chore: Update Composer QA tooling dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
friendsofphp/php-cs-fixer	^3.88.2 -> ^3.89.0
rector/rector (source)	^2.2.3 -> ^2.2.5

---

Release Notes

PHP-CS-Fixer/PHP-CS-Fixer (friendsofphp/php-cs-fixer)

v3.89.0

Compare Source

• feat: autofix "no-return" phpdoc type to "never" (#​9073)
• feat: support keeping strict_types=0 in DeclareStrictTypesFixer (#​9121)
• feat: NoUnneededBracesFixer - remove unneeded braces from imports (#​9118)
• fix: FullyQualifiedStrictTypesFixer - replacing the real FQCN with a non-existent one (#​8962)
• fix: PhpdocToCommentFixer on property hooks (#​9123)
• fix: PhpUnitMethodCasingFixer to not cause a duplicate method declaration (#​9124)
• fix: StaticLambdaFixer - do not make function static when it contains anonymous class having $this in the constructor (#​9088)
• fix: UseArrowFunctionsFixer - do not produce two consecutive whitespace tokens (#​9151)
• UX: better gitlab reporting - add content field (#​9152)
• UX: better gitlab reporting - more user-friendly description field (#​9141)
• UX: better gitlab reporting for location.lines (#​9149)
• UX: Warn if executed php version is higher than the minimum php version defined in composer.json (#​9134)
• chore: add UX title pattern (#​9132)
• chore: explicitly use php interpreter for paraunit (#​9126)
• chore: extend composer scripts (#​9127)
• chore: fix shellcheck installation for Darwin (#​9125)
• chore: replace PHPDocs with assert calls (#​9144)
• deps: bump crate-ci/typos from 1.36.3 to 1.38.1 (#​9136)
• deps: bump phpstan/phpstan from 2.1.29 to 2.1.31 in /dev-tools in the phpstan group (#​9129)
• deps: bump shipmonk/dead-code-detector from 0.13.3 to 0.13.4 in /dev-tools (#​9135)
• deps: bump shipmonk/dead-code-detector from 0.13.4 to 0.13.5 in /dev-tools (#​9146)
• deps: bump the phpstan group across 1 directory with 2 updates (#​9101)
• deps: use shipmonk/composer-dependency-analyser instead of icanhazstring/composer-unused and maglnet/composer-require-checker (#​9106)
• docs: fix docs for @autoPHPUnitMigration:riskyset (#​9147)
• docs: improve descriptions for NoTrailingWhitespace* fixers (#​9117)
• docs: more explicit docs on --rules (#​9114)
• docs: update usage documentation for describe --expand and @ (#​9119)
• DX: Fix composer qa script (#​9138)
• refactor: --option value => --option=value (#​9131)
• test: Fix result randomness in RunnerTest for MacOS (#​9139)

rectorphp/rector (rector/rector)

v2.2.5: Released Rector 2.2.5

Compare Source

Rules Registered in sets 🥳

Couple long-existing rules were added to PHP 8.1, code quality and type declaration sets after optional community testing ✔️
If you'll experience any undersired changes, let us know 👍

• register AddClosureParamTypeForArrayMapRector in type declaration level (rectorphp/rector-src@68bb0cc)
• register AddClosureParamTypeForArrayReduceRector to type declaration level (rectorphp/rector-src@38ecb98)
• improve description (rectorphp/rector-src@1ae7187)
• add FunctionFirstClassCallableRector to PHP 8.1 set (rectorphp/rector-src@0e18562)
• register ReplaceConstantBooleanNotRector in code-quality level (rectorphp/rector-src@e164069)
• register ClosureFromCallableToFirstClassCallableRector to PHP 8.1 set (rectorphp/rector-src@d229205)
• register NewInInitializerRector in PHP 8.1 (#​7545)

Bugfixes 🐛

• [fix] skip variadic param on ParamTypeByParentCallTypeRector (#​7532)
• [Php81][CodingStyle] Skip multi params on FunctionLikeToFirstClassCallableRector (#​7537)
• [Php81][CodingStyle] Skip callable param assign with signature multi params on FunctionLikeToFirstClassCallableRector (#​7538)
• Fix NullToStrictStringFuncCallArgRector with probabilistic check for plural array passed to function where array allowed (#​7539)
• [Php81][CodingStyle] Skip variadic not used on FunctionLikeToFirstClassCallableRector (#​7540)
• [Php81] Keep nullable param on NewInInitializerRector (#​7545)
• [php 8.1] skip nullable property without null default in NewInInitializerRector (#​7546)

Removed and deprecated 💀

• [depre] Deprecate 3 configurable-only, never used closure param rules as too specific (#​7541)
• [depre] Deprecate RenameFunctionLikeParamWithinCallLikeArgRector as never used, too narrow and better suits custom project (#​7544)
• [depre] Deprecate AddTypeFromResourceDocblockRector as breaks code and does not solve any real problem (#​7542)
• [Php81] Completely remove AttributeGroupNewLiner (#​7536)

---

rectorphp/rector-phpunit 🟢

• [depre] Add never used AddCoversClassAttributeRector, as very opionated and requires very specific file location - use custom rule instead (#​561)
• Fix implicit PHP and PHPUnit version in RequiresAnnotationWithValueToAttributeRector (#​560)
• [code-quality] Add AssertArrayCastedObjectToAssertSameRector (#​559)

v2.2.4: Released Rector 2.2.4

Compare Source

New Features 🥳

• [code-quality] Add RepeatedAndNotEqualToNotInArrayRector (#​7517)
• [code-quality] Add ReplaceConstantBooleanNotRector (#​7527)
• [code-quality] Add VariableConstFetchToClassConstFetchRector (#​7457)
• [coding-style] Add BinaryOpStandaloneAssignsToDirectRector (#​7466)

Bugfixes 🐛

• Fix autoload preload on PHPUnit 12+ on global installation (#​7468) (#​7472) (#​7475)
• [TypeDeclaration] Skip override from parent method on AddParamStringTypeFromSprintfUseRector (#​7479)
• Run PHPUnit 12 and PHPStan compatibilty check (#​7455)
• [TypeDeclarationDocblocks] Handle repeated item type on DocblockReturnArrayFromDirectArrayInstanceRector (#​7459)
• [BetterPhpDocParser] Unique handling string on BracketsAwareUnionTypeNode (#​7462)
• [CodeQuality] Skip non-variable fetch on VariableConstFetchToClassConstFetchRector as may cause side effect (#​7464)
• [CodingStyle] Skip any CallLike with args !== [] on BinaryOpStandaloneAssignsToDirectRector (#​7469)
• [CodingStyle] Skip compare binary op on BinaryOpStandaloneAssignsToDirectRector (#​7470)
• [CodingStyle] Skip by ref params on BinaryOpStandaloneAssignsToDirectRector (#​7471)

Removed and deprecated 💀

• [deprecated] Deprecate strict-types rules as risky and not practical (#​7523)
• [DeadCode] Skip vars exists in static vars on RemoveNonExistingVarAnnotationRector (#​7463)
• [autoload] Remove PHPUnit version 12 check on preload.php load (#​7474)
• [Removal] Remove --kaizen option, as it might jump right to risky rules, use levels instead (#​7478)

rectorphp/rector-phpunit

• Fix argument.type PHPStan errors (#​553), Thanks @​staabm

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled because a matching PR was automerged previously.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coveralls]

coverage: 95.709%. remained the same
when pulling 3fd8bf5 on renovate/composer-qa-tooling
into a0eb098 on main.