Fix project setup

Upgrade google/protobuf to ^4.33.6 to resolve security advisory
GHSA-p2gh-cfq4-4wjc which blocks installation of all v3.x versions.

Remove npm self-update from node.dockerfile as it fails on node:22-slim
due to npm corrupting its own dependencies during the upgrade.

Add parentheses to intersection type PHPDoc annotations in TypeRegistry
to satisfy PHPStan.

🤖 Generated with Claude Code

Author: spawnia

.ai/settings.json

@@ -18,7 +18,8 @@
       "Bash(make help)",
       "Bash(make release)",
       "Bash(make proto)",
-      "Bash(make proto/update-reports)"
+      "Bash(make proto/update-reports)",
+      "Bash(make vendor)"
     ],
     "deny": [
       "Bash(make php)",

composer.json

@@ -47,7 +47,7 @@
         "bensampo/laravel-enum": "^5 || ^6",
         "ergebnis/composer-normalize": "^2.2.2",
         "fakerphp/faker": "^1.21",
-        "google/protobuf": "^3.21",
+        "google/protobuf": "^4.33.6",
         "larastan/larastan": "^2.9.14 || ^3.0.4",
         "laravel/framework": "^9 || ^10 || ^11 || ^12",
         "laravel/legacy-factories": "^1.1.1",

node.dockerfile

@@ -1,7 +1,5 @@
 FROM node:22-slim
 
-RUN npm install -g npm
-
 ARG USER_ID
 ARG GROUP_ID
 

src/Schema/TypeRegistry.php

@@ -58,7 +58,7 @@ class TypeRegistry
     /**
      * Map from type names to lazily resolved types.
      *
-     * @var array<string, callable(): \GraphQL\Type\Definition\Type&\GraphQL\Type\Definition\NamedType>
+     * @var array<string, callable(): (\GraphQL\Type\Definition\Type&\GraphQL\Type\Definition\NamedType)>
      */
     protected array $lazyTypes = [];
 
@@ -168,7 +168,7 @@ public function register(Type $type): self
      *
      * @api
      *
-     * @param  callable(): \GraphQL\Type\Definition\Type&\GraphQL\Type\Definition\NamedType  $type
+     * @param  callable(): (\GraphQL\Type\Definition\Type&\GraphQL\Type\Definition\NamedType)  $type
      */
     public function registerLazy(string $name, callable $type): self
     {
@@ -200,7 +200,7 @@ public function overwrite(Type $type): self
      *
      * @api
      *
-     * @param  callable(): \GraphQL\Type\Definition\Type&\GraphQL\Type\Definition\NamedType  $type
+     * @param  callable(): (\GraphQL\Type\Definition\Type&\GraphQL\Type\Definition\NamedType)  $type
      */
     public function overwriteLazy(string $name, callable $type): self
     {