chore(deps/composer): bump the mediawiki group with 3 updates

[dependabot]

Updates the requirements on mediawiki/mediawiki-codesniffer, mediawiki/mediawiki-phan-config and mediawiki/minus-x to permit the latest version.
Updates mediawiki/mediawiki-codesniffer to 46.0.0

Changelog

Sourced from mediawiki/mediawiki-codesniffer's changelog.

v46.0.0 / 2025-01-27

Changed sniffs

• AlphabeticArraySortSniff: Support sorting by symbol name, e.g. const keys (Muhammad Yasser Jazirahly)
• FunctionAnnotationsSniff: Allow use of @preCondition and @postCondition PHPUnit annotations (Umherirrender)
• NullableTypeSniff: Don't try to fix mixed to add null, it is already nullable (Taavi Väänänen)
• StaticClosureSniff: Work on fn() too (Reedy)

Documentation, dependencies and build changes

• Raise PHP CodeSniffer from 3.10.3 to 3.11.3 (James D. Forrester, Reedy)
• build: Updating mediawiki/mediawiki-phan-config to 0.15.1 (libraryupgrader)
• build: Updating phpunit/phpunit to 9.6.21 (libraryupgrader)
• tests: Add newline at end of all .expect files (Bartosz Dziewoński)
• tests: Re-enable ScopeIndent sniff on test that was previously failing (Daimona Eaytoy)

v45.0.0 / 2024-10-29

New sniffs

• Add MediaWiki.Usage.NullableType.ExplicitNullableTypes to check for implicitly nullable types in PHP 8.4 (Umherirrender)

Changed sniffs

• NullableTypeSniff: Also check closure and arrow functions (Umherirrender)

Documentation, dependencies and build changes

• Update squizlabs/php_codesniffer to 3.10.3 (Umherirrender)
• build: Support composer/semver 3.4.3 (C. Scott Ananian)
• build: Drop support for older composer/semver versions (Alexander Vorwerk)
• build: Add ext-dom to require-dev, used in a test (Reedy)

v44.0.0 / 2024-08-10

New sniffs

• Add Generic.CodeAnalysis.RequireExplicitBooleanOperatorPrecedence (Daimona Eaytoy)
• Add Universal.CodeAnalysis.NoDoubleNegative to replace DoubleNotOperatorSniff (Daimona Eaytoy)
• Add Universal.PHP.LowercasePHPTag (Daimona Eaytoy)

Changed sniffs

• ExtendClassUsageSniff: Add $wgInitialSessionId to non-config variables (Func)
• PhpunitAnnotationsSniff: Update also absolute class names in @covers (Umherirrender)
• SpaceBeforeClassBrace.BraceNotOnOwnLine: Handle multi-line anon class (Umherirrender)
• UnusedUseStatementSniff: Don't report unused classes in@phpstan… and @psalm-import-type (thiemowmde)
• UnusedUseStatementSniff: Replace hard-coded@…-import-type with more flexible config (thiemowmde)

Removed sniffs

• DoubleNotOperatorSniff, replaced by Universal.CodeAnalysis.NoDoubleNegative (Daimona Eaytoy)

Documentation, dependencies and build changes

• Support composer/semver 3.4.2 (Kunal Mehta)
• build: Update codesniffer to 3.9.0, phpcsextra to 1.2.1 (Daimona Eaytoy)
• build: Update minus-x to 1.1.3 (Alexander Vorwerk)

... (truncated)

Commits

• 6bd8a9a HISTORY: Tag as v46.0.0
• 8983532 Raise PHP CodeSniffer from 3.11.1 to 3.11.3
• aa5f2b5 Re-enable ScopeIndent sniff on test that was previously failing
• 3a61696 Raise PHP CodeSniffer from 3.10.3 to 3.11.1
• 9479c6b StaticClosureSniff: Work on fn() too
• 7bf21d7 build: Updating mediawiki/mediawiki-phan-config to 0.15.1
• 82f8c83 Allow use of @​preCondition and @​postCondition PHPUnit annotations
• 6939f62 build: Updating mediawiki/mediawiki-phan-config to 0.15.0
• 4621920 NullableTypeSniff: 'mixed' is already nullable
• fd6ecb5 Support sorting PHP symbols in arrays
• Additional commits viewable in compare view

Updates mediawiki/mediawiki-phan-config to 0.15.1

Changelog

Sourced from mediawiki/mediawiki-phan-config's changelog.

0.15.1 / 2025-01-09

• Fixed a bug where doc-only properties were not considered as possibly undefined.
• Fixed a bug in PHP >= 8 where redundant issets would never be reported for properties of classes with the AllowDynamicProperties attribute.

