Psalm Versions Save

A static analysis tool for finding errors in PHP applications

5.24.0

2 weeks ago

What's Changed

Features

Allow specifying flags to Codebase::isTypeContainedByType by @danog in https://github.com/vimeo/psalm/pull/10829
Allow more callable types as subtypes of callable by @weirdan in https://github.com/vimeo/psalm/pull/10805
Report parent being used in callable context when the class does not extend anything by @kkmuffme in https://github.com/vimeo/psalm/pull/10838
Report error for additional deprecated arg types in PHP 8.1/8.3 by @kkmuffme in https://github.com/vimeo/psalm/pull/10824
Add MissingClassConstType Issue by @jack-worman in https://github.com/vimeo/psalm/pull/10828
Enforce parameter names for consistent constructors by @kkmuffme in https://github.com/vimeo/psalm/pull/10821
Add misc missing errors for invalid callable methods by @kkmuffme in https://github.com/vimeo/psalm/pull/10839

Fixes

Forbid named arguments for ArrayAcccess methods by @weirdan in https://github.com/vimeo/psalm/pull/10804
Don't crash on invalid templates by @weirdan in https://github.com/vimeo/psalm/pull/10806
report error for single param name mismatch too since named args can even be used then by @kkmuffme in https://github.com/vimeo/psalm/pull/10822
add support for named arguments for filter_var and filter_input by @pilif in https://github.com/vimeo/psalm/pull/10815
When inside isset, make array fetch result nullable by @edsrzf in https://github.com/vimeo/psalm/pull/10756
Promoted properties missing in extended __construct should report PropertyNotSetInConstructor by @kkmuffme in https://github.com/vimeo/psalm/pull/10817
Updating signature of getmxrr() by @ThomasLandauer in https://github.com/vimeo/psalm/pull/10847
Improve string-int juggle consistency in array keys and display for int-like strings in type by @kkmuffme in https://github.com/vimeo/psalm/pull/10814
Fix storage not available in thread for intersection doc types by @simonberger in https://github.com/vimeo/psalm/pull/10856
Don't emit MissingOverrideAttribute for implicit Stringable implementations by @edsrzf in https://github.com/vimeo/psalm/pull/10858
Specify array return type of session_get_cookie_params by @jorgsowa in https://github.com/vimeo/psalm/pull/10859
Unknown @psalm annotation should not make whole docblock invalid by @kkmuffme in https://github.com/vimeo/psalm/pull/10885
Add mail to impure functions list by @smaddock in https://github.com/vimeo/psalm/pull/10923
Update PHP 8.2 Call map delta with refined types for string comparison functions by @gsteel in https://github.com/vimeo/psalm/pull/10883

Docs

document that @psalm-internal works for namespace + class too by @kkmuffme in https://github.com/vimeo/psalm/pull/10866

Internal changes

fix tests running with other than called PHP binary if called with a non-default PHP binary by @kkmuffme in https://github.com/vimeo/psalm/pull/10842
Explicitly set value in config to fix warning in tests by @kkmuffme in https://github.com/vimeo/psalm/pull/10843
[PHP 8.4] Fixes for implicit nullability deprecation by @Ayesh in https://github.com/vimeo/psalm/pull/10832
Throw exception instead of silently logging issues occurred during scan by @danog in https://github.com/vimeo/psalm/pull/10902

Other changes

Fix conditional on non empty literal string by @VincentLanglet in https://github.com/vimeo/psalm/pull/10912
Ignore jsonSerialize for implementors of JsonSerializable by @josephwynn-sc in https://github.com/vimeo/psalm/pull/10891
Add XML functions to ImpureFunctionsList #10882 by @DKhalil in https://github.com/vimeo/psalm/pull/10887

New Contributors

@Ayesh made their first contribution in https://github.com/vimeo/psalm/pull/10832
@smaddock made their first contribution in https://github.com/vimeo/psalm/pull/10923
@josephwynn-sc made their first contribution in https://github.com/vimeo/psalm/pull/10891
@DKhalil made their first contribution in https://github.com/vimeo/psalm/pull/10887

