Skip to content

Bump vimeo/psalm from 3.12.2 to 3.13.1

Wesley Klop requested to merge dependabot/composer/vimeo/psalm-3.13.1 into master

Created by: dependabot[bot]

Bumps vimeo/psalm from 3.12.2 to 3.13.1.

Release notes

Sourced from vimeo/psalm's releases.

Minor bugfixes

  • fixes a possible crash when recursing through template params (#3912)
  • improves the return type for fgetcsv (now more lenient)

Allow MissingPropertyType to be fixed automatically

Features

MissingPropertyType fixer

Running vendor/bin/psalm --alter --issues=MissingPropertyType (when using PHP 7.4) on

<?php
class A {
    public $string_or_int;
    public $only_string;
    public $conditionally_set_string;
public function __construct()
{
    if (rand(0, 1)) {
        $this-&gt;string_or_int = 5;
    } else {
        $this-&gt;string_or_int = &quot;hello&quot;;
        $this-&gt;conditionally_set_string = &quot;goodbye&quot;;
    }
$this-&amp;gt;only_string = &amp;quot;bar&amp;quot;;

}

}

gives

<?php
class A {
    /**
     * @var string|int
     */
    public $string_or_int;
public string $only_string;
/**

@var null|string
*/
public $conditionally_set_string;

public function __construct()

</tr></table> ... (truncated)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Merge request reports