chore(deps): update devdependencies (non-major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
automattic/vipwpcs	3.0.0 -> 3.0.1
johnpbloch/wordpress-core (source)	6.5.2 -> 6.5.3
php-stubs/wordpress-stubs	6.5.2 -> 6.5.3
vimeo/psalm	5.23.1 -> 5.24.0

---

Release Notes

Automattic/VIP-Coding-Standards (automattic/vipwpcs)

v3.0.1

Compare Source

Props: @​GaryJones, @​jrnfl, @​terriann, @​rebeccahum

Increases requirements for PHPCS from 3.7.2 to 3.9.2 for improved PHP 8.2 and PHP 8.3 support. Please ensure you run composer update automattic/vipwpcs --with-dependencies to benefit from this.

Removed

• Functions/RestrictedFunctions:
  • #​812: Remove restricting term_exists().
  • #​814: Remove restricting get_page_by_title().
  • #​817: Remove restricting get_page_by_path().

Changed

• #​799: Classes/DeclarationCompatibility: Sync signature definitions with WP Core.

Maintenance

• #​797: GH: Add initial dependabot config file.
• GH Actions:
  • #​798: Bump actions/checkout to 4 from 3.
  • #​802: Minor tweaks of updating an incorrect URL and adding names to steps.
  • #​803: Builds against PHP 8.3 can no longer fail, but 8.4 can.
  • #​818: Add workaround for intermittent apt-get update issue.
• Composer:
  • #​805: Raise minimum version for better PHP 8.2 support.
  • #​805: Up the minimum PHPCSExtra version to 1.2.1.
  • #​821: Up the minimum PHPCSUtils version to 1.0.11.
  • #​821: Up the minimum PHPCS version to 3.9.2.
  • #​821: Up the minimum WPCS version to 3.1.0.
  • #​821: Up the minimum PHPCSVariableAnalysis version to 2.11.18.
• Docs:
  • #​805: Update references to PHPCS under PHPCSStandards, as squizlabs version is abandoned.
  • #​808: Update Composer installation instructions.
  • #​811: Update old URLs.
• #​809: Unit tests: Allow for PHPUnit 8 and 9.

johnpbloch/wordpress-core (johnpbloch/wordpress-core)

v6.5.3

Compare Source

php-stubs/wordpress-stubs (php-stubs/wordpress-stubs)

v6.5.3

Compare Source

What's Changed

• Improve visitor by @​IanDelMar in https://github.com/php-stubs/wordpress-stubs/pull/173

Full Changelog: php-stubs/wordpress-stubs@v6.5.0...v6.5.3

vimeo/psalm (vimeo/psalm)

v5.24.0

Compare Source

What's Changed

Features

• Allow specifying flags to Codebase::isTypeContainedByType by @​danog in https://github.com/vimeo/psalm/pull/10829
• Allow more callable types as subtypes of callable by @​weirdan in https://github.com/vimeo/psalm/pull/10805
• Report parent being used in callable context when the class does not extend anything by @​kkmuffme in https://github.com/vimeo/psalm/pull/10838
• Report error for additional deprecated arg types in PHP 8.1/8.3 by @​kkmuffme in https://github.com/vimeo/psalm/pull/10824
• Add MissingClassConstType Issue by @​jack-worman in https://github.com/vimeo/psalm/pull/10828
• Enforce parameter names for consistent constructors by @​kkmuffme in https://github.com/vimeo/psalm/pull/10821
• Add misc missing errors for invalid callable methods by @​kkmuffme in https://github.com/vimeo/psalm/pull/10839