Full Changelog: https://github.com/vimeo/psalm/compare/5.23.1...5.24.0

5.23.1

2 months ago

What's Changed

Fixes

Fixed analysis of existing static methods if the __callStatic() method exists by @issidorov in https://github.com/vimeo/psalm/pull/10812

Full Changelog: https://github.com/vimeo/psalm/compare/5.23.0...5.23.1

5.23.0

2 months ago

What's Changed

Features

Update PHP 8.2 stubs to include SensitiveParameterValue by @gsteel in https://github.com/vimeo/psalm/pull/10726
Add list of statements to BeforeFileAnalysisEvent by @ohader in https://github.com/vimeo/psalm/pull/10728
Forbid iterating over generators with non-nullable send() by @weirdan in https://github.com/vimeo/psalm/pull/10697
Initial support for named parameters for callables by @weirdan in https://github.com/vimeo/psalm/pull/10772

Fixes

Improve randomizer stubs by @danog in https://github.com/vimeo/psalm/pull/10709
Fix detecting magic static methods by @issidorov in https://github.com/vimeo/psalm/pull/10704
Fix non-empty-lowercase-string handling with literal non-lowercase strings by @kkmuffme in https://github.com/vimeo/psalm/pull/10722
Fix RiskyTruthyFalsyComparison irrelevant errors when there is no explicit truthy/falsy type by @kkmuffme in https://github.com/vimeo/psalm/pull/10733
Allow Override attribute to be used in pure contexts by @weirdan in https://github.com/vimeo/psalm/pull/10734
Revert "Allow tainted numerics except for 'html' and 'has_quotes'" by @ohader in https://github.com/vimeo/psalm/pull/10729
Fix loading stubs from phar file on Windows by @weirdan in https://github.com/vimeo/psalm/pull/10748
Fix a false flag issue with InvalidConstantAssignmentValue by @MelechMizrachi in https://github.com/vimeo/psalm/pull/10738
Set inside_isset false when analyzing ArrayDimFetch index by @edsrzf in https://github.com/vimeo/psalm/pull/10752
Set inside_isset = false when analyzing arguments by @edsrzf in https://github.com/vimeo/psalm/pull/10753
Fix PHP notice - crash on invalid taint-escape by @kkmuffme in https://github.com/vimeo/psalm/pull/10760
Fix version comparison for @since by @weirdan in https://github.com/vimeo/psalm/pull/10764
Since annotations outside phpstub should not infer php version by @kkmuffme in https://github.com/vimeo/psalm/pull/10769
Backport WeakMap iterator fix from master by @weirdan in https://github.com/vimeo/psalm/pull/10778
Namespace anonymous classes by @weirdan in https://github.com/vimeo/psalm/pull/10779
Update CallMap for sqlsrv_connect and sqlsrv_errors to match reflection by @theodorejb in https://github.com/vimeo/psalm/pull/10781
$resource parameter of mkdir() is nullable since PHP 7.3 by @weirdan in https://github.com/vimeo/psalm/pull/10802
Use wider class-string when combining class strings with intersections by @weirdan in https://github.com/vimeo/psalm/pull/10800

Internal changes

Use TaintKind/TaintKindGroup constants instead of string values by @ohader in https://github.com/vimeo/psalm/pull/10746
Skip symlink test on Windows by @weirdan in https://github.com/vimeo/psalm/pull/10749
Avoid duplicating code for RiskyTruthyFalsyComparison by @theodorejb in https://github.com/vimeo/psalm/pull/10765
fix PHP 8 tests running with wrong --php-version=/phpVersion= if not explicitly specified by @kkmuffme in https://github.com/vimeo/psalm/pull/10776
CS fix by @weirdan in https://github.com/vimeo/psalm/pull/10801

New Contributors

@MelechMizrachi made their first contribution in https://github.com/vimeo/psalm/pull/10738

Full Changelog: https://github.com/vimeo/psalm/compare/5.22.2...5.23.0

5.22.2

2 months ago

What's Changed

Fixes

Catch missing classlike exceptions during scanning by @weirdan and @ohader in https://github.com/vimeo/psalm/pull/10720

Full Changelog: https://github.com/vimeo/psalm/compare/5.22.1...5.22.2

5.22.1

3 months ago

What's Changed

Fixes

Improve parsing of @psalm-type by @weirdan in https://github.com/vimeo/psalm/pull/10713

Full Changelog: https://github.com/vimeo/psalm/compare/5.22.0...5.22.1

5.22.0

3 months ago

What's Changed

Features

Allow inline comments in typedef shapes by @weirdan in https://github.com/vimeo/psalm/pull/10623
allow typedef imports from any kind of classlike by @weirdan in https://github.com/vimeo/psalm/pull/10625
Allow enum cases to be global constants by @weirdan in https://github.com/vimeo/psalm/pull/10634
New InvalidOverride issue for Override attribute by @edsrzf in https://github.com/vimeo/psalm/pull/10644
Analyze dynamic names for static property and const fetches by @edsrzf in https://github.com/vimeo/psalm/pull/10629
New MissingOverrideAttribute issue by @edsrzf in https://github.com/vimeo/psalm/pull/10651
Flag stdClass::__construct() calls that have arguments by @weirdan in https://github.com/vimeo/psalm/pull/10661
Improve Reflection stubs by @vudaltsov in https://github.com/vimeo/psalm/pull/10091
Forbid constructors from returning any values by @weirdan in https://github.com/vimeo/psalm/pull/10686
Report first class callables generated for unknown static methods by @weirdan in https://github.com/vimeo/psalm/pull/10691
Process @psalm-this-out on __construct() as well by @weirdan in https://github.com/vimeo/psalm/pull/10690
Report invalid number of arguments for psalm-taint-* by @staabm in https://github.com/vimeo/psalm/pull/10699

Fixes

Fix ownerDocument type in dom-ext classes by @fluffycondor in https://github.com/vimeo/psalm/pull/10619
Fix numeric scalar validate filter var input return type wrong by @kkmuffme in https://github.com/vimeo/psalm/pull/10621
Stable baseline by @weirdan in https://github.com/vimeo/psalm/pull/10633
Allow sebastian/diff v6 by @simPod in https://github.com/vimeo/psalm/pull/10639
CallMap: Adjust return type for inotify_add_watch() to int|false by @UlrichEckhardt in https://github.com/vimeo/psalm/pull/10637
Fix check-type when using builtin types from within a namespace by @robchett in https://github.com/vimeo/psalm/pull/10648
Do not add callable as a native property type by @weirdan in https://github.com/vimeo/psalm/pull/10654
Fix additional places where base_dir was broken due to missing separator by @kkmuffme in https://github.com/vimeo/psalm/pull/10630
Late binding of enum cases by @weirdan in https://github.com/vimeo/psalm/pull/10655
Suppress UndefinedClass in whatever_exists() by @weirdan in https://github.com/vimeo/psalm/pull/10659
Fix parsing magic method annotations by @issidorov in https://github.com/vimeo/psalm/pull/10665
Strip callmap prefixes from parameter names by @weirdan in https://github.com/vimeo/psalm/pull/10666
Narrow ord() return type to int<0,255> by @weirdan in https://github.com/vimeo/psalm/pull/10676
Template union object incorrect assertions by @robchett in https://github.com/vimeo/psalm/pull/10677
Don't show backtrace in InvalidDocblock issue message by @weirdan in https://github.com/vimeo/psalm/pull/10679
Class consts in array shapes by @weirdan in https://github.com/vimeo/psalm/pull/10678
Prevent mixed|null by @robchett in https://github.com/vimeo/psalm/pull/10675

Internal changes

Drop unused local composer repo by @weirdan in https://github.com/vimeo/psalm/pull/10647
Clarify that Pull request labels failure is to be resolved by maintainers by @weirdan in https://github.com/vimeo/psalm/pull/10649
Fix unstable hasFullyQualified(Interface|Enum)() by @weirdan in https://github.com/vimeo/psalm/pull/10603
Revert partial mistakenly pushed fix by @danog in https://github.com/vimeo/psalm/pull/10671

