Skip to content

chore(deps): update dependency vimeo/psalm to v7 (master) #1026

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: master
Choose a base branch
from
Open

chore(deps): update dependency vimeo/psalm to v7 (master) #1026

renovate wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Aug 21, 2025 •
edited
Loading

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
vimeo/psalm ^5.26.1 → ^7.0.0-beta14 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

vimeo/psalm (vimeo/psalm)

v7.0.0-beta14

Compare Source

What's Changed

Features
Fixes
Docs
Other changes

Full Changelog: vimeo/psalm@6.14.3...7.0.0-beta14

v7.0.0-beta13

Compare Source

What's Changed

Features

Full Changelog: vimeo/psalm@7.0.0-beta12...7.0.0-beta13

v7.0.0-beta12

Compare Source

What's Changed

Features
Fixes
Internal changes
  • Improve performance by avoiding repeated scanning of files included/required only once by @​mmcev106 in #​11478
Other changes

New Contributors

Full Changelog: vimeo/psalm@7.0.0-beta11...7.0.0-beta12

v7.0.0-beta11

Compare Source

What's Changed

Features
  • ✨ Full support for iterables for iterator_to_array by @​andrew-demb in #​11430
  • Add an arrayCache configuration key that can be used to disable the newly introduced array cache: this will slightly slow down execution times while reducing RAM usage, avoiding OOM issues on bigger codebases by @​danog

Full Changelog: vimeo/psalm@7.0.0-beta10...7.0.0-beta11

v7.0.0-beta10

Compare Source

What's Changed

Fixes

Full Changelog: vimeo/psalm@7.0.0-beta9...7.0.0-beta10

v7.0.0-beta9

Compare Source

Fixes:

  • Normalize order of taint flow graph issues

Full Changelog: vimeo/psalm@7.0.0-beta8...7.0.0-beta9

v7.0.0-beta8

Compare Source

This release syncs up the 7.x branch with the 6.x branch.

What's Changed

Features
Fixes
Docs
Other changes

New Contributors

Full Changelog: vimeo/psalm@7.0.0-beta7...7.0.0-beta8

v7.0.0-beta7

Compare Source

What's Changed

Fixes
Other changes

New Contributors

Full Changelog: vimeo/psalm@7.0.0-beta6...7.0.0-beta7

v7.0.0-beta6

Compare Source

What's Changed

Features
  • Enable taint analysis by default.
Fixes
Other changes

Full Changelog: vimeo/psalm@7.0.0-beta5...7.0.0-beta6

v7.0.0-beta5: Combined analysis!

Compare Source

This beta release adds a major new feature to Psalm v7: combined analysis!

Combined analysis allows running normal analysis, security analysis and dead code analysis all at the same time, within a single run, greatly reducing overall runtimes!

Future beta releases will also enable taint analysis by default, given that now it can be run alongside normal analysis.

What's Changed

Features

Full Changelog: vimeo/psalm@7.0.0-beta4...7.0.0-beta5

v7.0.0-beta4

Compare Source

Join the new official Psalm news channel and the Psalm community!

The news channel will be used to share inside exclusive news about upcoming Psalm features (including property hook support, coming within the next few releases!), and the community group can be used to discuss and share the way you use Psalm!

What's Changed

Features

Full Changelog: vimeo/psalm@7.0.0-beta3...7.0.0-beta4

v7.0.0-beta3

Compare Source

Add git and composer to the docker image by @​danog.

Full Changelog: vimeo/psalm@7.0.0-beta2...7.0.0-beta3

v7.0.0-beta2

Compare Source

What's Changed

Features
Fixes
Internal changes

Full Changelog: vimeo/psalm@7.0.0-beta1...7.0.0-beta2

v7.0.0-beta1: First Psalm v7 beta!

Compare Source

Announcing the first public beta of Psalm v7!

Psalm v7 brings huge performance improvements to security analysis, up to 10x thanks to a full refactoring of both the internal representation of taints, and optimization of the graph resolution logic.

It also brings performance improvements to dead code analysis, and fixes for list types.

Even more performance improvements and new features will be released soon!

What's Changed

Breaking changes

See here for the full list of breaking changes between v6 and v7.

