[dependabot]

Bumps carthage-software/mago from 1.58.2 to 1.59.0.

Release notes

Sourced from carthage-software/mago's releases.

Mago 1.59.0 fixes analyzer narrowing across boolean guards, nullsafe checks, and elseif branches, improves generic and callable inference, and updates the analyzer extension protocol to MANA 2.2.

[!NOTE]

Support Mago

Does your company use Mago? Please consider sponsoring its development so we can keep fixing bugs and shipping releases.

Sponsor Mago ❤️

🐛 Bug Fixes

Analyzer

• Namespace constants: preserves global constant fallback in namespaced declarations. (#2594, 0e6c1d8)
• Method assertions: keeps getter assertions from the right side of ||. (#2600, #2609, 777429f)
• CLI argument guards: fixes $argc typing and negated count() bounds. (#2607, #2608, be88d13)
• Template defaults: applies declared defaults when constructing generic objects. (#2603, #2606, 2066b18)
• Stored booleans: keeps narrowing implied by boolean variables across && and ||. (#2601, 8d739b3)
• Nullsafe membership: narrows receivers after strict in_array() checks against non-null values. (#2599, 56e4b49)
• Collection intersections: honors narrower read types in intersected collection types. (#2612, 79c295f)
• Callable signatures: preserves parameter and return types through Closure::fromCallable(). (#2611, #2614, 3ea5963)
• PHPDoc generics: checks missing, excess, and out-of-bounds template arguments in docblocks. (#2616, 2ac5c5d)
• Boolean branches: preserves true and false types across short-circuit expressions. (#2593, 9890d23)
• Dynamic instanceof: keeps valid operand types when a dynamic class check fails. (#2592, #2595, 65530ba)
• Strict equality: narrows both union-typed operands to their shared types. (#2559, 923c061)
• Elseif branches: preserves all reachable types and branch facts after conditional chains. (#2619, 0a098f4)
• Nullsafe comparisons: avoids false impossible-null reports when assigning comparison results. (#2591, b7273f4)
• URL components: allows empty user, password, query, and fragment strings from parse_url(). (#2590, #2610, 16dd70b)

📖 Documentation

Extensions

• Protocol compatibility: documents MANA 2.2 constant fallback and worker upgrade requirements. (#2594, 0e6c1d8)

🏗️ Internal

CI

• Pull request limit: limits outside contributors to one open PR at a time, including drafts. (9b6979c)

Tooling

• Justfile cleanup: removes an unused variable. (3f212f3)

🧩 Extension Protocol

Analyzer

... (truncated)

Commits

• 95a25d6 release: 1.59.0
• 16dd70b fix(analyzer): type empty-capable parse_url components as string (#2610)
• b7273f4 fix(analyzer): skip diagnostics for inferred nullsafe checks
• 0a098f4 fix(analyzer): preserve reachable types after elseif chains
• 3f212f3 chore(just): remove unused variable
• 923c061 fix(analyzer): narrow union types after strict equality (#2559)
• 65530ba fix(analyzer): keep the operand type when a dynamic instanceof check fails (#...
• 9890d23 fix(analyzer): preserve boolean types across short-circuit branches
• 2ac5c5d fix(analyzer): validate generic arguments in PHPDoc types
• 3ea5963 fix(analyzer): infer Closure::fromCallable signatures (#2614)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[norberttech]

@dependabot rebase

[dependabot]

Looks like carthage-software/mago is up-to-date now, so this is no longer needed.