Replace Psalm with PHPstan

Author: tvdijen

.github/workflows/php.yml

@@ -51,9 +51,8 @@ jobs:
         with:
           # Should be the higest supported version, so we can use the newest tools
           php-version: '8.3'
-          tools: composer, composer-require-checker, composer-unused, phpcs, psalm
-          # optional performance gain for psalm: opcache
-          extensions: ctype, date, dom, fileinfo, filter, hash, intl, ldap, mbstring, opcache, openssl, pcre, posix, spl, xml
+          tools: composer, composer-require-checker, composer-unused, phpcs
+          extensions: ctype, date, dom, fileinfo, filter, hash, intl, ldap, mbstring, openssl, pcre, posix, spl, xml
 
       - name: Setup problem matchers for PHP
         run: echo "::add-matcher::${{ runner.tool_cache }}/php.json"
@@ -85,27 +84,13 @@ jobs:
       - name: PHP Code Sniffer
         run: phpcs
 
-      - name: Psalm
-        continue-on-error: true
-        run: |
-          psalm -c psalm.xml \
-          --show-info=true \
-          --shepherd \
-          --php-version=${{ steps.setup-php.outputs.php-version }}
-
-      - name: Psalm (testsuite)
+      - name: PHPStan
         run: |
-          psalm -c psalm-dev.xml \
-          --show-info=true \
-          --shepherd \
-          --php-version=${{ steps.setup-php.outputs.php-version }}
+          vendor/bin/phpstan analyze -c phpstan.neon --debug
 
-      - name: Psalter
+      - name: PHPStan (testsuite)
         run: |
-          psalm --alter \
-          --issues=UnnecessaryVarAnnotation \
-          --dry-run \
-          --php-version=${{ steps.setup-php.outputs.php-version }}
+          vendor/bin/phpstan analyze -c phpstan-dev.neon --debug
 
   security:
     name: Security checks

phpstan-dev.neon

@@ -0,0 +1,4 @@
+parameters:
+  level: 9
+  paths:
+    - tests

phpstan.neon

@@ -0,0 +1,4 @@
+parameters:
+  level: 6
+  paths:
+    - src

psalm-dev.xml

@@ -164,7 +164,7 @@ protected function loginSasl(string $username, #[\SensitiveParameter]string $pas
      *
      * @param string $username  The username the user wrote.
      * @param string $password  The password the user wrote.
-     * @return array  Associative array with the users attributes.
+     * @return array<mixed> Associative array with the users attributes.
      */
     protected function login(string $username, #[\SensitiveParameter]string $password): array
     {
@@ -176,7 +176,7 @@ protected function login(string $username, #[\SensitiveParameter]string $passwor
      * Attempt to find a user's attributes given its username.
      *
      * @param string $username  The username who's attributes we want.
-     * @return array  Associative array with the users attributes.
+     * @return array<mixed> Associative array with the users attributes.
      */
     public function getAttributes(string $username): array
     {
@@ -232,7 +232,7 @@ public function getAttributes(string $username): array
 
     /**
      * @param \Symfony\Component\Ldap\Entry $entry
-     * @return array
+     * @return array<mixed>
      */
     private function processAttributes(Entry $entry): array
     {

psalm.xml

@@ -33,16 +33,22 @@ class LdapMulti extends UserPassOrgBase
 
     /**
      * An array with mappings for organization => authsource.
+     *
+     * @param array<mixed>
      */
     private array $mapping;
 
     /**
      * An array with descriptions for organizations.
+     *
+     * @param array<mixed>
      */
     private array $orgs;
 
     /**
      * An array of organization IDs to LDAP configuration objects.
+     *
+     * @param array<mixed>
      */
     private array $ldapOrgs;
 

src/Auth/Source/Ldap.php

@@ -44,7 +44,7 @@ class Ldap implements ConnectorInterface
      * @param int $version
      * @param string $extension
      * @param bool $debug
-     * @param array $options
+     * @param array<mixed> $options
      */
     public function __construct(
         string $connection_strings,

src/Auth/Source/LdapMulti.php

@@ -64,9 +64,9 @@ public function whoami(): string;
     /**
      * Search the LDAP-directory for a specific object
      *
-     * @param array $searchBase
+     * @param string[] $searchBase
      * @param string $filter
-     * @param array $options
+     * @param array<mixed> $options
      * @param boolean $allowMissing
      * @return \Symfony\Component\Ldap\Entry|null The result of the search or null if none found
      * @psalm-return ($allowMissing is true ? \Symfony\Component\Ldap\Entry|null : \Symfony\Component\Ldap\Entry)
@@ -85,9 +85,9 @@ public function search(
     /**
      * Search the LDAP-directory for any object matching the search filter
      *
-     * @param array $searchBase
+     * @param string[] $searchBase
      * @param string $filter
-     * @param array $options
+     * @param array<mixed> $options
      * @param boolean $allowMissing
      * @return \Symfony\Component\Ldap\Entry[] The result of the search
      *