Add PHP 8.5

[xalopp]

Type of PR

• Bugfix
• New Feature
• Other (explain): Support new PHP version 8.5

Breaking changes

• Yes, this is a breaking change

Description

Be prepared for upcoming PHP 8.5 release

[xalopp]

vimeo/psalm currently requires "php": "~8.1.31 || ~8.2.27 || ~8.3.16 || ~8.4.3"

Possible actions:

• wait for fix: deprecations for PHP 8.5 vimeo/psalm#11541 to be merged
• modify out build workflow to work around vimeo/psalm depedency

[xalopp]

phan also needs an update to PHP 8.5: phan/phan#5066

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (93dad05) to head (cb779e0).

Additional details and impacted files

@@             Coverage Diff             @@
##              master      #226   +/-   ##
===========================================
  Coverage     100.00%   100.00%           
  Complexity       147       147           
===========================================
  Files              8         8           
  Lines            669       669           
===========================================
  Hits             669       669           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[mmoll]

Let's wait for an official 8.5.0 (or .1) release, I'm quite sure all the dependencies will get appropriate updates until then.

[xalopp]

@mmoll I think this should be part of a own PR.
Fixes Issues reported by SonarQube:
https://docs.github.com/en/actions/reference/security/secure-use#using-third-party-actions

Some of the used GitHub Actions are not up to date (slackapi/slack-github-action, technote-space/workflow-conclusion-action) which might also need attention.

[mmoll]

@xalopp Could you open a separate PR to update the actions to newer versions and use the SHAs to shut up SonarCube?

[sonarqubecloud]

Quality Gate failed

Failed conditions
7 Security Hotspots

See analysis details on SonarQube Cloud

[xalopp]

Depends on #227
I remove the DRAFT-state from this PR, once #227 is merged and rebased in this PR