Bump phan/phan from 2.4.8 to 4.0.5

[dependabot-preview]

Bumps phan/phan from 2.4.8 to 4.0.5.

Changelog

Sourced from phan/phan's changelog.

Apr 29 2021, Phan 4.0.5

New Features (Analysis):

• Fix handling of some redundant condition checks involving non-null-mixed and null (#4388, #4391)
• Emit PhanCompatibleSerializeInterfaceDeprecated when a class implements Serializable without also implementing the __serialize and __unserialize methods as well. (#4387) PHP 8.1 deprecates the Serializable interface when __serialize and __unserialize aren't also implemented to be used instead of serialize/unserialize.

Maintenance:

• Warn about running phan with multiple processes without pcntl before the analysis phase starts.
• Start implementing __serialize/__unserialize in Phan itself in places that use Serializable.
• Use different static variables in different subclasses of Phan\Language\Type to account for changes in static variable inheritance in php 8.1. (#4379)

Bug fixes:

• Allow ?T to be used in parameter/property types with @template T (#4388)

Apr 14 2021, Phan 4.0.4

New Features (CLI, Config):

• Support --doc-comment flag on tool/make_stubs to emit the doc comments Phan is using for internal elements along with the stubs. (these are the doc comments Phan would use for hover text in the language server)
• Allow target_php_version and minimum_target_php_version to be 8.1 or newer.

New Features (Analysis):

• Support the php 8.1 array unpacking with string keys RFC (#4358). Don't emit warnings about array unpacking with string keys when minimum_target_php_version is '8.1' or newer.
• Support php 8.1 array_is_list(array $array): bool conditional and its negation. (#4348)
• Fix some false positive issues when trying to eagerly evaluate expressions without emitting issues (#4377)

Bug fixes:

• Fix crash analyzing union type in trait (#4383)

Maintenance:

• Update from xdebug-handler 1.x to 2.0.0 to support Xdebug 3 (#4382)

Plugins:

• Cache plugin instances in ConfigPluginSet. This is useful for unit testing stateless plugins which declare the plugin class in the same file returning the plugin instance. (#4352)

Jan 29 2021, Phan 4.0.3

New Features:

• Support inferring iterable value types/keys from getIterator returning an ordinary Iterator<X> (previously only inferred types for subclasses of Iterator)

Bug fixes:

• Fix crash when rendering [...$x] in an issue message (#4351)
• Infer that if ($x) converts non-null-mixed to non-empty-mixed
• Fix false positive warning case for PhanParamSignaturePHPDocMismatchParamType when a phpdoc parameter has a default value (#4357)

... (truncated)

Commits

• e180077 Merge pull request #4394 from TysonAndre/fix-scalar
• 58eb1c5 Fix conversion of mixed to scalar
• 877cdbc Merge pull request #4393 from TysonAndre/release-4.0.5
• 9efe3d7 Release Phan 4.0.5
• 04ed076 Add conversion from mixed to non-null-mixed
• 927fff8 non-null
• b71e8a6 Merge pull request #4389 from TysonAndre/php81-support
• e1f1d16 Check for pcntl before parsing instead
• de49ecf Suppress php 8.1 language server deprecations
• 30e1677 Update appveyor versions
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[codecov-commenter]

Codecov Report

Merging #124 (03ca3db) into master (889d256) will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##             master     #124   +/-   ##
=========================================
  Coverage     96.90%   96.90%           
  Complexity      196      196           
=========================================
  Files            50       50           
  Lines           550      550           
=========================================
  Hits            533      533           
  Misses           17       17           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 889d256...03ca3db. Read the comment docs.

[dependabot-preview]

Superseded by #131.