chore(deps-dev): bump sirbrillig/phpcs-variable-analysis from 2.8.0 to 2.9.0

[dependabot-preview]

Bumps sirbrillig/phpcs-variable-analysis from 2.8.0 to 2.9.0.

Release notes

Sourced from sirbrillig/phpcs-variable-analysis's releases.

v2.9.0

Changelog

This release backports some 3.x features back to the 2.x line.

• Add allowUnusedVariablesBeforeRequire option (originally #196)
• Add allowUndefinedVariablesInFileScope option (originally #193)

v2.8.3

Changelog

• Downgrade requirements from PHP 5.6 to 5.4 #191 (backported to 2.x).

v2.8.2

Changelog

This is a backport of the bugfixes from 3.0.0-beta.1 into the 2.x version without any of the PHPCSUtils changes.

• Fix comment tolerance for many sniffs (huge props to @jrfnl)
• Clean up package structure (@jrfnl also, for the most part)
• Only allow unused values in associative foreach loops with option (#167)
• Fix unused-before-used detection (#171)

v2.8.2-beta.1

Changelog

This is a backport of the bugfixes in 3.0.0-beta.1 into the 2.x version without any of the PHPCSUtils changes. Because of the nature of a backport, this is a test release to make sure everything works properly before I do a proper release of 2.8.2.

• Fix comment tolerance for many sniffs (huge props to @jrfnl)
• Clean up package structure (@jrfnl also, for the most part)
• Only allow unused values in associative foreach loops with option (#167)
• Fix unused-before-used detection (#171)

v2.8.1

Changelog

This is a small bug fix release with a bunch of test and package clean-up from brave contributors @jrfnl and @alexpott. Thanks, friends! ❤️

• Make assignment of a reference variable be considered a use (#128)
• Bug fix: false negative unused var (#120)
• PHPStan: document run parameters in project ruleset (#122)
• Composer: update PHPCS Composer plugin dependency (#121)
• Bug fix: $this in nested function declaration (#119)
• Documentation: minor fixes (#123)
• Remove stray composer.lock file (#117)
• Tests: simplify the PHPCS setup method [1] (#115)
• Composer: make the PHPUnit requirements more flexible (#114)
• Tests: allow them to work cross-platform (#108)
• Composer: update DealerDirect Composer plugin requirement (#112)
• PHPCS: document run parameters in project ruleset (#107)

Commits

• ff54d4e Add allowUnusedVariablesBeforeRequire to README
• dbecd3d Add test to be sure option does not break other behavior
• 3dfd71a Add isRequireInScopeAfter and use allowUnusedVariablesBeforeRequire
• 0002a10 Add test cases for all forms of require/include
• d8135e3 Move areFollowingArgumentsUsed to Helpers
• 2a535e8 Add tests for unused before require
• 01613e7 Disable unused variables in GlobalScopeTest
• 94f6a1d Add allowUndefinedVariablesInFileScope to README
• cd05ff4 Add allowUndefinedVariablesInFileScope to sniff
• 54486ac Add descriptions for ScopeInfo properties
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[codecov-io]

Codecov Report

Merging #72 into master will not change coverage.
The diff coverage is n/a.

@@             Coverage Diff             @@
##              master       #72   +/-   ##
===========================================
  Coverage     100.00%   100.00%           
  Complexity        18        18           
===========================================
  Files              1         1           
  Lines             49        49           
===========================================
  Hits              49        49           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 60a578c...3eee9c0. Read the comment docs.

[dependabot-preview]

Superseded by #84.