Features
Fixes
Other changes

Full Changelog: vimeo/psalm@6.9.0...7.0.0-beta1

v6.14.3

Compare Source

What's Changed
Fixes
Internal changes
Other changes
New Contributors

Full Changelog: vimeo/psalm@6.14.2...6.14.3

v6.14.2

Compare Source

What's Changed

Fixes

Full Changelog: vimeo/psalm@6.14.1...6.14.2

v6.14.1

Compare Source

What's Changed

Features

Full Changelog: vimeo/psalm@6.14.0...6.14.1

v6.14.0

Compare Source

What's Changed

Features
Internal changes
  • Improve performance by avoiding repeated scanning of files included/required only once by @​mmcev106 in #​11478
Other changes

New Contributors

Full Changelog: vimeo/psalm@6.13.1...6.14.0

v6.13.1

Compare Source

What's Changed

Fixes

Full Changelog: vimeo/psalm@6.13.0...6.13.1

v6.13.0

Compare Source

What's Changed

Features
  • ✨ Full support for iterables for iterator_to_array by @​andrew-demb in #​11430
  • Add an arrayCache configuration key that can be used to disable the newly introduced array cache: this will slightly slow down execution times while reducing RAM usage, avoiding OOM issues on bigger codebases by @​danog

Full Changelog: vimeo/psalm@6.12.1...6.13.0

v6.12.1

Compare Source

What's Changed

Fixes

Full Changelog: vimeo/psalm@6.12.0...6.12.1

v6.12.0: - Cache refactoring

Compare Source

This release features a major cache refactoring, improving stability, removing race conditions and adding a new feature called cache consolidation, which consolidates the cache, normally composed of split files, into one single file with the --consolidate-cache flag, for quicker runs when doing whole project scans!

To use cache consolidation, simply run Psalm with the --consolidate-cache flag after running a normal analysis: running with this flag will skip analysis and only consolidate the cache.
If you consolidate your cache in CI runs, sure to re-consolidate the cache again after running Psalm before re-saving the updated cache.

What's Changed

Features
Fixes
Docs

New Contributors

Full Changelog: vimeo/psalm@6.11.0...6.12.0

v6.11.0

Compare Source

What's Changed

Features
  • Add new ClassFilePathProviderInterface plugin hook to polyfill custom autoloaders by @​danog in #​11422
Fixes

Subscribe to the brand new Psalm newsletter to stay up to date with all of Psalm's news!

Full Changelog: vimeo/psalm@6.10.3...6.11.0

v6.10.3

Compare Source

What's Changed

Fixes

Full Changelog: vimeo/psalm@6.10.2...6.10.3

v6.10.2

Compare Source

What's Changed

Fixes

New Contributors

Full Changelog: vimeo/psalm@6.10.1...6.10.2

v6.10.1

Compare Source

What's Changed

Fixes

Full Changelog: vimeo/psalm@6.10.0...6.10.1

v6.10.0

Compare Source

Join the new official Psalm news channel and the Psalm community!

The news channel will be used to share inside exclusive news about upcoming Psalm features (including property hook support, coming within the next few releases!), and the community group can be used to discuss and share the way you use Psalm!

What's Changed

Features

Full Changelog: vimeo/psalm@6.9.6...6.10.0

v6.9.6

Compare Source

Add git, ssh and composer to the docker image by @​danog.

Full Changelog: vimeo/psalm@6.9.5...6.9.6

v6.9.5

Compare Source

What's Changed

Fixes

Full Changelog: vimeo/psalm@6.9.4...6.9.5

v6.9.4

Compare Source

What's Changed

Fixes

Full Changelog: vimeo/psalm@6.9.3...6.9.4

v6.9.3

Compare Source

What's Changed

Fixes
Internal changes

Full Changelog: vimeo/psalm@6.9.2...6.9.3

v6.9.2

Compare Source

Fixes multiplatform builds for the latest tag of the docker image ».

Full Changelog: vimeo/psalm@6.9.1...6.9.2

v6.9.1

Compare Source

v6.9.0: - Docker image!

Compare Source

Psalm now has an official docker image!

It uses a custom build of PHP built from scratch, running Psalm +30% faster on average than normal PHP (+50% faster if comparing to PHP without opcache installed).

To use it, simply run:

docker run -v $PWD:/app --rm -it ghcr.io/danog/psalm:latest /composer/vendor/bin/psalm --no-cache

Issues due to missing extensions can be fixed by enabling them in psalm.xml and/or requiring them in composer.json, see here » for more info.

Extensions not stubbed by Psalm itself (and thus not available as a psalm config option) may be stubbed using traditional PHP stubs.

