Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
laminas/laminas-continuous-integration-action	action	minor	1.43.0 → v1.44
psalm/plugin-phpunit	require-dev	minor	^0.19.5 → ^0.20.2
shivammathur/setup-php	action	patch	2.37.1 → 2.37.2
symfony/options-resolver (source)	require-dev	patch	^7.4.0 → ^7.4.8
vimeo/psalm	require-dev	patch	^6.15.1 → ^6.16.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

laminas/laminas-continuous-integration-action (laminas/laminas-continuous-integration-action)

v1.44

Compare Source

v1.44.0

Compare Source

Release Notes for 1.44.0

This release updates composer to a version not affected by the CVE-2026-45793.

If you use our published container directly and pin to a specific version or digest you will need to update, otherwise latest container is in use and no action is required.

1.44.0

• Total issues resolved: 0
• Total pull requests resolved: 3
• Total contributors: 1

renovate

• 363: Update composer Docker tag to v2.9.8 thanks to @​renovate[bot]
• 330: Update actions/checkout action to v6 thanks to @​renovate[bot]

dependencies

• 332: Update dependency markdownlint-cli2 to v0.20.0 thanks to @​renovate[bot]

psalm/psalm-plugin-phpunit (psalm/plugin-phpunit)

v0.20.2

Compare Source

What's Changed

• Fix #[Test] attribute detection for inherited and fully-qualified attributes by @​alies-dev in #​160

New Contributors

• @​alies-dev made their first contribution in #​160

Full Changelog: psalm/psalm-plugin-phpunit@0.20.1...0.20.2

v0.20.1

Compare Source

v0.20.0

Compare Source

What's Changed

• Switch to psalm/psalm-plugin-api 0.1.0 (targeting Psalm v7 beta)
• Bump actions/cache from 3 to 4 by @​dependabot[bot] in #​153
• Bump actions/checkout from 3 to 4 by @​dependabot[bot] in #​152
• Bump actions/cache from 4 to 5 by @​dependabot[bot] in #​157
• Bump actions/checkout from 4 to 6 by @​dependabot[bot] in #​156

Full Changelog: psalm/psalm-plugin-phpunit@0.19.5...0.20.0

shivammathur/setup-php (shivammathur/setup-php)

v2.37.2

Compare Source

Changelog

• Fixed macOS setup by marking shivammathur/php and shivammathur/extensions as trusted taps.

• Switched to Visual Studio 18 (vs18) builds for PHP 8.6 on Windows.

• Improved looking up environment variables.

• Tightened security in internal GitHub action workflows.

• Updated Node.js dependencies.

For the complete list of changes, please refer to the Full Changelog

Follow for updates

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock

Command failed: composer update psalm/plugin-phpunit:0.20.2 symfony/options-resolver:7.4.8 vimeo/psalm:6.16.1 --with-dependencies --ignore-platform-req=ext-* --ignore-platform-req=lib-* --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Dependency webmozart/assert is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Dependency psr/container is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Dependency psr/http-factory is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires psalm/plugin-phpunit ^0.20.2 -> satisfiable by psalm/plugin-phpunit[0.20.2].
    - Root composer.json requires vimeo/psalm ^6.16.1 -> satisfiable by vimeo/psalm[6.16.1].
    - psalm/plugin-phpunit 0.20.2 requires psalm/psalm-plugin-api ^0.1 -> satisfiable by psalm/psalm-plugin-api[0.1.0].
    - psalm/psalm-plugin-api 0.1.0 conflicts with vimeo/psalm <7.0.0.

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.