[dependabot]

Bumps the dev-dependencies group with 3 updates in the / directory: vimeo/psalm, phpstan/phpstan and rector/rector.

Updates vimeo/psalm from 6.20.3 to 6.20.4

Release notes

Sourced from vimeo/psalm's releases.

6.20.4

What's Changed

Fixes

• [6.x] Fix: class_alias() of an enum, interface, attribute, trait or type holder crashes with Could not get class storage by @​alies-dev in vimeo/psalm#12518
• [6.x] Fix: type imported through a class_alias() is lost inside an intersection by @​alies-dev in vimeo/psalm#12569
• [6.x] Fix: accept TLiteralClassString of a trait as trait-string by @​no-simpler in vimeo/psalm#11783
• [6.x] Fix: false InvalidAttribute for #[\Deprecated] on traits (PHP 8.5) by @​alies-dev in vimeo/psalm#12277
• [6.x] Narrow Redis keys(), hKeys() and hVals() to lists, declare RedisException and RedisClusterException by @​alies-dev in vimeo/psalm#12581
• [6.x] Fix crash on first-class callable of inherited method by @​alies-dev in vimeo/psalm#12582

Internal changes

• [6.x] Perf: update the reference cache once per analysis by @​alies-dev in vimeo/psalm#12575
• Add a #psalm hashtag to release announcements by @​danog in vimeo/psalm#12584

New Contributors

• @​no-simpler made their first contribution in vimeo/psalm#11783

Full Changelog: vimeo/psalm@6.20.3...6.20.4

Commits

• e53db69 Merge pull request #12584 from vimeo/ccr-4c04afc5-emhuk4
• dd724f1 Merge pull request #12582 from alies-dev/alies-dev/crash-on-first-class-calla...
• 97e83a3 Add a #psalm hashtag to release announcements
• d230b5d Merge pull request #12581 from alies-dev/alies-dev/redis-stub-precise-types
• bb54ae4 fix: resolve declaring method for first-class callables of inherited methods
• 5f95792 Type Redis keys(), hKeys() and hVals() as lists, declare RedisException and R...
• 1b83204 Merge pull request #12575 from alies-dev/alies-dev/6x-ref-cache-once
• 02cbdb5 Merge pull request #12277 from alies-dev/fix/php85-deprecated-trait
• de7a719 Merge pull request #11783 from no-simpler/fix/trait-string-literal-class-stri...
• 047df4c Update the reference cache once per analysis
• Additional commits viewable in compare view

Updates phpstan/phpstan from 2.3.3 to 2.3.4

Commits

• See full diff in compare view

Updates rector/rector from 2.8.1 to 2.8.3

Release notes

Sourced from rector/rector's releases.

Released Rector 2.8.3

Faster node traversal and updated PHPStan stack 🚀

This release brings performance improvements to node visitors, reducing unnecessary traversals and reflection resolution during analysis.

It also updates PHPStan to 2.3.4 and phpstan/phpdoc-parser to 2.4, with compatibility fixes for the updated PHPDoc type nodes.

Performance Improvements 🚀

• Avoid nested traversals in ByRefNodeVisitor by tracking by-reference variable names per FunctionLike (#8879) Thanks @​samsonasik
• Only resolve call reflection for 2-item array arguments in CallLikeReflectionNodeVisitor (#8880) Thanks @​samsonasik

Bugfixes 🐛

• [TypeDeclaration] AddArrayFunctionClosureParamTypeRector: resolve array item types from unions of arrays (#8877) Thanks @​SanderMuller
• Lock the fixture directory itself to prevent conflicts between parallel test workers using different TMPDIR values (#8878) Thanks @​SanderMuller

Internals ⚙️

• Bump PHPStan to 2.3.4 and phpstan/phpdoc-parser to 2.4, adapting PHPDoc node handling for the new NameNode, FullyQualifiedNameNode, and RelativeNameNode types (#8883) Thanks @​ondrejmirtes

Released Rector 2.8.2

Leaner PHPDoc stack and a fluent composer-based config 🚀

This release leans on phpstan/phpdoc-parser directly: Rector drops its own forked parser, printer, token iterator and type-node subclasses, and reuses the upstream parser, format-preserving printer, node traverser and type nodes. Fewer moving parts, one source of truth for PHPDoc handling, and it rides the PHPStan 2.3.3 bump. Thanks @​ondrejmirtes.

On the config side, withComposerBased() now auto-detects installed packages when called with no argument, and a fluent withComposerBasedRule() builder lands across core and the rector-* sets.

New features 🥳

• Add withComposerBasedRule() to the fluent RectorConfig::configure() builder (#8875)
• [Configuration] Auto-detect installed packages in withComposerBased() called with no argument (#8748) Thanks @​MadBox-99
• [TypeDeclaration] Prefer same-namespace classes over global PHPDoc types (#8869) Thanks @​MohannadElemary
• [dx] Report rule-scoped skips that matched a file but never changed it (#8853)

Performance Improvements 🚀

• Reduce memory usage on the LPT bucket by recycling workers and keeping files in discovery order (#8867) Thanks @​samsonasik
• Cache skip-filtered rules per node class for the current file in RectorRegistry::forNodeAndFile() (#8860) Thanks @​samsonasik
• Remove unneeded array_values() when arrays are already lists or called too early (#8857) Thanks @​samsonasik

... (truncated)

Commits

• 12ddb68 Rector 2.8.3
• 768a3dc Updated Rector to commit 8323e93e55a40fb408fae7af4e5ba8b770fa8441
• 7c07b79 Updated Rector to commit 62e0fccbe42cebe7d5b3281b687aa404e6120ede
• b8a1dca Updated Rector to commit 62e0fccbe42cebe7d5b3281b687aa404e6120ede
• 0207c40 Updated Rector to commit 62e0fccbe42cebe7d5b3281b687aa404e6120ede
• 85ff869 Updated Rector to commit 6f8df55c5210ab07b644da15a57111bd65d3690e
• 066425d Updated Rector to commit e291f0d9bc43002279494134a993abc59a27d465
• 69d19ec Updated Rector to commit 8271f5dd75261f4532e3ba6d9ae34649d3d9cffb
• ebc7e41 Updated Rector to commit 7aef6aac3302fe53bf0a3cd8369d496f3a0c84c1
• 03a365d Rector 2.8.2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Thanks for contributing to EngineScript Site Optimizer!

Before we review:

• Have you tested your changes with WordPress 7.0+?
• Are your changes compatible with PHP 8.3+?
• Have you followed WordPress coding standards?
• Did you update the CHANGELOG.md if needed?

Security Reminder
This plugin stores per-site settings and emits browser resource hints, so please ensure:

• All user input is properly sanitized
• All output is properly escaped
• No security vulnerabilities are introduced

We'll review your PR soon.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}