composer: bump nowo-tech/phpstan-frankenphp from 1.0.3 to 1.1.0

[dependabot]

Bumps nowo-tech/phpstan-frankenphp from 1.0.3 to 1.1.0.

Release notes

Sourced from nowo-tech/phpstan-frankenphp's releases.

Release v1.1.0 - Worker process-state rules and pcntl signal hardening

Changelog

Added

• Worker rules for process-wide state that survives FrankenPHP worker requests:
  • NoChdirRule (frankenphp.worker.noChdir)
  • NoSetLocaleRule (frankenphp.worker.noSetLocale) — queries via setlocale($category, 0|"0") allowed
  • NoLocaleSetDefaultRule (frankenphp.worker.noLocaleSetDefault) — locale_set_default() / Locale::setDefault()
  • NoDateDefaultTimezoneSetRule (frankenphp.worker.noDateDefaultTimezoneSet)
  • NoMbEncodingMutationRule (frankenphp.worker.noMbEncodingMutation) — mb_internal_encoding / mb_regex_encoding / mb_http_output / mb_language with an argument; no-arg reads allowed
  • NoErrorReportingMutationRule (frankenphp.worker.noErrorReportingMutation)
  • NoUmaskRule (frankenphp.worker.noUmask)
• Hardening rule: NoPcntlSignalRule (frankenphp.hardening.noPcntlSignal) — pcntl_signal, pcntl_async_signals, pcntl_signal_dispatch, pcntl_signal_get_handler, pcntl_sigprocmask, pcntl_sigwaitinfo, pcntl_sigtimedwait, pcntl_alarm
• Fixture demos, Symfony 8 anti-patterns, RuleTestCase coverage, and catalog updates in https://github.com/nowo-tech/PhpStanFrankenPhp/blob/HEAD/RULES.md
• https://github.com/nowo-tech/PhpStanFrankenPhp/blob/HEAD/ROADMAP.md for planned expansions and explicit non-goals

Notes

• Consumer action required if you already enable ruleset-worker.neon and/or ruleset-hardening.neon: re-run PHPStan and fix or baseline the new identifiers. See https://github.com/nowo-tech/PhpStanFrankenPhp/blob/HEAD/UPGRADING.md.
• Continue requiring nowo-tech/phpstan-frankenphp: ^1.0 (1.1.0 is a compatible minor).

Commits

• Release v1.1.0: worker process-state rules and pcntl signal hardening. (37c1e75)

Changelog

Sourced from nowo-tech/phpstan-frankenphp's changelog.

[1.1.0] - 2026-08-11

Added

• Worker rules for process-wide state that survives FrankenPHP worker requests:
  • NoChdirRule (frankenphp.worker.noChdir)
  • NoSetLocaleRule (frankenphp.worker.noSetLocale) — queries via setlocale($category, 0|"0") allowed
  • NoLocaleSetDefaultRule (frankenphp.worker.noLocaleSetDefault) — locale_set_default() / Locale::setDefault()
  • NoDateDefaultTimezoneSetRule (frankenphp.worker.noDateDefaultTimezoneSet)
  • NoMbEncodingMutationRule (frankenphp.worker.noMbEncodingMutation) — mb_internal_encoding / mb_regex_encoding / mb_http_output / mb_language with an argument; no-arg reads allowed
  • NoErrorReportingMutationRule (frankenphp.worker.noErrorReportingMutation)
  • NoUmaskRule (frankenphp.worker.noUmask)
• Hardening rule: NoPcntlSignalRule (frankenphp.hardening.noPcntlSignal) — pcntl_signal, pcntl_async_signals, pcntl_signal_dispatch, pcntl_signal_get_handler, pcntl_sigprocmask, pcntl_sigwaitinfo, pcntl_sigtimedwait, pcntl_alarm
• Fixture demos, Symfony 8 anti-patterns, RuleTestCase coverage, and catalog updates in https://github.com/nowo-tech/PhpStanFrankenPhp/blob/main/docs/RULES.md
• https://github.com/nowo-tech/PhpStanFrankenPhp/blob/main/docs/ROADMAP.md for planned expansions and explicit non-goals

Notes

• Consumer action required if you already enable ruleset-worker.neon and/or ruleset-hardening.neon: re-run PHPStan and fix or baseline the new identifiers. See https://github.com/nowo-tech/PhpStanFrankenPhp/blob/main/docs/UPGRADING.md.
• Continue requiring nowo-tech/phpstan-frankenphp: ^1.0 (1.1.0 is a compatible minor).

Commits

• 37c1e75 Release v1.1.0: worker process-state rules and pcntl signal hardening.
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

@coderabbitai review