Update vimeo/psalm requirement from ^3.12 to ^4.1

[dependabot-preview]

Updates the requirements on vimeo/psalm to permit the latest version.

Release notes

Sourced from vimeo/psalm's releases.

Support PHP 8 Attributes

Features

This adds basic support for PHP 8 attributes (#4367). Psalm checks attribute arguments, and also emits a UndefinedAttributeClass issue if the attribute cannot be found.

This version of Psalm can also be installed when using PHP 8.

Bugfixes

• class getIterator calls are used inside loops (#3625)
• allow Psalm to understand more assignments when evaluating implicit else (#4374)
• promoted properties are always used in the constructor (#4386)
• arraylike-object should be Countable too (#4398)
• signature types (return & param types) weren't being invalidated when their use changed, now they are
• allow multiple @psalm-assert-if-true on a single variable (#4414)
• uses better path normalisation when resolveFromConfig="true" so that existing baselines need only small adjustments (#4410)
• @BenMorel improved some ext-ds stubs (#4415)
• allow implicit null->offsetGet() inside an isset call (#4397)
• fix try analysis on assigned vars when they're typed to mixed (#4418)
• any class with a __toString method in PHP 8 is assumed to implement Stringable (#4429)
• fix crash when encountering no-argument str_replace, DOMNode::appendChild, crypt, get_class_methods, iterator_to_array, get_object_vars calls
• prevent unused variable false-positive when (bool) or (float) casts are used (#4435)
• @enumag improved ext-ds stubs with immutable data structures (#4425)

Commits

• 8929bde Add psalm-mutation-free to ext-ds (#4425)
• 4bb675e Pass CodeLocation to FunctionParamsProviderInterface interface (#4444)
• 82f35c1 Ensure Stringable is always available to tests that need it
• 438bcc6 Use softer return
• 2e95d1f Use more robust check for Stringable stub
• 5c784dc Fix #4435 - ensure casts are always flow-sensitive
• fce5c26 Remove subpar test
• dab1aac Protect more calls
• f43dba8 Use more accurate comparison for non-empty-lists
• 083102a Fix count call
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[dependabot-preview]

Superseded by #16.