Bump the composer-dev-dependencies group with 2 updates

[dependabot]

Updates the requirements on friendsofphp/php-cs-fixer and rector/rector to permit the latest version.
Updates friendsofphp/php-cs-fixer to 3.95.24

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.24 Adalbertus

What's Changed

• fix: ControlStructureBracesFixer - do not read a body starting with a parenthesis as a condition by @​xirvik in PHP-CS-Fixer/PHP-CS-Fixer#9815
• UX: init - add handling of .gitignore by @​keradus in PHP-CS-Fixer/PHP-CS-Fixer#9813
• UX: init - add sections by @​keradus in PHP-CS-Fixer/PHP-CS-Fixer#9819
• UX: init - command improvements by @​keradus in PHP-CS-Fixer/PHP-CS-Fixer#9807
• UX: init - improve wording by @​keradus in PHP-CS-Fixer/PHP-CS-Fixer#9820
• UX: init command - suggest php_unit_test_case_static_method_calls rule by @​Amoifr in PHP-CS-Fixer/PHP-CS-Fixer#9810
• chore: DescribeCommand - replace dynamic method calls with explicit ones by @​kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9817
• chore: PhpdocOrderFixer - fix type of duplicated tags passed to naturalLanguageJoin by @​kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9818
• chore: Fixer name must not be empty by @​keradus in PHP-CS-Fixer/PHP-CS-Fixer#9756
• CI: fix warning - Unexpected input(s) 'extensions' by @​keradus in PHP-CS-Fixer/PHP-CS-Fixer#9809
• CI: introduce PHPBench by @​keradus in PHP-CS-Fixer/PHP-CS-Fixer#9755
• refactor: init - move content preparation to helper method by @​keradus in PHP-CS-Fixer/PHP-CS-Fixer#9812

New Contributors

• @​xirvik made their first contribution in PHP-CS-Fixer/PHP-CS-Fixer#9815

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.23...v3.95.24

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.24

• fix: ControlStructureBracesFixer - do not read a body starting with a parenthesis as a condition (#9815)
• UX: init - add handling of .gitignore (#9813)
• UX: init - add sections (#9819)
• UX: init - command improvements (#9807)
• UX: init - fix typos and improve wording (#9820)
• UX: init command - suggest php_unit_test_case_static_method_calls rule (#9810)
• chore: Fixer name must not be empty (#9756)
• chore: DescribeCommand - replace dynamic method calls with explicit ones (#9817)
• chore: PhpdocOrderFixer - fix type of duplicated tags passed to naturalLanguageJoin (#9818)
• CI: fix warning - Unexpected input(s) 'extensions' (#9809)
• CI: introduce PHPBench (#9755)
• refactor: init - move content preparation to helper method (#9812)

Changelog for v3.95.23

• fix: FunctionsAnalyzer - detect return type of a closure with a use clause (#9806)

Changelog for v3.95.22

• fix: StaticLambdaFixer - do not make a lambda static when it is the direct subject of bindTo() or call() (#9802)
• chore: Implement PHPStan Preg::replaceCallback() extension (#9799)
• chore: Utils - fix stableSort() and sortFixers() template types, remove @phpstan-ignore suppressions (#9798)
• deps: bump phpstan/phpstan from 2.2.8 to 2.2.9 (#9797)

Changelog for v3.95.21

• fix: StatementIndentationFixer - do not treat ternary colon as block start (#9795)
• perf: Introduce new candidate check for transformers (#9770)
• perf: Optimize NameQualifiedTransformer token insertion (#9759)
• CI: add BC check (#9791)
• deps: upgrade dev-tools (#9793)

Changelog for v3.95.20

• fix: PsrAutoloadingFixer - do not throw when the file cannot be resolved on disk (#9762)
• refactor: Transformers - move looping over tokens directly into each transformer individually (#9782)
• test: drop mikey179/vfsstream (#9787)
• test: NoUnusedImportsFixerTest - add new cases around quoted values (#9784)

