chore: bump the dependencies group with 2 updates

[dependabot]

Bumps the dependencies group with 2 updates: phpstan/phpstan and rector/rector.

Updates phpstan/phpstan from 2.2.11 to 2.2.13

Commits

• See full diff in compare view

Updates rector/rector from 2.6.4 to 2.6.6

Release notes

Sourced from rector/rector's releases.

Released Rector 2.6.6

File selection

--filter option to narrow processed files (#8419)

New --filter option keeps only files whose path matches all given patterns. Repeat the option to require several patterns at once, handy for scoping a run to a subtree or a naming convention without editing config paths.

vendor/bin/rector process src --filter Controller --filter Admin

Before: process every file under the given paths. After: process only files matching all --filter patterns.

Bugfixes 🐛

• Add back RectorConfig::tag() as a no-op BC layer (#8431)
• TypeDeclarationDocblocks: fix invalid array-in-key docblock when narrowing long array unions (#8430)
• BetterPhpDocParser: keep import used only in an annotation array key (#8429)
• RenameVariableToMatchMethodCallReturnTypeRector: fix partial rename with same-named nested arrow param (#8428)
• ArrayFirstLastRector: skip nested compound assignment (#8425)
• ReturnTypeFromStrictNewArrayRector: add doc return type only for list and generic arrays (#8423), skip noisy array-shape union return docblock (#8422)

Extension packages

rector-phpunit 🟢

• AllowMockObjectsForDataProviderRector: skip dynamic method call (#781)
• AssertEmptyNullableObjectToAssertInstanceofRector: skip assertNull/assertEmpty (#780)
• AddSeeTestAnnotationRector: skip existing imported or short @see annotation (#779)

rector-downgrade-php ⬇️

• DowngradeSetAccessibleReflectionPropertyRector: handle getProperties()/getMethods() loop (#396)
• DowngradeHashAlgorithmXxHashRector: skip PHP_VERSION_ID guarded hash() calls (#394)

Internal / cleanup

• Add mspirkov/yii2-rector link to README (#8427)
• Add fixtures for arrow functions returning a ?? expression (#8421)

Released Rector 2.6.5

Caching

This release makes the cache smarter about config changes - fewer needless full re-runs, while still invalidating when results could actually differ.

Configured rule value changes now invalidate the cache (#8400)

... (truncated)

Commits

• ca069d6 Rector 2.6.6
• dd1dbd8 Updated Rector to commit c8f5daeffd982de54092ead1bc0d278a60aa3747
• c6ecc8d Updated Rector to commit 0919678db52fe2ede06192b3b19834401da4a472
• 27296aa Updated Rector to commit 96fd595f95029db66bd5205e6c5aa60eb4745353
• 1e88d3d Updated Rector to commit ee2e8d0dd1afbdc754e5c9f6db7835e5136055f8
• 33b2be9 Updated Rector to commit ee2e8d0dd1afbdc754e5c9f6db7835e5136055f8
• 0a5abf5 Updated Rector to commit 28a4645c168c2567f79108c1c4463cda1afb4aff
• 646f9f7 Updated Rector to commit 28a4645c168c2567f79108c1c4463cda1afb4aff
• 78802da Updated Rector to commit 28a4645c168c2567f79108c1c4463cda1afb4aff
• 7a20767 Updated Rector to commit 0c3d4f4e3c5c3eb7eabc0f7097bd7efaea657439
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric	Results
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}