Merge remote-tracking branch 'origin/master' into fixer

Author: keradus

.devcontainer/devcontainer.json

@@ -8,7 +8,7 @@
     // Features to add to the dev container. More info: https://containers.dev/features.
     "features": {
         "ghcr.io/devcontainers/features/github-cli:1": {},
-        "ghcr.io/devcontainers/features/node:1": {}
+        "ghcr.io/devcontainers/features/node:2": {}
     },
 
     // Configure tool-specific properties.

.github/CONTRIBUTING.md

@@ -74,6 +74,19 @@ about what you're working on, you can contact us via the
   ```
 
   to automatically fix coding standard issues.
+- Run
+
+  ```shell
+  make static-analysis
+  ```
+
+  to run a static analysis or, if applicable, run
+
+  ```shell
+  make static-analysis-baseline
+  ```
+
+  to regenerate the baseline.
 - Review the change once more just before submitting it.
 
 ## What happens after submitting contribution?
@@ -134,6 +147,20 @@ Having said that, here are the organizational rules:
    make coding-standards
    ```
 
-6. Use reasonable commit messages.
+6. Run
+
+  ```shell
+  make static-analysis
+  ```
+
+to run a static analysis or, if applicable, run
+
+  ```shell
+  make static-analysis-baseline
+  ```
+
+to regenerate the baseline.
+
+7. Use reasonable commit messages.
 
 Thank you for contributing to https://www.php.net!

.github/ISSUE_TEMPLATE/design-contest.yml

@@ -17,11 +17,11 @@ jobs:
     strategy:
       matrix:
         php-version:
-          - "8.2"
+          - "8.4"
 
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@v6"
+        uses: "actions/checkout@v7"
 
       - name: "Set up PHP"
         uses: "shivammathur/setup-php@v2"
@@ -40,7 +40,7 @@ jobs:
         run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >> $GITHUB_ENV"
 
       - name: "Cache dependencies installed with composer"
-        uses: "actions/cache@v5"
+        uses: "actions/cache@v6"
         with:
           path: "${{ env.COMPOSER_CACHE_DIR }}"
           key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('composer.lock') }}"
@@ -62,11 +62,11 @@ jobs:
     strategy:
       matrix:
         php-version:
-          - "8.2"
+          - "8.4"
 
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@v6"
+        uses: "actions/checkout@v7"
 
       - name: "Set up PHP"
         uses: "shivammathur/setup-php@v2"
@@ -85,7 +85,7 @@ jobs:
         run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >> $GITHUB_ENV"
 
       - name: "Cache dependencies installed with composer"
-        uses: "actions/cache@v5"
+        uses: "actions/cache@v6"
         with:
           path: "${{ env.COMPOSER_CACHE_DIR }}"
           key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('composer.lock') }}"
@@ -107,6 +107,49 @@ jobs:
       - name: "Validate XML files"
         run: "for a in $(find . -name '*.xml'); do xmllint --quiet --noout $a; done"
 
+  static-analysis:
+    name: "Static Analysis"
+
+    runs-on: "ubuntu-latest"
+
+    strategy:
+      matrix:
+        php-version:
+          - "8.4"
+
+        dependencies:
+          - "locked"
+
+    steps:
+      - name: "Checkout"
+        uses: "actions/checkout@v7"
+
+      - name: "Set up PHP"
+        uses: "shivammathur/setup-php@v2"
+        with:
+          coverage: "none"
+          extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv"
+          php-version: "${{ matrix.php-version }}"
+
+      - name: "Set up problem matchers for PHP"
+        run: "echo \"::add-matcher::${{ runner.tool_cache }}/php.json\""
+
+      - name: "Determine composer cache directory"
+        run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >> $GITHUB_ENV"
+
+      - name: "Cache dependencies installed with composer"
+        uses: "actions/cache@v6"
+        with:
+          path: "${{ env.COMPOSER_CACHE_DIR }}"
+          key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('composer.lock') }}"
+          restore-keys: "php-${{ matrix.php-version }}-composer-"
+
+      - name: "Install dependencies with composer"
+        run: "composer install --ansi --no-interaction --no-progress"
+
+      - name: "Run static analysis"
+        run: "vendor/bin/phpstan"
+
   tests:
     name: "Tests"
 
@@ -115,14 +158,14 @@ jobs:
     strategy:
       matrix:
         php-version:
-          - "8.2"
+          - "8.4"
 
     env:
       HTTP_HOST: "localhost:8080"
 
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@v6"
+        uses: "actions/checkout@v7"
 
       - name: "Set up PHP"
         uses: "shivammathur/setup-php@v2"
@@ -141,7 +184,7 @@ jobs:
         run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >> $GITHUB_ENV"
 
       - name: "Cache dependencies installed with composer"
-        uses: "actions/cache@v5"
+        uses: "actions/cache@v6"
         with:
           path: "${{ env.COMPOSER_CACHE_DIR }}"
           key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('composer.lock') }}"

.github/workflows/integrate.yaml

@@ -8,7 +8,7 @@ jobs:
     runs-on: "ubuntu-22.04"
     if: github.repository_owner == 'php'
     steps:
-      - uses: appleboy/ssh-action@v1.2.4
+      - uses: appleboy/ssh-action@v1.2.5
         with:
           host: ${{ secrets.PREVIEW_REMOTE_HOST }}
           username: ${{ secrets.PREVIEW_REMOTE_USER }}