Changelog for v3.95.19

• fix: binary_operator_spaces alignment for nested single-line arrays in multiline array (#9654)

... (truncated)

Commits

• 9a4b805 prepared the 3.95.24 release
• 4cd7e9f UX: init - fix typos and improve wording (#9820)
• f9a1fb4 UX: init - add handling of .gitignore (#9813)
• 1c03254 UX: init command - suggest php_unit_test_case_static_method_calls rule (#9810)
• f610f91 UX: init - add sections (#9819)
• 5a3e3ec fix: ControlStructureBracesFixer - do not read a body starting with a paren...
• 529e7b8 chore: DescribeCommand - replace dynamic method calls with explicit ones (#...
• 460da40 chore: PhpdocOrderFixer - fix type of duplicated tags passed to `naturalLan...
• edd854e refactor: init - move content preparation to helper method (#9812)
• 20b8578 CI: fix warning - Unexpected input(s) 'extensions' (#9809)
• Additional commits viewable in compare view

Updates rector/rector to 2.6.5

Release notes

Sourced from rector/rector's releases.

Released Rector 2.6.5

Caching

This release makes the cache smarter about config changes - fewer needless full re-runs, while still invalidating when results could actually differ.

Configured rule value changes now invalidate the cache (#8400)

withConfiguredRule() stored its config on the RectorConfig instance only, never in the cache hash. Changing a rule's values - same class, different config - kept serving the stale result.

 return RectorConfig::configure()
     ->withConfiguredRule(SomeRector::class, [
-        'old value',
+        'new value',
     ]);

Before: cache kept, files re-analysed with stale value. After: cache dropped, re-analysed with new value. Merged config now flows through a RULE_CONFIGURATIONS parameter into the strict cache hash. Upgrading invalidates the cache once for projects using configured rules.

--only <Rule> reuses the full-run cache (#8400)

Each --only selection has its own cache namespace, so a file left clean by a prior full run was re-analysed under --only even when nothing changed. A scoped run now falls back to the full-run cache (read only, file content still compared, so real edits are still picked up).

vendor/bin/rector process       # full run, files left clean are cached
vendor/bin/rector process --only "Rector\..\SomeRector"

Before: --only re-analyses every file. After: skips files the full run already left clean.

Directional cache invalidation on config change (#8397)

Previously any change to any config parameter dropped the whole cache. Now changes are compared by direction:

• removing a rule/set, or adding a skip -> strictly less work -> cache kept
• adding a rule/set, or removing a skip -> more work possible -> cache dropped
• output-affecting params (php version, import names, indent) -> any change still drops the cache
• runtime/reporting params (--parallel, memory limit, deprecation notices) -> never invalidate

 return RectorConfig::configure()
     ->withRules([
         SomeRector::class,
-        OtherRector::class,     // removing a rule -> cache kept
     ]);

 return RectorConfig::configure()
     ->withSkip([
</tr></table> 

... (truncated)

Commits

• f868660 Rector 2.6.5
• 1312741 Updated Rector to commit ffe4c3299281281135b533a839392ae34a4bfcfe
• 54cd3eb Updated Rector to commit 85e562c607f770f4f448f3116350e998c44cb370
• 1313cee Updated Rector to commit 13cbd813cd56168e1fc7a713f92227062cc4b943
• 9e25013 Updated Rector to commit 3bac42eb97293437491ee5e22d51b3cee8609455
• 04130f7 Updated Rector to commit cc5d6f984ffddd44fd000860acb21c2245f3b52e
• a7f993e Updated Rector to commit cc5d6f984ffddd44fd000860acb21c2245f3b52e
• 1d2fed1 Updated Rector to commit bfee018eaa8fc099d116fb8825abb94a354501d8
• 2e1ec84 Updated Rector to commit e6c36be32b8dda0178e62e06bc54ae3eccbe7d78
• eebf5b3 Updated Rector to commit d28960e60ac022ccdb6b9b461645881f21ed3bf9
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions