chore(deps): update composer dev tooling dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
phpstan/phpstan	^2.2.5 → ^2.2.6
phpstan/phpstan-deprecation-rules	^2.0.4 → ^2.0.5
rector/rector (source)	^2.5.7 → ^2.5.8

---

Release Notes

phpstan/phpstan-phar-composer-source (phpstan/phpstan)

v2.2.6

Compare Source

phpstan/phpstan-deprecation-rules (phpstan/phpstan-deprecation-rules)

v2.0.5

Compare Source

• 67bedd6 - Update github-actions (#​197)
• 6be8bd3 - Update actions/cache action to v6 (#​198)
• 0b310ec - Update github-actions to v3.0.1 (#​195)
• 782d848 - Update github-actions to v7 (#​196)
• 85fff9d - Update github-actions to f3e473d (#​194)
• 54db580 - Update github-actions (#​193)
• 99aff1a - Replace deprecated actions/create-release with softprops/action-gh-release
• 971f8e1 - Bump GitHub Actions across major versions
• 89fef35 - Bump GitHub Actions within their current majors
• 0652358 - Update github-actions
• 02119cc - Update github-actions
• 389c78c - latest infection does not support PHP 8.2 (#​189)
• 899202d - Update release-toot.yml (#​188)
• 016d677 - name-collision-detector (#​187)
• 945df12 - Delete .github/workflows/claude-react-on-comment.yml
• a70b8b1 - Remove default branch determination from workflow
• 1faeb2e - Lint workflows
• 534891e - [StepSecurity] ci: Harden GitHub Actions
• 3acc664 - Remove PHPSTAN_BOT_TOKEN from checkout step
• 49efeb2 - React on issues opened and fall back to issue body
• 319c3f6 - Add PHP 8.5 to CI matrix for lint, tests, and static analysis
• 73feeba - Add missing export-ignore entries to .gitattributes
• c6d73e5 - Add CLAUDE.md with project documentation
• f9f68eb - Add Claude React on Comment workflow

rectorphp/rector (rector/rector)

v2.5.8: Released Rector 2.5.8

Compare Source

New Features 🥳

• [dx] Add "if" set with if/else/ternary rules (#​8199)
• [DeadCode] Add RemoveDeadInstanceOfAssertRector (#​8202)
• [DeadCode] Add RemoveDoubleSelfAssignRector (#​8203)
• [DeadCode] Add RemoveParentDelegatingClassMethodRector (#​8204)
• [DeadCode] Add RemoveDefaultValueFromAssignedPropertyRector (#​8207)
• [TypeDeclaration] Fix incomplete type on yield variable + yield from in AddParamTypeBasedOnPHPUnitDataProviderRector (#​8206)

Bugfixes 🐛

• Fix LogicalToBooleanRector: parenthesize assignments nested under unary/binary operators (#​8184)
• [TypeDeclaration] Skip trait methods on ParamTypeByMethodCallType rules (#​8189)
• [Php80] Skip promotion when property type is wider than constructor param on ClassPropertyAssignToConstructorPromotionRector (#​8170), Thanks @​ximki-vinki!
• [Php85] Skip outer spread on NestedFuncCallsToPipeOperatorRector (#​8191)
• [DeadCode] Fix crash on float version arg in ConditionResolver (#​8192)
• Make NestedFuncCallsToPipeOperatorRector minimum depth configurable (#​8193)
• Fix codeception data provider detection (#​8194), Thanks @​d-mitrofanov-v!
• Make PHPStan DI-Container available in bootstrap files (#​8190), Thanks @​staabm!
• [Privatization] Skip Symfony Command protected static property in PrivatizeFinalClassPropertyRector (#​8201)
• Bump to PHPStan ^2.2.6 and Fix its Container compatibility in RichParser (#​8208)

Removed 💀

• skip @​ return this on RemoveReturnTagIncompatibleWithNativeTypeRector on Traits (#​8185)
• [DeadCode] Skip string scalar sub type on RemoveReturnTagIncompatibleWithNativeTypeRector (#​8186)

rectorphp/rector-symfony 🎵

• [Symfony73] Remove empty configure() method in CommandHelpToAttributeRector (#​969)
• [Symfony73] Keep AbstractExtension when Twig extension overrides a built-in function/filter (#​968)
• [Symfony73] Wrap scalar groups option in array in ConstraintOptionsToNamedArgumentsRector (#​967)
• [Symfony61] Remove empty configure() method even with empty body (#​966)
• [Symfony61] Remove now empty configure() method in CommandConfigureToAttributeRector (#​965)
• [CodeQuality] Respect typeGuardedClasses and skip closure-only returns in ResponseReturnTypeControllerActionRector (#​964)
• [Symfony44] Return 1 instead of (int) false in ConsoleExecuteReturnIntRector (#​963)
• [CodeQuality] Add union and method call return type support to ResponseReturnTypeControllerActionRector (#​961)
• [Twig30] Add new set for Twig 30 (#​960), Thanks @​MrYamous

rectorphp/rector-doctrine 🟠

• [DataFixtures 17] add new set for doctrine data-fixtures 17 (#​487), Thanks @​MrYamous

rectorphp/rector-phpunit 🟢

• [PHPUnit 13] Add PHPUnit 13 config set (#​733)
• [CodeQuality] Skip super global variables on AssertIssetToSpecificMethodRector (#​732)
• [CodeQuality] Skip anonymous classes in AssertClassToThisAssertRector (#​729)
• [CodeQuality] Move AssertClassToThisAssertRector hook from Class_ to ClassMethod (#​728)
• AssertEqualsToSameRector: skip arrays whose actual value key order is not provably identical (#​727)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.