0.15.0 / 2024-12-09

• Rename NoEmptyIfDefinedPlugin to RedundantExistenceChecksPlugin (Daimona Eaytoy)
• Add isset() checks to RedundantExistenceChecksPlugin (Daimona Eaytoy)
• Upgrade phan to 5.4.5 and mediawiki/phan-taint-check-plugin to 6.1.0 (James D. Forrester)
• Update target PHP version from 8.1 to 8.3

0.14.0 / 2024-02-03

• Add plugin to disallow use of new Exception (Daimona Eaytoy)
• Do not emit MediaWikiNoEmptyIfDefined for properties of classes with the AllowDynamicProperties attribute (Daimona Eaytoy)
• Emit MediaWikiNoEmptyIfDefined for all node types except array element access (Daimona Eaytoy)
• Upgrade phan to 5.4.3 and mediawiki/phan-taint-check-plugin to 6.0.0 (James D. Forrester)

0.13.0 / 2023-09-08

• Add plugin to forbid empty() on defined variables and properties (Daimona Eaytoy)
• Bump phan to 5.4.2 and taint-check to 5.0.0 (Michael Große)
• "Auto discovery" of namespaces of wgConf and wgRequest (Amir Sarabadani)

0.12.1 / 2023-04-17

• Enable PhanCompatibleSerializeInterfaceDeprecated (Umherirrender)
• Create a separate config file for libraries (Daimona Eaytoy)

0.12.0 / 2022-10-06

• Avoid PhanRedefinedInheritedInterface by excluding symfony/polyfill-php80 (Umherirrender)
• Bump minimum PHP version to 7.4 (C. Scott Ananian)
• Disable PhanPluginDuplicateExpressionAssignmentOperation (Reedy)
• Bump phan to 5.4.1 and taint-check to 4.0.0 (Daimona Eaytoy)

0.11.1 / 2021-11-08

• Set minimum and target PHP version (Daimona Eaytoy)

0.11.0 / 2021-09-03

• Enable plugin UseReturnValuePlugin (Umherirrender)
• Exclude stubs from .phan configurations in libraries (C. Scott Ananian)
• Suppress PhanDeprecatedCaseInsensitiveDefine (Umherirrender)
• Suppress phan issues about use statements (Umherirrender)
• Add plugins: LoopVariableReusePlugin, RedundantAssignmentPlugin, UnreachableCodePlugin, SimplifyExpressionPlugin, DuplicateArrayKeyPlugin (Daimona Eaytoy)
• Remove hack that allows disabling taint-check (Daimona Eaytoy)
• Bump phan to 5.2.0, taint-check to 3.3.2 (Daimona Eaytoy)

0.10.6 / 2020-12-14

• Add a ConfigBuilder class to configure phan (Daimona Eaytoy)
• Remove option for filtering the list of directories (Daimona Eaytoy)
• Bump taint-check to 3.2.1 and phan to 3.2.6 (Daimona Eaytoy)

0.10.5 / 2020-12-05

... (truncated)

Commits

• fa343ed Prepare 0.15.1 release
• 84e9739 Fix handling of dynamic and doc-only properties
• aca76ab Prepare 0.15.0 release
• 0aa5871 Add relnotes line for target PHP version increase
• 55fde4a Merge "Upgrade phan to 5.4.5 and mediawiki/phan-taint-check-plugin to 6.1.0"
• 0609c64 Suppress PhanDeprecatedImplicitNullableParam issues in config
• d400f16 Upgrade phan to 5.4.5 and mediawiki/phan-taint-check-plugin to 6.1.0
• 626871a Merge "Bump target PHP version to 8.3"
• 7645edf Bump target PHP version to 8.3
• 2e3cc25 build: Updating mediawiki/mediawiki-codesniffer to 45.0.0
• Additional commits viewable in compare view

Updates mediawiki/minus-x to 1.1.3

Changelog

Sourced from mediawiki/minus-x's changelog.

1.1.3 / 2024-05-04

• Support symfony/console v7 for the fix command (Sam Wilson)

1.1.2 / 2024-05-04

• Support symfony/console v7 for the check command (Sam Wilson)

1.1.1 / 2021-01-05

• Restore support of symfony/console ^3.3.5 and ^4 (Kunal Mehta)

1.1.0 / 2020-03-17

• Add application/x-pie-executable and x-mach-binary to whitelist (Umherirrender)

1.0.0 / 2020-01-20

• Mention always ignored directories in the readme (mainframe98)
• Permit symfony/console version 5 (Sam Wilson)
• Drop support for earlier versions of symfony/console (Kunal Mehta)
• Revert "Don't use SplFileObject::fread() for PHP < 5.5.11 support" (Kunal Mehta)

0.3.2 / 2018-10-02

• Support using symfony/console ^4 (Kunal Mehta)
• Use SPDX 3.0 license identifier (Umherirrender)

0.3.1 / 2018-02-17

• Add .gitattributes with export-ignore (Umherirrender)

0.3.0 / 2018-01-10

• Loosen symfony/console dependency (Kunal Mehta)
• Support ignoring entire directories (Kunal Mehta)

0.2.1 / 2017-12-03

• Percent-encode URLs in README.md to work around bad parsers. (MZMcBride)
• Use env instead of /usr/bin/php directly (Sam Wilson)

0.2.0 / 2017-10-30

• Don't use SplFileObject::fread() for PHP < 5.5.11 support (Kunal Mehta)
• Drop .php extension from minus-x command (Kunal Mehta)
• Whitelist application/x-dosexec when run on Windows (Kunal Mehta)

0.1.0 / 2017-09-12

• Initial release (Kunal Mehta)

Commits

• 553f920 Add type hint for FixCommand::execute()
• 883c563 Release 1.1.2
• faa932b build: Updating mediawiki/mediawiki-codesniffer to 43.0.0
• 2ce560f Support symfony/console v7
• 126b89e Update composer dependencies
• b4f1681 build: Updating mediawiki/mediawiki-codesniffer to 41.0.0
• a99b608 README.md: Replace usage of whitelist
• 702726c build: Add Doxygen
• 4b7aaa5 build: Updating mediawiki/mediawiki-codesniffer to 40.0.1
• e256257 build: Updating composer dependencies
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions