build(deps-dev): bump phpstan/phpstan from 1.12.29 to 2.1.36

[dependabot]

Bumps phpstan/phpstan from 1.12.29 to 2.1.36.

Release notes

Sourced from phpstan/phpstan's releases.

2.1.36

Bugfixes 🐛

• Fix FNSR false positive about "expr.resultUnused" (phpstan/phpstan-src@ca7ab77)
• Fix named argument parameter matching in getFunctionCallStackWithParameters (#4791), thanks @​janedbal!
• Do not deep-clone nodes (phpstan/phpstan-src@9a31328), #13992
• Add getScopeType and getScopeNativeType again (phpstan/phpstan-src@02869f6), #13983
  • See discussion phpstan/phpstan#13983
• Skip polyfills in vendor when on a higher PHP version (phpstan/phpstan-src@f06c4a2)

Function signature fixes 🤖

• Fix uopz_add_function() return type (#4578), thanks @​zonuexe!

Internals 🔍

• Test that expr inside isset() can be changed with fixable rule (phpstan/phpstan-src@53a03d5), #13983
• Added regression test (#4796), #13694, thanks @​staabm!

2.1.35

Bugfixes 🐛

• Fix ArrayCountValuesDynamicReturnTypeExtension (#4618), thanks @​VincentLanglet!
• Make processStmtNodesInternal synchronous despite Fibers & Deep-clone synthetic nodes before processing (#4793), #13980, #13983, #13987, #13982, #13978, #13989

Internals 🔍

• RuleTestCase - sort actual and expected errors before comparing (#4790)
• Revert "Keep errors ordering even when nodeCallback executed out of order" (#4790)
• narrowMethodScopeFromConstructor parameter no longer needed because RuleTestCase sorts the errors (#4790)
• Prevent unnecessary work around parametersAcceptor->getParameters() call-sites (#4792), thanks @​staabm!

2.1.34

Major new features 🚀

• Optimized performance 🏎️
  • Caching of reflection objects and resolved PHPDocs
  • Many raw performance optimization tweaks in analyser code (thanks @​staabm!)
  • Projects typically see 25 % to 40 % faster analysis times. Please test this release and report back, we're looking forward to your numbers as well!
• Utilization of Fibers for more precise analysis (PHP 8.1+)
  • Code like doFoo($a = 1, $a) will see better type inference for 2nd call argument.
  • When a rule hooked onto MethodCall AST node asks for $scope->getType($node->args[1]), without Fibers it gets mixed, because $scope sees the state before the method call.
  • Fibers allow PHPStan to "pause" the execution of the rule until the precise type of $node->args[1] is available in the analyser.
  • When the 2nd argument is processed, the execution of the rule is resumed and $scope->getType($node->args[1]) sees 1 as the type, not mixed.

... (truncated)

Commits

• 2132e5e PHPStan 2.1.36
• c96b08c One more fix for Shopsys
• f056c3b Try similar fix for Shopsys
• 32c3ab4 Try fix
• 9507dde Analyse rector-downgrade-php
• 76b7f5a Updated PHPStan to commit 76b7f5a80a14729a9813a79be681377ab4e3b55c
• f06c4a2 Updated PHPStan to commit f06c4a2cbcf4f0e167b7fff1a3e8ab3b46bded86
• 2605d94 Update errors identifiers
• 02869f6 Updated PHPStan to commit 02869f6dfc93fd5672b440e270d7611945612597
• 8bd1969 Update shipmonk/phpstan-rules
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)