[dependabot]

Bumps rector/rector from 2.6.7 to 2.8.3.

Release notes

Sourced from rector/rector's releases.

Released Rector 2.8.3

Faster node traversal and updated PHPStan stack 🚀

This release brings performance improvements to node visitors, reducing unnecessary traversals and reflection resolution during analysis.

It also updates PHPStan to 2.3.4 and phpstan/phpdoc-parser to 2.4, with compatibility fixes for the updated PHPDoc type nodes.

Performance Improvements 🚀

• Avoid nested traversals in ByRefNodeVisitor by tracking by-reference variable names per FunctionLike (#8879) Thanks @​samsonasik
• Only resolve call reflection for 2-item array arguments in CallLikeReflectionNodeVisitor (#8880) Thanks @​samsonasik

Bugfixes 🐛

• [TypeDeclaration] AddArrayFunctionClosureParamTypeRector: resolve array item types from unions of arrays (#8877) Thanks @​SanderMuller
• Lock the fixture directory itself to prevent conflicts between parallel test workers using different TMPDIR values (#8878) Thanks @​SanderMuller

Internals ⚙️

• Bump PHPStan to 2.3.4 and phpstan/phpdoc-parser to 2.4, adapting PHPDoc node handling for the new NameNode, FullyQualifiedNameNode, and RelativeNameNode types (#8883) Thanks @​ondrejmirtes

Released Rector 2.8.2

Leaner PHPDoc stack and a fluent composer-based config 🚀

This release leans on phpstan/phpdoc-parser directly: Rector drops its own forked parser, printer, token iterator and type-node subclasses, and reuses the upstream parser, format-preserving printer, node traverser and type nodes. Fewer moving parts, one source of truth for PHPDoc handling, and it rides the PHPStan 2.3.3 bump. Thanks @​ondrejmirtes.

On the config side, withComposerBased() now auto-detects installed packages when called with no argument, and a fluent withComposerBasedRule() builder lands across core and the rector-* sets.

New features 🥳

• Add withComposerBasedRule() to the fluent RectorConfig::configure() builder (#8875)
• [Configuration] Auto-detect installed packages in withComposerBased() called with no argument (#8748) Thanks @​MadBox-99
• [TypeDeclaration] Prefer same-namespace classes over global PHPDoc types (#8869) Thanks @​MohannadElemary
• [dx] Report rule-scoped skips that matched a file but never changed it (#8853)

Performance Improvements 🚀

• Reduce memory usage on the LPT bucket by recycling workers and keeping files in discovery order (#8867) Thanks @​samsonasik
• Cache skip-filtered rules per node class for the current file in RectorRegistry::forNodeAndFile() (#8860) Thanks @​samsonasik
• Remove unneeded array_values() when arrays are already lists or called too early (#8857) Thanks @​samsonasik

... (truncated)

Commits

• 12ddb68 Rector 2.8.3
• 768a3dc Updated Rector to commit 8323e93e55a40fb408fae7af4e5ba8b770fa8441
• 7c07b79 Updated Rector to commit 62e0fccbe42cebe7d5b3281b687aa404e6120ede
• b8a1dca Updated Rector to commit 62e0fccbe42cebe7d5b3281b687aa404e6120ede
• 0207c40 Updated Rector to commit 62e0fccbe42cebe7d5b3281b687aa404e6120ede
• 85ff869 Updated Rector to commit 6f8df55c5210ab07b644da15a57111bd65d3690e
• 066425d Updated Rector to commit e291f0d9bc43002279494134a993abc59a27d465
• 69d19ec Updated Rector to commit 8271f5dd75261f4532e3ba6d9ae34649d3d9cffb
• ebc7e41 Updated Rector to commit 7aef6aac3302fe53bf0a3cd8369d496f3a0c84c1
• 03a365d Rector 2.8.2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)