[PHP]: Update phan/phan requirement from 5.4.3 to 5.4.4 in /vendor-bin/phan

[dependabot]

Updates the requirements on phan/phan to permit the latest version.

Changelog

Sourced from phan/phan's changelog.

Jul 25 2024, Phan 5.4.4

New features:

• New plugin PhoundPlugin to populate a sqlite database with callsites of all class elements. The database can be queried to find callsites of a given class element. This was actually introduced in 5.4.3, but not announced at the time. #18
• In 5.4.4, the accuracy of PhoundPlugin is improved by giving it access to the full method, property, and constant list that phan infers for a given callsite #4865

Miscellaneous:

• Fix DOMNode::insertBefore method signature #4837
• Update Google\Protobuf\Internal\Message::mergeFromJsonString method signature #4840
• Update fputcsv function signature #4856
• Update preg_replace_* function signatures #4856
• Update ReflectionClass::getConstants and ReflectionObject::getConstants method signatures #4861
• Add support to column position on file location in CodeClimatePrinter #4862

Dec 26 2023, Phan 5.4.3

New Features(Analysis):

• Automatically inherit @throws types from parent methods if enable_phpdoc_types is true (which it is by default). (#4757)

Miscellaneous:

• Fix ldap function signatures
• Fix a couple of array spread crash bugs
• Extend supported dependency versions of symfony/console to also allow 7.x (#4822)
• Require php-ast 1.1.1 or newer in PHP 8.3+ if php-ast is installed.

Bug fixes:

• Fix interfaces can extend BackedEnum and UnitEnum (#4782)
• Fix ini_set() signature to take any scalar since PHP 8.1 (#4806)
• Fix RedisCluster setOption/getOption signatures (#4790)
• Don't emit PhanTypeMismatchUnpackKeyArraySpread when minimum_target_php_version is '8.1' or newer. (#4788)
• Fix a couple of array spread crash bugs (#4780)
• Fix crash if match is used inside for-loop (#4767)
• Fix DateTime::getTimestamp return type (#4731)
• Avoid deprecation warning for ASSERT constants in php 8.3+ (#4808)
• Use ini_set() instead of assert_options() when Phan's assertion options match PHP's assert ini setting defaults to keep those values and avoid deprecation warnings in php 8.3+.
• Fix crash in AST fallback parser when parsing invalid ArgumentExpression in php 8.0+
• Fix false positive warnings and skipping internal constants declared by PECLs prefixed with \x00 (APCu, immutable_cache)

Mar 03 2023, Phan 5.4.2

Miscellaneous:

• Fix wording in EmptyStatementListPlugin issue messages.
• Add a few more functions where the return value should be used.
• Fix signature of exif_read_data() #4759
• Make allow_missing_properties setting aware of AllowDynamicProperties attribute for PHP 8.2

Maintenance:

• Require php-ast 1.1.0 or newer in PHP 8.2+ if php-ast is installed.

... (truncated)

Commits

• a87bbad Merge pull request #4868 from dasl-/rel-5-4-4
• d1990e5 Release phan 5.4.4
• 3a17b96 cast here to avoid a phan error
• bc64ed6 Merge pull request #4856 from jdwx/fputcsv-argument
• 04c7627 Merge pull request #4862 from llaville/fix/codeclimate-output
• b8093ef Merge pull request #4861 from donatj/fix/getConstants
• f847d9c Merge pull request #4837 from cscott/patch-1
• 8bbbdbe Merge pull request #4840 from brettmc/fix-protobuf-mergefromjsonstring
• 308534c Merge pull request #4865 from dasl-/methodset
• f4ec88e appease phan
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)