Full Changelog: https://github.com/vimeo/psalm/compare/5.21.1...5.22.0

5.21.1

3 months ago

What's Changed

Fixes

Fix baseline loading for path specified on the command line by @weirdan in https://github.com/vimeo/psalm/pull/10628

Full Changelog: https://github.com/vimeo/psalm/compare/5.21.0...5.21.1

5.21.0

3 months ago

What's Changed

Features

Allow importing typedefs from enums by @weirdan in https://github.com/vimeo/psalm/pull/10617

Fixes

Fix #10552 by @danog in https://github.com/vimeo/psalm/pull/10572
Unit test improvements for php-parser 5 by @edsrzf in https://github.com/vimeo/psalm/pull/10574
Fix template replacement edge case by @klimick in https://github.com/vimeo/psalm/pull/10586
Switch condition order by @edsrzf in https://github.com/vimeo/psalm/pull/10594
Partial revert "Fix auto completion by partial property or method" by @issidorov in https://github.com/vimeo/psalm/pull/10588
[LSP] Add issue type in description by @weirdan in https://github.com/vimeo/psalm/pull/10607
Do not validate callable arguments in lenient contexts by @weirdan in https://github.com/vimeo/psalm/pull/10601
readgzfile() is impure by @weirdan in https://github.com/vimeo/psalm/pull/10600
Allow properties on intersections with enum interfaces by @weirdan in https://github.com/vimeo/psalm/pull/10599
key_exists() is an alias for array_key_exists() by @weirdan in https://github.com/vimeo/psalm/pull/10598
Fix language server running with opcache.save_comments=0 by @weirdan in https://github.com/vimeo/psalm/pull/10614
Report MissingConstructor for natively typed mixed properties by @weirdan in https://github.com/vimeo/psalm/pull/10615

Internal changes

Bump actions/cache from 3 to 4 by @dependabot in https://github.com/vimeo/psalm/pull/10584
Baseline update by @jorgsowa in https://github.com/vimeo/psalm/pull/10593
Re-work CheckTrivialExprVisitor by @edsrzf in https://github.com/vimeo/psalm/pull/10612
Minor php-parser tweaks by @edsrzf in https://github.com/vimeo/psalm/pull/10605

New Contributors

@jorgsowa made their first contribution in https://github.com/vimeo/psalm/pull/10593

Full Changelog: https://github.com/vimeo/psalm/compare/5.20.0...5.21.0

5.20.0

4 months ago

What's Changed

Features

report error for non-strict or empty comparison on truthy+falsy union by @kkmuffme in https://github.com/vimeo/psalm/pull/10502

Fixes

Fix template, conditional array keys by @danog in https://github.com/vimeo/psalm/pull/10568

Full Changelog: https://github.com/vimeo/psalm/compare/5.19.1...5.20.0

5.19.1

4 months ago

What's Changed

Fixes

Deprecated Template Classes are not ignored by @psalm-suppress DeprecatedClass by @samlitowitz in https://github.com/vimeo/psalm/pull/10518
Implement __set method in SimpleXMLElement stub by @kthaler in https://github.com/vimeo/psalm/pull/10536
Make getrandmax type more specific and unserialize to require class-string by @kkmuffme in https://github.com/vimeo/psalm/pull/10540
Fix mb_get_info can return null - CI failing bc of reflection by @kkmuffme in https://github.com/vimeo/psalm/pull/10543
make basename & dirname return types more specific by @kkmuffme in https://github.com/vimeo/psalm/pull/10545
add support for extract to set variables for keyed arrays and respect EXTR_SKIP by @kkmuffme in https://github.com/vimeo/psalm/pull/10544
remove redundat directory separator which caused "//" in path not found errors by @kkmuffme in https://github.com/vimeo/psalm/pull/10542
Fix empty literal string becomes non-empty-string by @kkmuffme in https://github.com/vimeo/psalm/pull/10499

New Contributors

@samlitowitz made their first contribution in https://github.com/vimeo/psalm/pull/10518
@kthaler made their first contribution in https://github.com/vimeo/psalm/pull/10536

Full Changelog: https://github.com/vimeo/psalm/compare/5.19.0...5.20.0