chore(deps-dev): update vimeo/psalm requirement from 6.16.1 to 6.17.0 in /vendor-bin/psalm

[dependabot]

Updates the requirements on vimeo/psalm to permit the latest version.

Release notes

Sourced from vimeo/psalm's releases.

6.17.0

What's Changed

Features

• Support better template inference with type variables: class templates that cannot be inferred at the construction site are now tracked as type variables whose bounds are reconciled once the surrounding function has been analyzed. This legalizes widening within a template's declared bounds (e.g. new Box(1) followed by $box->set('two') under @template T of int|string) and introduces the new IncompatibleTypeParameters issue (level 1), documented in https://psalm.dev/docs/annotating_code/type_variables/ by @​muglug in vimeo/psalm#11875

Fixes

• [6.x] Fix InterfaceAnalyzer crash when storage is overwritten by reflection by @​alies-dev in vimeo/psalm#11760
• [6.x] Fix $this failing to parse inside generic type parameters by @​alies-dev in vimeo/psalm#11768
• [6.x] Use macOS bundle ID for PhpStorm (support JetBrains Tool installed apps), respect PHPSTORM env var on Darwin by @​alies-dev in vimeo/psalm#11801
• [6.x] Ignore inline covariant/contravariant keywords in generic type parameters instead of reporting UndefinedDocblockClass (backport) by @​alies-dev in vimeo/psalm#11836
• Keep foreach key/value non-nullable after a breaking loop by @​muglug in vimeo/psalm#11874
• PHP 8.5 compatibility: TLiteralFloat now renders NAN values as float(NAN) in type keys and IDs instead of crashing by @​danog in vimeo/psalm@9d6db9e and vimeo/psalm@ca15124

Docs

• Add docs/annotating_code/type_variables.md and the IncompatibleTypeParameters issue page by @​muglug in vimeo/psalm#11875

Internal changes

• [6.x] fix tests: drop incorrect impure- Closure prefix in TypeParseTest by @​alies-dev in vimeo/psalm#11834
• [6.x] fix tests: whitelist Override in SuicidalAutoloader fixture by @​alies-dev in vimeo/psalm#11835
• fix: pin GitHub Actions to SHA for supply chain security by @​riccardosarro in vimeo/psalm#11863
• Clean up redundant assignment-conditions and repeated getArgs() calls by @​muglug in vimeo/psalm#11888
• Remove dead write-only static properties and simplify ScopeAnalyzer break/continue logic by @​muglug in vimeo/psalm#11889
• Fix test-with-real-projects.sh on macOS (use gsed when available, tolerate a missing phar) by @​danog in vimeo/psalm@9d6db9e
• Fix macOS CI: bump setup-php to v2.37.2 so PHP 8.5 installs on macos-15 by @​danog in vimeo/psalm@a2892dfd1
• Fix Mockery 1.6.15 compatibility in plugin tests by @​danog in vimeo/psalm@7b50a1725
• Drop voidParamType test: nikic/php-parser 5.8 rejects void params at parse time by @​danog in vimeo/psalm@056992a90

Other changes

• Allow sebastian/diff 9 by @​liviuconcioiu in vimeo/psalm#11861

New Contributors

• @​riccardosarro made their first contribution in vimeo/psalm#11863

Full Changelog: vimeo/psalm@6.16.1...6.17.0

Commits

• 056992a Drop voidParamType test: php-parser 5.8 rejects void params at parse time
• 7b50a17 Fix Mockery 1.6.15 compatibility in plugin tests
• a2892df Fix macOS CI: bump setup-php to v2.37.2 so PHP 8.5 installs on macos-15
• 7385c40 Remove dead write-only static properties and simplify ScopeAnalyzer break/con...
• 0090471 Clean up redundant assignment-conditions and repeated getArgs() calls (#11888)
• be7afcf Add type variable support for class templates (#11875)
• 778320a Keep foreach key/value non-nullable after a breaking loop (#11874)
• de84ad4 Merge pull request #11861 from liviuconcioiu/diff
• 6d2d73f fix: pin GitHub Actions to SHA for supply chain security (#11863)
• 668b056 Allow sebastian/diff 9
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)