15 by @​danog in a2892df
• Fix Mockery 1.6.15 compatibility in plugin tests by @​danog in 7b50a17
• Drop voidParamType test: nikic/php-parser 5.8 rejects void params at parse time by @​danog in 056992a

Other changes

• Allow sebastian/diff 9 by @​liviuconcioiu in #​11861

New Contributors

• @​riccardosarro made their first contribution in #​11863

Full Changelog: vimeo/psalm@6.16.1...6.17.0

v6.16.1

Compare Source

What's Changed

Fixes

• Fix --show-snippet option silently consuming next CLI argument by @​alies-dev in #​11684
• Explicitly disable JIT by default by @​danog in #​11745

Full Changelog: vimeo/psalm@6.16.0...6.16.1

v6.16.0

Compare Source

What's Changed

Features

• Add stub for memcached by @​ADmad in #​11717

Fixes

• Fix duplicate error for abstract methods in traits if the issue is due to the implementer by @​kkmuffme in #​11695
• Report regular issue instead of throw/crash by @​kkmuffme in #​11693
• Add PHP 8.5 (and 8.4) handling where it wasn't added yet by @​kkmuffme in #​11697
• curl_share_init_persistent requires non-empty array otherwise throws by @​kkmuffme in #​11701
• Add max_depth option to unserialize() callmap type by @​eyupcanakman in #​11702
• Fix false InvalidArgument for sprintf precision placeholders by @​eyupcanakman in #​11729

Internal changes

• Disable JIT by default, make it opt-in via --force-jit by @​alies-dev in #​11682
• Regenerate callmaps to include new ext-mongodb 2.2 API by @​alcaeus in #​11720
• Bump docker/setup-buildx-action from 3 to 4 by @​dependabot[bot] in #​11719

New Contributors

• @​eyupcanakman made their first contribution in #​11702

Full Changelog: vimeo/psalm@6.15.1...6.16.0

v6.15.1

Compare Source

What's Changed

Internal changes

• Allow sebastian/diff 8 by @​Jean85 in #​11667

Full Changelog: vimeo/psalm@6.15.0...6.15.1

v6.15.0

Compare Source

Note: GPG signatures for older releases will be regenerated shortly using the new 99BF4D9A33D65E1E key, since the old one expired.

What's Changed

Features

• Support PHP 8.4 interface property hooks by @​adamaveray in #​11569

Fixes

• Improve performance of getIssueTrace by @​danog in #​11629
• Minor property hook improvements by @​danog in #​11657
• Fix GPG signing key by @​danog in #​11658

Other changes

• Add a missing argument of PDO::sqliteCreateFunction(). by @​sukei in #​11591

New Contributors

• @​adamaveray made their first contribution in #​11569
• @​sukei made their first contribution in #​11591

Full Changelog: vimeo/psalm@6.14.3...6.15.0

v6.14.3

Compare Source

What's Changed

Fixes

• Remove redefinition of Attribute constants. by @​hschletz in #​11625
• Remove usages of deprecated curl_close() function by @​theodorejb in #​11626
• Declare NoDiscard attribute as immutable by @​Baptouuuu in #​11611
• dependencies : allow symfony 8 by @​NicolasDievart in #​11594

Internal changes

• Bump actions/cache from 4 to 5 by @​dependabot[bot] in #​11623

Other changes

New Contributors

• @​hschletz made their first contribution in #​11625
• @​Baptouuuu made their first contribution in #​11611
• @​NicolasDievart made their first contribution in #​11594

Full Changelog: vimeo/psalm@6.14.2...6.14.3

v6.14.2

Compare Source

What's Changed

Fixes

• Fix supported versions regex by @​danog in #​11614

Full Changelog: vimeo/psalm@6.14.1...6.14.2

v6.14.1

Compare Source

What's Changed

Features

• Do not ignore null array offsets within isset by @​danog in #​11608

Full Changelog: vimeo/psalm@6.14.0...6.14.1

v6.14.0

Compare Source

What's Changed

Features

• Add PHP 8.5 support by @​MarjovanLier in #​11604
• Add PHP 8.5 support by @​danog

Internal changes

• Improve performance by avoiding repeated scanning of files included/required only once by @​mmcev106 in #​11478

Other changes

• feat(language server): add --on-open-debounce-ms by @​kk-daniel in #​11550
• fix(language server): fix --on-change-debounce-ms by @​kk-daniel in #​11549
• Replace deprecated __sleep method with __serialize by @​theodorejb in #​11563
• Fix the opcache status retrieval if restricted paths are set. by @​dmvrtx in #​11556
• Bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​11539
• fix: deprecations for PHP 8.5 by @​jorgsowa in #​11541
• ci: add nikic/php-parser deprecations to Psalm baseline by @​jorgsowa in #​11596
• fix: deprecated null offset by @​jorgsowa in #​11599
• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​11593

New Contributors

• @​dmvrtx made their first contribution in #​11556
• @​MarjovanLier made their first contribution in #​11604

Full Changelog: vimeo/psalm@6.13.1...6.14.0

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • "before 5am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.