Fixes

• Forbid named arguments for ArrayAcccess methods by @​weirdan in https://github.com/vimeo/psalm/pull/10804
• Don't crash on invalid templates by @​weirdan in https://github.com/vimeo/psalm/pull/10806
• report error for single param name mismatch too since named args can even be used then by @​kkmuffme in https://github.com/vimeo/psalm/pull/10822
• add support for named arguments for filter_var and filter_input by @​pilif in https://github.com/vimeo/psalm/pull/10815
• When inside isset, make array fetch result nullable by @​edsrzf in https://github.com/vimeo/psalm/pull/10756
• Promoted properties missing in extended __construct should report PropertyNotSetInConstructor by @​kkmuffme in https://github.com/vimeo/psalm/pull/10817
• Updating signature of getmxrr() by @​ThomasLandauer in https://github.com/vimeo/psalm/pull/10847
• Improve string-int juggle consistency in array keys and display for int-like strings in type by @​kkmuffme in https://github.com/vimeo/psalm/pull/10814
• Fix storage not available in thread for intersection doc types by @​simonberger in https://github.com/vimeo/psalm/pull/10856
• Don't emit MissingOverrideAttribute for implicit Stringable implementations by @​edsrzf in https://github.com/vimeo/psalm/pull/10858
• Specify array return type of session_get_cookie_params by @​jorgsowa in https://github.com/vimeo/psalm/pull/10859
• Unknown @​psalm annotation should not make whole docblock invalid by @​kkmuffme in https://github.com/vimeo/psalm/pull/10885
• Add mail to impure functions list by @​smaddock in https://github.com/vimeo/psalm/pull/10923
• Update PHP 8.2 Call map delta with refined types for string comparison functions by @​gsteel in https://github.com/vimeo/psalm/pull/10883

Docs

• document that @​psalm-internal works for namespace + class too by @​kkmuffme in https://github.com/vimeo/psalm/pull/10866

Internal changes

• fix tests running with other than called PHP binary if called with a non-default PHP binary by @​kkmuffme in https://github.com/vimeo/psalm/pull/10842
• Explicitly set value in config to fix warning in tests by @​kkmuffme in https://github.com/vimeo/psalm/pull/10843
• [PHP 8.4] Fixes for implicit nullability deprecation by @​Ayesh in https://github.com/vimeo/psalm/pull/10832
• Throw exception instead of silently logging issues occurred during scan by @​danog in https://github.com/vimeo/psalm/pull/10902

Other changes

• Fix conditional on non empty literal string by @​VincentLanglet in https://github.com/vimeo/psalm/pull/10912
• Ignore jsonSerialize for implementors of JsonSerializable by @​josephwynn-sc in https://github.com/vimeo/psalm/pull/10891
• Add XML functions to ImpureFunctionsList #​10882 by @​DKhalil in https://github.com/vimeo/psalm/pull/10887

New Contributors

• @​Ayesh made their first contribution in https://github.com/vimeo/psalm/pull/10832
• @​smaddock made their first contribution in https://github.com/vimeo/psalm/pull/10923
• @​josephwynn-sc made their first contribution in https://github.com/vimeo/psalm/pull/10891
• @​DKhalil made their first contribution in https://github.com/vimeo/psalm/pull/10887

Full Changelog: vimeo/psalm@5.23.1...5.24.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details

Scanned Manifest Files

composer.lock

• automattic/vipwpcs@3.0.1
• composer/xdebug-handler@3.0.5
• johnpbloch/wordpress-core@6.5.3
• php-stubs/wordpress-stubs@6.5.3
• phpstan/phpdoc-parser@1.29.0
• spatie/array-to-xml@3.3.0
• symfony/console@7.0.7
• symfony/deprecation-contracts@3.5.0
• symfony/filesystem@7.0.7
• symfony/process@7.0.7
• symfony/service-contracts@3.5.0
• symfony/string@7.0.7
• vimeo/psalm@5.24.0
• automattic/vipwpcs@3.0.0
• composer/xdebug-handler@3.0.4
• johnpbloch/wordpress-core@6.5.2
• php-stubs/wordpress-stubs@6.5.2
• phpstan/phpdoc-parser@1.28.0
• spatie/array-to-xml@3.2.3
• symfony/console@7.0.6
• symfony/filesystem@7.0.6
• symfony/service-contracts@3.4.2
• symfony/string@7.0.4
• vimeo/psalm@5.23.1