Update Minor and Patch Contrib

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
composer/composer (source)	2.9.3 → 2.9.4
phpstan/phpstan	2.1.33 → 2.1.37
phpunit/phpunit (source)	11.5.48 → 11.5.49
rector/rector (source)	2.3.1 → 2.3.4
symfony/console (source)	7.4.3 → 7.4.4

---

Release Notes

composer/composer (composer/composer)

v2.9.4

Compare Source

• Added active plugins to the diagnose command output (#​12706)
  • Fixed HTTP/3 causing issues with proxies (#​12699)
  • Fixed show command regression with long descriptions containing unicode characters (#​12704)
  • Fixed regression handling invalid unicode sequences in output (#​12707)
  • Fixed git rev-list usages to support older pre-2.33 git versions (#​12705)
  • Fixed issue handling paths with = in them on Windows (#​12726)

phpstan/phpstan-phar-composer-source (phpstan/phpstan)

v2.1.37

Compare Source

v2.1.36

Compare Source

v2.1.35

Compare Source

v2.1.34

Compare Source

sebastianbergmann/phpunit (phpunit/phpunit)

v11.5.49: PHPUnit 11.5.49

Compare Source

Fixed

• #​6362: Manually instantiated test doubles are broken since PHPUnit 11.2
• #​6470: Infinite recursion in Count::getCountOf() for unusal implementations of Iterator or IteratorAggregate

---

Learn how to install or update PHPUnit 11.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

rectorphp/rector (rector/rector)

v2.3.4: Released Rector 2.3.4

Compare Source

Bugfixes 🐛

• Bump to PHPStan ^2.1.36 (#​7850)
• [Php81] Exclude Doctrine ODM MongoDB 2.16 Document and EmbeddedDocument from ReadOnlyPropertyRector. (#​7848), Thanks @​mickverm!

v2.3.3: Released Rector 2.3.3

Compare Source

Bugfixes 🐛

• rectorphp/rector-src@61f8719 Pin PHPStan 2.1.34, as 2.1.35 introduced a complex regression breaking Rector - see rectorphp/rector-src#7847

v2.3.2: Released Rector 2.3.2

Compare Source

New Features 🥳

• [dx] Rename DeprecatedAnnotationToDeprecatedAttributeRector for PHP 8.5 to explicit ConstAndTraitDeprecatedAttributeRector, add trait suport (#​7823)

Bugfixes 🐛

• Bump to PHPStan 2.1.34 and fix compatible code (rectorphp/rector-src#7844)
• [perf] optimize ParamTypeByMethodCallTypeRector for speed with early checks (#​7831)
• make resolveClassReflection non-nullable as always passed a node (#​7833)
• [Php74] Skip closure in attribute on ClosureToArrowFunctionRector (#​7834)
• Manage named arguments when removing values (#​7835), Thanks @​carlos-granados!
• bump to PHP 8.3 + update deps + allow it in CI (#​7838)
• Support array_values in ArrayFirstLastRector (#​7830), Thanks @​Orest-Divintari!
• [Php85] Skip as assigned var/op on ArrayFirstLastRector (#​7843)
• Remove no longer needed tweak AlwaysRememberedExpr on Printer per PHPStan 2.1.34 (#​7770)

rectorphp/rector-phpunit 🟢

• fix a class name that should be string (#​607)
• Support array_values in ArrayFirstLastRector (#​7830), Thanks @​Orest-Divintari!
• [Php85] Skip as assigned var/op on ArrayFirstLastRector (#​7843)

symfony/console (symfony/console)

v7.4.4

Compare Source

---

Configuration

📅 Schedule: Branch creation - "before 2am on Sunday" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

Code Coverage Report:
  2026-01-25 00:53:54

 Summary:
  Classes:  0.00% (0/1)
  Methods:  0.00% (0/2)
  Lines:   93.82% (167/178)

[AlexSkrypnyk]

Code Coverage Report:
  2026-01-25 00:54:22

 Summary:
  Classes:  0.00% (0/1)
  Methods:  0.00% (0/2)
  Lines:   93.82% (167/178)

[AlexSkrypnyk]

Code Coverage Report:
  2026-01-25 00:57:42

 Summary:
  Classes:  0.00% (0/1)
  Methods:  0.00% (0/2)
  Lines:   93.82% (167/178)

[AlexSkrypnyk]

Code Coverage Report:
  2026-01-25 00:58:11

 Summary:
  Classes:  0.00% (0/1)
  Methods:  0.00% (0/2)
  Lines:   93.82% (167/178)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 63.88%. Comparing base (6e498ef) to head (905e577).

❗ There is a different number of reports uploaded between BASE (6e498ef) and HEAD (905e577). Click for more details.

HEAD has 10 uploads less than BASE

Flag	BASE (6e498ef)	HEAD (905e577)
	13	3

Additional details and impacted files

@@             Coverage Diff             @@
##             main    #2240       +/-   ##
===========================================
- Coverage   76.85%   63.88%   -12.98%     
===========================================
  Files         112       38       -74     
  Lines        5846     2132     -3714     
  Branches       44        0       -44     
===========================================
- Hits         4493     1362     -3131     
+ Misses       1353      770      -583     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.