--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-4bfadbd1ee
2020-06-19 01:01:42.924196
--------------------------------------------------------------------------------
Name : phan
Product : Fedora 32
Version : 3.0.2
Release : 1.fc32
URL :
https://github.com/phan/phan
Summary : A static analyzer for PHP
Description :
Phan is a static analyzer that looks for common issues and will verify type
compatibility on various operations when type information is available or can
be deduced. Phan does not make any serious attempt to understand flow control
and narrow types based on conditionals.
--------------------------------------------------------------------------------
Update Information:
Jun 07 2020, **Phan 3.0.2** **New features (CLI, Configs):** + Add `--dead-
code-detection-prefer-false-positive` to run dead code detection, erring on
the side of reporting potentially dead code even when it is possibly not dead.
(e.g. when methods of unknown objects are invoked, don't mark all methods with
the same name as potentially used) **New features (Analysis):** + Fix false
positive `PhanAbstractStaticMethodCall` (#3935) Also, properly emit
`PhanAbstractStaticMethodCall` for a variable containing a string class name.
**Plugins:** + Fix incorrect check and suggestion for
`PregRegexCheckerPlugin`'s warning if `$` allows an optional newline before
the end of the string when the configuration includes `['plugin_config' =>
['regex_warn_if_newline_allowed_at_end' => true]]`) (#3938) + Add
`BeforeLoopBodyAnalysisCapability` for plugins to analyze loop conditions before
the body (#3936) + Warn about suspicious param order for `str_contains`,
`str_ends_with`, and `str_starts_with` in `SuspiciousParamOrderPlugin` (#3934)
**Bug fixes:** + Don't report unreferenced class properties of internal stub
files during dead code detection (i.e. files in
`autoload_internal_extension_signatures`). + Don't remove the leading directory
separator when attempting to convert a file outside the project to a relative
path. (in cases where the directory is different but has the project's name as
a prefix) ---- Jun 04 2020, **Phan 3.0.1** **New features (Analysis):** +
Support analysis of php 8.0's `mixed` type (#3899) New issue types:
`PhanCompatibleMixedType`, `PhanCompatibleUseMixed`. + Treat `static` and
`false` like real types and emit more severe issues in all php versions. +
Improve type inferences from negated type assertions (#3923) (analyze more
expression kinds, infer real types in more places) + Warn about unnecessary use
of `expr ?? null`. (#3925) New issue types: `PhanCoalescingNeverUndefined`. +
Support PHP 8.0 non-capturing catches (#3907) New issue types:
`PhanCompatibleNonCapturingCatch`. + Infer type of `$x->magicProp` from the
signature of `__get` + Treat functions/methods that are only called by
themselves as unreferenced during dead code detection. + Warn about `each()`
being deprecated when the `target_php_version` is php 7.2+. (#2746) This is
special cased because PHP does not flag the function itself as deprecated in
`ReflectionFunction`. (PHP only emits the deprecation notice for `each()` once
at runtime) **Miscellaneous:** + Check for keys that are too long when
computing levenshtein distances (when Phan suggests alternatives). **Plugins:**
+ Add `AnalyzeLiteralStatementCapability` for plugins to analyze no-op string
literals (#3911) + In `PregRegexCheckerPlugin`, warn if `$` allows an optional
newline before the end of the string when configuration includes
`['plugin_config' => ['regex_warn_if_newline_allowed_at_end' =>
true]]`) (#3915)
+ In `SuspiciousParamOrderPlugin`, warn if an argument has a near-exact name
match for a parameter at a different position (#3929) E.g. warn about calling
`foo($b)` or `foo(true, $this->A)` for `function foo($a = false, $b = false)`.
New issue types: `PhanPluginSuspiciousParamPosition`,
`PhanPluginSuspiciousParamPositionInternal` **Bug fixes:** + Fix false
positive `PhanTypeMismatchPropertyDefault` involving php 7.4 typed properties
with no default and generic comments (#3917) + Don't remove leading directory
separator when attempting to convert a file outside the project to a relative
path.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 8 2020 Remi Collet <remi(a)remirepo.net> - 3.0.2-1
- update to 3.0.2
* Fri Jun 5 2020 Remi Collet <remi(a)remirepo.net> - 3.0.1-1
- update to 3.0.1
- allow composer/semver version 3
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-4bfadbd1ee' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------