chore: Update Composer QA tooling dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
friendsofphp/php-cs-fixer	^3.91.2 -> ^3.92.0
phpstan/phpstan	^2.1.32 -> ^2.1.33
phpstan/phpstan-phpunit	^2.0.8 -> ^2.0.10
phpunit/phpunit (source)	^10.5.59 -> ^10.5.60
rector/rector (source)	^2.2.11 -> ^2.2.14

---

Release Notes

PHP-CS-Fixer/PHP-CS-Fixer (friendsofphp/php-cs-fixer)

v3.92.0

Compare Source

• feat: exception for rules via @php-cs-fixer-ignore annotation (#​9280)
• feat: exception for rules via Rule Customisation Policy (#​9107)
• feat: PhpUnitTestCaseStaticMethodCallsFixer - add handling of getStubBuilder (#​9276)
• feat: PhpUnitTestCaseStaticMethodCallsFixer - add target option (#​8498)
• chore: '.php-cs-fixer.dist.php' - remove no longer needed rule, 'expectedDeprecation' annotation does not exist for long time (#​9266)
• chore: fix arguments.count error from PHPStan (#​9258)
• chore: fix generator.valueType error from PHPStan (#​9259)
• chore: fix plus.*NonNumeric errors from PHPStan (#​9260)
• chore: Runner - better input types handling (#​9286)
• chore: watch out for non-final classes (#​9262)
• chore: Config::getFinder() - fix typehinting (#​9288)
• deps: bump alpine from 3.22 to 3.23 (#​9269)
• deps: bump phpcompatibility/php-compatibility from 10.0.0-alpha1 to 10.0.0-alpha2 in /dev-tools (#​9271)
• deps: bump the phpstan group in /dev-tools with 3 updates (#​9270)
• deps: dev-tools - upgrade deep deps (#​9272)
• docs: exception for rules in dedicated doc files, for easier discoverability (#​9281)
• docs: upgrade docs to not use legacy set (#​9282)
• DX: make all testFix* methods have first parameter $expected (#​9289)
• refactor: fix violation of 'no_useless_concat_operator' (#​9267)
• refactor: ProjectCodeTest - refactor testExpectedInputOrder test (#​9290)
• Revert (partially) "feat: Finder to find dot-files by default in v4/future-mode (#​9187)" (#​9287)
• test: RuleSetTest - check against non-deprecated variant of PHPUnit sets (#​9265)
• UX: exception for rules via Rule Customisation Policy - better error message for wrong customisers (#​9279)
• UX: exception for rules via Rule Customisation Policy - prevent policy without version (#​9278)

v3.91.3

Compare Source

• Revert "feat: Symfony - add stringable_for_to_string to set" (#​9268)

phpstan/phpstan-phar-composer-source (phpstan/phpstan)

v2.1.33

Compare Source

phpstan/phpstan-phpunit (phpstan/phpstan-phpunit)

v2.0.10

Compare Source

• 8d61a58 - Remove checkDataProviderData and introduce reportMissingDataProviderReturnType

v2.0.9

Compare Source

• cda423c - Implement AttributeRequiresPhpVersionRule
• 83b717d - ci: Add tests for PHP 8.5
• 75ba948 - chore(deps): update actions/checkout action to v6

sebastianbergmann/phpunit (phpunit/phpunit)

v10.5.60: PHPUnit 10.5.60

Compare Source

• No changes; phpunit.phar rebuilt with PHP 8.4 to work around PHP-Scoper issue #​1139

---

Learn how to install or update PHPUnit 10.5 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

rectorphp/rector (rector/rector)

v2.2.14: Released Rector 2.2.14

Compare Source

Bugfixes 🐛

• [fix] warn early about deprecated skipped rules, as not neccessary to skip anymore + restore FirstClassCallableRector and mark as deprecated to keep BC (#​7742)

v2.2.13: Released Rector 2.2.13

Compare Source

Bugfixes 🐛

• [fix] restore missing pInterpolatedStringPart(), cover with test (#​7741)

v2.2.12: Released Rector 2.2.12

Compare Source

Bugfixes 🐛

• [cleanup] Make FirstClassCallableRector use attributes over node traverser hacks (#​7696)
• [CodingStyle] Skip enum case on NewlineBetweenClassLikeStmtsRector (#​7698), Thanks @​parth391!
• [fix] skip all-but standalone assign on SetTypeToCastRector (#​7699)
• [fix] avoid changing generic interface in NarrowObjectReturnTypeRector, focus on objects as in definition (#​7700)
• Remove direct NodeTravser::* where possible, use node visitor attribute key instead (#​7697)

Removed and Deprecated 💀

• [dx] add stmts aware deprecation notice in `getNodeTypes()`` (#​7692)

rectorphp/rector-symfony 🎵

• [Symfony 8.0] move RemoveEraseCredentialsRector from symfony 7.3 to symfony 8.0 (#​895), Thanks @​EJTJ3
• [CodeQuality] Skip different service same name on ControllerMethodInjectionToConstructorRector (#​894)
• [code-quality] Skip enum in ControllerMethodInjectionToConstructorRector (#​893)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled because a matching PR was automerged previously.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coveralls]

coverage: 95.636%. first build
when pulling 6896a1f on renovate/composer-qa-tooling
into 5ff9084 on main.