ci(deps-dev): Add strict rules for Larastan and update dependencies

- Added "canvural/larastan-strict-rules" version ^3.0 to require-dev
- Added "larastan/larastan" version ^3.8 to require-dev
- Ensures better type safety and code quality in the project

Author: guanguans

.github/workflows/phpstan.yml

@@ -37,5 +37,15 @@ jobs:
       - name: Run composer install
         run: composer install --no-interaction --ansi -v
 
+      - name: Run phpstan with sarif error format
+        continue-on-error: true
+        run: composer phpstan:analyse-error-format-sarif
+
+      - name: Upload the analysis results of sarif to GitHub
+        uses: github/codeql-action/upload-sarif@v4
+        with:
+          sarif_file: .build/phpstan/results.sarif
+          wait-for-processing: true
+
       - name: Run phpstan
         run: composer phpstan:analyse

composer.json

@@ -71,6 +71,7 @@
         "guanguans/php-cs-fixer-custom-fixers": "^1.0",
         "guanguans/rector-rules": "^1.0",
         "itsgoingd/clockwork": "^5.3",
+        "jbelien/phpstan-sarif-formatter": "^1.2",
         "laradumps/laradumps": "^4.6",
         "laravel/facade-documenter": "dev-main",
         "laravel/telescope": "^5.16",
@@ -385,6 +386,10 @@
         "phpmnd": "@php vendor/bin/phpmnd src/ --exclude-path=Support/helpers.phpp --ignore-numbers=2,-1 --hint --progress --ansi -vv",
         "phpstan": "@php vendor/bin/phpstan --ansi -vv",
         "phpstan:analyse": "@phpstan analyse",
+        "phpstan:analyse-error-format-sarif": [
+            "[ -d .build/phpstan/ ] || mkdir -p .build/phpstan/",
+            "@php vendor/bin/phpstan --ansi -vv analyse --error-format=sarif > .build/phpstan/results.sarif"
+        ],
         "phpstan:analyse-generate-baseline": "@phpstan:analyse --generate-baseline --allow-empty-baseline",
         "phpstan:analyse-split-baseline": [
             "@phpstan:analyse --generate-baseline=baselines/loader.neon --allow-empty-baseline",
@@ -471,7 +476,7 @@
         "var-dump-server:cli": "@php vendor/bin/var-dump-server --ansi -vv",
         "var-dump-server:html": [
             "@composer-config:disable-process-timeout",
-            "[ -d .build ] || mkdir -p .build/",
+            "[ -d .build/ ] || mkdir -p .build/",
             "[ -f .build/dump.html ] || touch .build/dump.html",
             "open .build/dump.html",
             "@php vendor/bin/var-dump-server --ansi -v --format=html > .build/dump.html"

phpstan.neon.dist

@@ -27,6 +27,14 @@ includes:
 #    - vendor/symplify/phpstan-rules/config/rector-rules.neon
 #    - vendor/symplify/phpstan-rules/config/symfony-rules.neon
 
+services:
+    errorFormatter.sarif:
+        class: PHPStanSarifErrorFormatter\SarifErrorFormatter
+        arguments:
+            relativePathHelper: @simpleRelativePathHelper
+            currentWorkingDirectory: %currentWorkingDirectory%
+            pretty: true
+
 parameters:
     paths:
         - config/

vendor-bin/php82/composer.json

@@ -1,8 +1,10 @@
 {
     "require-dev": {
         "php": ">=8.2",
+        "canvural/larastan-strict-rules": "^3.0",
         "ergebnis/composer-normalize": "^2.48",
         "guanguans/monorepo-builder-worker": "^2.1",
+        "larastan/larastan": "^3.8",
         "mrpunyapal/rector-pest": "^0.1",
         "peckphp/peck": "^0.2",
         "phpro/grumphp-shim": "^2.18",