Bump libs

[IgorCode]

No description provided.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​grunt@​1.6.1 ⏵ 1.6.2	-6		+5
	composer/​phpstan/​phpstan@​2.1.45.0 ⏵ 2.1.50.0

View full report

[Copilot]

Pull request overview

Updates development tooling dependencies across the Node/Grunt toolchain and PHP static analysis tooling.

Changes:

• Bump grunt to 1.6.2 (and refresh package-lock.json with related transitive updates).
• Update phpstan/phpstan in composer.lock to 2.1.50.
• Configure Dependabot to ignore time-grunt updates >=2.

Reviewed changes

Copilot reviewed 2 out of 4 changed files in this pull request and generated 1 comment.

File	Description
package.json	Updates the Grunt devDependency version requirement.
package-lock.json	Refreshes the npm lockfile to reflect updated Grunt and transitive dependencies.
composer.lock	Updates the locked PHPStan version and metadata.
.github/dependabot.yml	Adds an ignore rule to prevent Dependabot PRs for time-grunt v2+.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Using a ">=1.6.2" range for grunt allows npm to resolve to any future major version, which can introduce breaking changes and make builds non-reproducible. Consider pinning to a compatible range (e.g., "^1.6.2" or "~1.6.2") consistent with the other devDependencies, then regenerate the lockfile accordingly.

Suggested change

	"grunt": ">=1.6.2",
	"grunt": "~1.6.2",