What's Changed

Features

Full Changelog: vimeo/psalm@6.8.9...6.9.0

v6.8.9

Compare Source

What's Changed

Fixes
Internal changes

Full Changelog: vimeo/psalm@6.8.8...6.8.9

v6.8.8

Compare Source

What's Changed

Fixes
Internal changes

Full Changelog: vimeo/psalm@6.8.7...6.8.8

v6.8.7

Compare Source

What's Changed

Fixes

Full Changelog: vimeo/psalm@6.8.6...6.8.7

v6.8.6

Compare Source

What's Changed

Fixes

Full Changelog: vimeo/psalm@6.8.5...6.8.6

v6.8.5

Compare Source

What's Changed

Fixes
  • Fixes PHP Error: Undefined array key 1 by @​tm1000 in #​11328
  • Fix issue with plugins by @danog

Full Changelog: vimeo/psalm@6.8.4...6.8.5

v6.8.4

Compare Source

This release introduces fully reproducible builds (the composer.lock file is now added to phars).

Full Changelog: vimeo/psalm@6.8.3...6.8.4

v6.8.3

Compare Source

What's Changed

Fixes
  • Fix phar build by bumping box (the minimum supported PHP version for the phar is now PHP 8.2) by @​danog in #​11324
Internal changes

Full Changelog: vimeo/psalm@6.8.2...6.8.3

v6.8.2

Compare Source

What's Changed

Fixes

Full Changelog: vimeo/psalm@6.8.1...6.8.2

v6.8.1

Compare Source

What's Changed

Internal changes

Full Changelog: vimeo/psalm@6.8.0...6.8.1

v6.8.0

Compare Source

What's Changed

Features
Fixes

New Contributors

Full Changelog: vimeo/psalm@6.7.1...6.8.0

v6.7.1

Compare Source

What's Changed

Internal changes

Full Changelog: vimeo/psalm@6.7.0...6.7.1

v6.7.0

Compare Source

What's Changed

Features
  • Add new allowBoolToLiteralBoolComparison config (disabled by default), used to control emission of RedundantIdentityWithTrue issues (previously, their emission was controlled by the strictBinaryOperands config) by @​danog in #​11283
  • Enable missing #[Override] attribute detection (automatic Psalter fixer available) by @​danog in #​11283
  • Enable strict binary operand comparison checks (useful for strict_types migration) by @​danog in #​11283
  • Seal all class properties and methods: this enforces exact description of all class magic (__get/__call...) methods and properties with @method or @property, see here for more info by @​danog in #​11283
  • Disable dangerous @psalm-suppress all annotation (may be re-enabled manually with the disableSuppressAll config) by @​danog in #​11283
  • Types in lazy objects by @​BenMorel in #​11296
Fixes
Internal changes

New Contributors

Full Changelog: vimeo/psalm@6.6.2...6.7.0

v6.6.2

Compare Source

What's Changed

Fixes

Full Changelog: vimeo/psalm@6.6.1...6.6.2

v6.6.1

Compare Source

What's Changed

Fixes
Docs

Full Changelog: vimeo/psalm@6.6.0...6.6.1

v6.6.0

Compare Source

What's Changed

Features
Fixes
Docs
Internal changes

Full Changelog: vimeo/psalm@6.5.1...6.6.0

v6.5.1

Compare Source

What's Changed

Fixes
Internal changes

Full Changelog: vimeo/psalm@6.5.0...6.5.1

v6.5.0

Compare Source

What's Changed

Features

Configuration

📅 Schedule: Branch creation - "before 5am on thursday" in timezone Europe/Vienna, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Aug 21, 2025
@renovate renovate bot requested a review from ChristophWurst August 21, 2025 00:42
@renovate
Copy link
Contributor Author

renovate bot commented Aug 21, 2025 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: vendor-bin/psalm/composer.lock
Command failed: composer update vimeo/psalm:7.0.0-beta14 --with-dependencies --ignore-platform-req=ext-* --ignore-platform-req=lib-* --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires vimeo/psalm ^7.0.0-beta14 -> satisfiable by vimeo/psalm[7.0.0-beta14].
    - vimeo/psalm 7.0.0-beta14 requires php ~8.1.31 || ~8.2.27 || ~8.3.16 || ~8.4.3 || ~8.5.0 -> your php version (8.1; overridden via config.platform, same as actual) does not satisfy that requirement.

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.

@renovate renovate bot force-pushed the renovate/master-vimeo-psalm-7.x branch from 09b83c6 to 7a956ba Compare December 10, 2025 12:32
@renovate renovate bot force-pushed the renovate/master-vimeo-psalm-7.x branch from 7a956ba to f5c4d22 Compare December 23, 2025 20:34
@renovate renovate bot force-pushed the renovate/master-vimeo-psalm-7.x branch from f5c4d22 to 6b8eee3 Compare December 30, 2025 12:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ChristophWurst ChristophWurst Awaiting requested review from ChristophWurst

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant