composer(deps-dev): update mediawiki/mediawiki-phan-config requirement from 0.17.0 to 0.18.0

[dependabot]

Updates the requirements on mediawiki/mediawiki-phan-config to permit the latest version.

Changelog

Sourced from mediawiki/mediawiki-phan-config's changelog.

0.18.0 / 2025-12-18

• Bump phan to 5.5.2 and taint-check to 8.0.0 (Bartosz Dziewoński)

0.17.0 / 2025-08-07

• Drop support for PHP < 8.1 (Daimona Eaytoy)
• Re-enable infinite loop and recursion detection (Daimona Eaytoy)
• Bump phan to 5.5.1 and taint-check to 7.0.0 (Daimona Eaytoy)
• Document common unchecked exceptions: DOMException and NormalizedException (Bartosz Dziewoński)

0.16.0 / 2025-07-02

• Use namespaced MediaWiki classes in globals_type_map (James D. Forrester)
• Bump minimum target PHP version to 8.1 and target PHP version to 8.4 (Daimona Eaytoy)
• Warn against undocumented checked exception (Daimona Eaytoy)
• Enable a subset of unused_variable_detection features to flag: unused variables in catch and closure use, unused parameters in private methods, unused static variables.
• Bump phan to 5.5.0 and taint-check to 6.2.1 (Daimona Eaytoy)

0.15.1 / 2025-01-09

• Fixed a bug where doc-only properties were not considered as possibly undefined.
• Fixed a bug in PHP >= 8 where redundant issets would never be reported for properties of classes with the AllowDynamicProperties attribute.

0.15.0 / 2024-12-09

• Rename NoEmptyIfDefinedPlugin to RedundantExistenceChecksPlugin (Daimona Eaytoy)
• Add isset() checks to RedundantExistenceChecksPlugin (Daimona Eaytoy)
• Upgrade phan to 5.4.5 and mediawiki/phan-taint-check-plugin to 6.1.0 (James D. Forrester)
• Update target PHP version from 8.1 to 8.3

0.14.0 / 2024-02-03

• Add plugin to disallow use of new Exception (Daimona Eaytoy)
• Do not emit MediaWikiNoEmptyIfDefined for properties of classes with the AllowDynamicProperties attribute (Daimona Eaytoy)
• Emit MediaWikiNoEmptyIfDefined for all node types except array element access (Daimona Eaytoy)
• Upgrade phan to 5.4.3 and mediawiki/phan-taint-check-plugin to 6.0.0 (James D. Forrester)

0.13.0 / 2023-09-08

• Add plugin to forbid empty() on defined variables and properties (Daimona Eaytoy)
• Bump phan to 5.4.2 and taint-check to 5.0.0 (Michael Große)
• "Auto discovery" of namespaces of wgConf and wgRequest (Amir Sarabadani)

0.12.1 / 2023-04-17

• Enable PhanCompatibleSerializeInterfaceDeprecated (Umherirrender)
• Create a separate config file for libraries (Daimona Eaytoy)

0.12.0 / 2022-10-06

• Avoid PhanRedefinedInheritedInterface by excluding symfony/polyfill-php80 (Umherirrender)
• Bump minimum PHP version to 7.4 (C. Scott Ananian)
• Disable PhanPluginDuplicateExpressionAssignmentOperation (Reedy)
• Bump phan to 5.4.1 and taint-check to 4.0.0 (Daimona Eaytoy)

0.11.1 / 2021-11-08

• Set minimum and target PHP version (Daimona Eaytoy)

... (truncated)

Commits

• 77d621e Release 0.18.0
• 129bfb1 Bump phan to 5.5.2 and taint-check to 8.0.0
• 2e03d4e build: Migrate $backupStaticAttributesExcludeList to attributes
• ae023f4 build: Update phpunit/phpunit to 10.5.58
• f031e9d build: Upgrade ockcyp/covers-validator to 1.7.0 for PHPUnit 10 support
• 5548abb build: Updating mediawiki/mediawiki-codesniffer to 48.0.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)