chore(deps): update dependency spaze/phpstan-disallowed-calls to ^4.12.0 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
spaze/phpstan-disallowed-calls	^4.7.0 → ^4.12.0

---

Release Notes

spaze/phpstan-disallowed-calls (spaze/phpstan-disallowed-calls)

v4.12.0: classPattern directive, allowInInstanceOf wildcards, param conditions in more places

Compare Source

New

• classPattern param directive matches a parameter's declared class name against a wildcard pattern using fnmatch() (#​412, docs example #​417)
• allowInInstanceOf/disallowInInstanceOf now support fnmatch() wildcard patterns (#​399, docs example #​417) and param conditions (#​401)
• Param conditions also work with allowExceptIn/allowExceptInMethods and their disallowIn* aliases (#​414)
• allowExceptParamsAnywhere and disallowParamsAnywhere aliases for allowExceptParams/disallowParams to match other *Anywhere directives (#​410)

Bugfixes

• typeString: descriptive exception on parse failure (#​407)
• Empty string in typeString now throws an exception, and '0' (a string consisting of 0) is now a valid typeString (#​409)
• First-class callable syntax (func(...)) with param conditions is now handled correctly (#​418)
• allowExceptInFunctions/allowExceptInMethods with multiple entries only checked the first one, not anymore (#​405)

Internal changes

• Added CLAUDE.md (#​403, export-ignored in #​413)
• export-ignore phpstan-dead-code-detector.php from release archives (#​413)

v4.11.0: Allow or disallow classes/namespaces in param or return types

Compare Source

Allow or disallow classes/namespaces in param or return type hint positions (#​392)

Applies only to disallowedNamespaces and disallowedClasses, the following configuration keys let you permit (or restrict) a class or namespace based on whether it appears as a parameter type hint or a return type hint in a function or method signature, and ban (or allow) using it elsewhere, for example in the method body.

• allowInParamTypes: true
• allowExceptInParamTypes: true (or the disallowInParamTypes alias)
• allowInReturnType: true
• allowExceptInReturnType: true (or the disallowInReturnType alias)

See the docs for examples.

Note: to enable usage in use imports use allowInUse: true.

Internal changes

• Normalize PHPUnit PHP version requirements to X.Y.Z to eliminate test-runner warnings (#​393, thanks @​Copilot)
• Rework allowInMethodsWithAttributes in signatures to use a node visitor (#​395)

v4.10.0: Can disallow global

Compare Source

Can disallow (some) keywords with disallowedKeywords, only global supported for now (#​390)

parameters:
    disallowedKeywords:
        -
            keyword: 'global'
            allowIn:
                - 'legacy/*'

v4.9.2: Built-in functions + definedIn fix take 2

Compare Source

This release includes a proper fix for the "defined in" checks originally fixed in 4.9.1. (#​388)

As a necessary side effect, unknown functions (functions where their reflection is not available) won't be reported as disallowed anymore, if configured, by this extension as is the case with for example methods already.

v4.9.1: Built-in functions + definedIn fix

Compare Source

• Short-cut "defined in" checks for built-in functions and methods (#​384) (Now they're not flagged anymore)

Internal changes

• Mention properties in README (#​380) (Hmm, naming the extension "disallowed calls" wasn't as clever as I though back then)
• Fix --prefer-lowest installs PHPStan 2.x instead of 1.x (#​382, thanks @​Copilot) Tests are now again running on PHPStan 1.x as well

v4.9.0: Can disallow properties

Compare Source

Naming is hard, so that's why this Disallowed Calls extension now supports disallowing instance and static properties, and enum properties with disallowProperties (#​378)

Other (mostly) internal changes

• Add generics to Generator (#​372)
• Handle all the include types in the switch (#​373)
• Upgrade Dead Code Detector (#​375, thanks @​janedbal)
• Make the disallowedSuperglobals docs more clear that it doesn't recommend $_REQUEST (#​377)

---

Oh, a Friday 13th release! 👻

v4.8.0: Multiple tips per error, PHPUnit 13

Compare Source

You can now also pass an array to errorTip in the config:

errorTip:
  - Tip 1
  - Tip 2

PHPStan will print al the tips, but please note that tips will be prefixed with •, like this:

💡• a tip
• another one

---

• Allow passing an array to errorTip (#​367 #​369, thanks @​Copilot and myself 🤖)
• Allow PHPUnit 13 (#​368)

v4.7.1: Class constants declaring class fix for PHPStan 2.1.38+, better tests

Compare Source

Constants

• Don't include template types in constant's declaring class display name, needed for PHPStan 2.1.38+ (#​363)
• Update the docs for constant usage in params (#​364)

Tests

• Run e2e tests on PHP 8.5 (#​356, #​359)
• Analyze bin (#​358)

Dependency updates

• Bump actions/checkout from 5 to 6 (#​357)
• Upgrade shipmonk/dead-code-detector (#​362)

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

---

• Branch has one or more failed status checks

[coveralls]

Coverage Report for CI Build 26029365165

Coverage remained the same at 37.306%

Details

• Coverage remained the same as the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	386
Covered Lines:	144
Line Coverage:	37.31%
Coverage Strength:	1.3 hits per line

---

💛 - Coveralls