Chore(deps-dev): Bump phan/phan from 5.4.5 to 5.5.0

[dependabot]

Bumps phan/phan from 5.4.5 to 5.5.0.

Changelog

Sourced from phan/phan's changelog.

June 30 2025, Phan 5.5.0

New features(Analysis):

• Update real signatures of internal functions for PHP 8.1, add version for PHP 8.2, 8.3, and 8.4. #4960
• Support dynamic class constant fetch in PHP >= 8.3. New issue type, PhanTypeInvalidConstantName, emitted when the dynamic constant name cannot be a string. #4963
• Add basic support for deep-cloning of readonly properties in PHP >= 8.3. #4962
• Warn when a subclass of a generic class does not use @​extends or @​inherit to substitute template types #4993 New issue type: PhanGenericMissingParameters
• New plugin, AsymmetricVisibilityPlugin to analyze properties with asymmetric visibility when running in PHP 8.4. New issue types: PhanPluginAsymmetricVisibilityNoType, PhanPluginAsymmetricVisibilityLessRestrictive #4996

Bug fixes:

• Fix type inference for properties with a PHPDoc type of static in assignments #4883
• Fix type inference for json_decode returning objects vs associative arrays #4745
• Fix infinite loop detection with calls to openssl_error_string, ob_get_level, and error_get_last #4971
• Do not emit PhanPossiblyInfiniteRecursionSameParams if an array element or object property was modified #4972
• Do not treat non-empty-string as a subtype of callable-string. Treat callable-array as a subtype of non-empty-array #4974
• Properly infer template types when analyzing property assignments #4987
• Fix edge cases when parsing generic types #4992
• Do not infer all iterator key/value types from PHPDoc as real types #4986

Miscellaneous:

• Update PHP >= 8.1 signatures of internal functions for resource to object migration #4960
• Emit PhanTypeInvalidDimOffset when accessing a string offset of a union type containing string #4709
• Mark imap_header() as removed in PHP 8.0
• Infer key/element types more accurately for callable-array #4977
• Infer parameter default type more accurately #4398

Plugins:

• Fix PHPDocToRealTypesPlugin suggesting union types containing mixed as a non-standalone type #4952
• Make PHPDocRedundantPlugin detect redundant @param annotations. This only warns if all the @param are redundant, and does not flag individual redundant parameters. #4955
• Make UseReturnValuePlugin not require using the return value of similar_text when the &$percent argument is passed. #4979 #4981

June 9 2025, Phan 5.4.6

New features(Analysis):

• Infer that json_encode always returns a string in PHP >= 7.3 when JSON_THROW_ON_ERROR is used #4946

New features(CLI, Configs):

• Allow passing --minimum-target-php-version=native from the command line. #4939

Bug fixes:

• Fix type of the $gc argument to session_set_save_handler #4891
• Update various IntlDateFormatter signatures #4898
• Fix various false positives when using enable_class_alias_support and two aliases refer to each other #4897
• Fix deprecation warnings when using the CSV printer in PHP 8.4 #4913
• Fix false positive PhanParamTooFewInternal with exit() in PHP 8.4 #4888

... (truncated)

Commits

• d27e93d Merge pull request #4966 from Daimona/rel-5.5.0
• 65fabde Release phan 5.5.0
• ef52e4c Merge pull request #4999 from MatmaRex/docs-and-notes
• 4933097 Merge pull request #4998 from MatmaRex/template-class-cleanup
• 7f6faf0 Merge pull request #4997 from MatmaRex/iterable-real-types
• 094b42e Add some docs and notes from learning my way around Phan
• 6070a58 Clazz: Simplify resolveParentTemplateType()
• 0640175 Clazz: Remove some dead code dealing with generics
• 4eb73b4 Add more test cases for doing weird things with generics
• a868849 Fix all inferred iterable key/value types being marked as real
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @nextcloud-command.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[nextcloud-command]

@dependabot merge