chore: Update Composer QA tooling dependencies

[renovate]

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Change	Age	Confidence
friendsofphp/php-cs-fixer	^3.87.2 -> ^3.88.0
phpstan/phpstan	^2.1.27 -> ^2.1.29
phpunit/phpunit (source)	^10.5.55 -> ^10.5.57

---

Release Notes

PHP-CS-Fixer/PHP-CS-Fixer (friendsofphp/php-cs-fixer)

v3.88.0

Compare Source

• feat: Support custom rulesets (#​6083)
• feat: introduce @auto, @auto:risky sets (#​9090)
• feat: introduce @autoPHPMigration, @autoPHPMigration:risky, @autoPHPUnitMigration:risky sets (#​9068)
• feat: start using new defaults for rules under future mode (#​9020)
• feat: rename rule sets from MAJORMINOR and MAJOR.MINOR into MAJORxMINOR (#​9005)
• feat: rename visibility_required into modifier_keywords (#​8995)
• feat: symfony ruleset: Add @const to phpdoc_no_alias_tag (#​9016)
• fix: BlankLinesBeforeNamespaceFixer - handle namespace without newline before (#​9059)
• docs: fix typo (#​9060)
• docs: update CONTRIBUTING.md (#​9074)
• docs: update README for updated PHP/PHPUnit set names (#​9070)
• DX: Allow development on PHP 8.5 (#​9092)
• chore: enforce list via array_values() (#​9054)
• chore: ErrorOutput - line is optional (#​9047)
• chore: fix cs in entry point file (#​9064)
• chore: fix CS, somehow it missed the CI of .php-cs-fixer.well-defined-arrays.php (#​8987)
• chore: fix some argument.type errors (#​9056)
• chore: groom Automatic rulesets code (#​9091)
• chore: phpstan - do not ignore all internal usage errors (#​9063)
• chore: replace wrong class-string usages (#​8968)
• chore: getcwd() - ignore false return value (#​9057)
• chore: ReporterFactory - use class-string type (#​9055)
• CI: check for typos (#​9048)
• CI: don't prevent the build when remote coverage reporting service is down (#​9095)
• CI: fix smoke tests after #​9005 (#​9061)
• CI: fix typos in CHANGELOG.md (#​9052)
• CI: mutation tests - disable github annotations (#​9062)
• CI: Test docs generation only once per CI pipeline (#​9089)
• CI: push event only for master branch (#​9046)
• CI: push event only for master branch (#​9050)
• deps: bump box version (#​9042)
• deps: bump ergebnis/composer-normalize from 2.48.1 to 2.48.2 in /dev-tools (#​9045)
• deps: bump phpstan/phpstan from 2.1.25 to 2.1.28 in /dev-tools in the phpstan group (#​9072)
• deps: unify alpine version for PHP 8.4 (#​9077)
• deps: update phpstan and phpstan-baseline-per-identifier (#​9051)
• deps: update squizlabs/php_codesniffer to v4.0 and other related packages (#​9075)
• deps: upgrade alpine wherever possible (#​9078)
• deps: upgrade infection/infection to ^0.31.0 (#​9079)
• refactor: introduce concept of AutomaticRuleSet (#​9067)
• refactor: rename RuleSetDescriptionInterface into RuleSetDefinitionInterface (#​9094)
• test: ensure alpine version same between Dockerfile and compose.yaml (#​9076)
• test: ensure alpine version same in compose.yaml and release.yml (#​9071)
• test: extend tests to cover new migration rule set names (#​9069)
• test: improve testing that objects cannot be serialized/unserialized (#​9049)

phpstan/phpstan-phar-composer-source (phpstan/phpstan)

v2.1.29

Compare Source

v2.1.28

Compare Source

sebastianbergmann/phpunit (phpunit/phpunit)

v10.5.57: PHPUnit 10.5.57

Compare Source

• No changes; phpunit.phar rebuilt with updated dependencies

---

Learn how to install or update PHPUnit 10.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

v10.5.56: PHPUnit 10.5.56

Compare Source

• No changes; phpunit.phar rebuilt with updated dependencies

---

Learn how to install or update PHPUnit 10.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled because a matching PR was automerged previously.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coveralls]

coverage: 95.592%. remained the same
when pulling c9bd874 on renovate/composer-qa-tooling
into 7d93eef on main.