Update sirbrillig/phpcs-variable-analysis requirement from ^2.11 to ^3.0

[dependabot]

Updates the requirements on sirbrillig/phpcs-variable-analysis to permit the latest version.

Release notes

Sourced from sirbrillig/phpcs-variable-analysis's releases.

v3.0.0

What's Changed

This is a large refactor which greatly increases the speed and accuracy of phpcs-variable-analysis by adding a dependency on phpcsutils.

Dependencies

• Add phpcsutils as a dependency
• Bump minimum phpcs version from 3.5.7 to 3.13.5 (8683965)

Refactoring (using phpcsutils)

• Simplify getUseIndexForUseImport using findContainingOpeningBracket() (948d77f)
• Replace findFunctionCallArguments custom loop with PassedParameters::getParameters() (3a0b6e4)
• Replace isConstructorPromotion manual scan with FunctionDeclarations::getParameters() (5b97e89)
• Replace areAnyConditionsAClass manual loop with Conditions::hasCondition() (f4ac147)
• Simplify getListAssignments using Lists::getAssignments (75768da)
• Replace findContainingOpeningBracket with phpcsutils equivalent (6b1bdda)
• Replace isVariableInsideUnset/isVariableInsideIssetOrEmpty with phpcsutils equivalents (6a30e89)
• Simplify arrow function detection by relying on T_FN (9da451f)
• Remove unnecessary isArrowFunction block in getScopeCloseForScopeOpen (4cc7f35)

Full Changelog: sirbrillig/phpcs-variable-analysis@v2.13.0...v3.0.0

Changelog

Sourced from sirbrillig/phpcs-variable-analysis's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[3.0.0-beta.10] - 2026-04-26

• Restore version and dependabot updates from the 2.x branch.

[3.0.0-beta.9] - 2026-04-21

This is preparing for a major 3.0 release which adds a dependency on PHPCSUtils. The new version should have the same functionality, fix some subtle bugs, and increase performance by over 2x.

Dependencies

• Add PHPCSUtils as a dependency.
• Bump minimum PHPCS version from 3.5.7 to 3.13.5.

Refactoring (using PHPCSUtils)

• Simplify getUseIndexForUseImport using findContainingOpeningBracket().
• Replace findFunctionCallArguments custom loop with PassedParameters::getParameters().
• Replace isConstructorPromotion manual scan with FunctionDeclarations::getParameters().
• Replace areAnyConditionsAClass manual loop with Conditions::hasCondition().
• Simplify getListAssignments using Lists::getAssignments.
• Replace findContainingOpeningBracket with the PHPCSUtils equivalent.
• Replace isVariableInsideUnset/isVariableInsideIssetOrEmpty with PHPCSUtils equivalents.
• Simplify arrow function detection by relying on T_FN.
• Remove unnecessary isArrowFunction block in getScopeCloseForScopeOpen.

[2.13.0] - 2025-09-30

• Ruleset: update schema URL (#353).
• Update for PHPCS 4.0.0 (#356).

[2.12.0] - 2025-03-17

• Accept namespaces in sitePassByRefFunctions (#351).
• GH Actions: use the xmllint-validate action runner (#350).

[2.11.22] - 2025-01-06

• Allow finding arrow function variables when the arrow function is in file scope (#347).
• Add perf-guard GitHub workflow (#345).
• Improve PHPStan configuration (#344).

[2.11.21] - 2024-12-02

... (truncated)

Commits

• 282f8a4 GH Actions: fail "setup-php" if requested tooling could not be installed (#376)
• 9f47523 GH Actions: Bump actions/checkout in the action-runners group (#375)
• 71c0074 GH Actions: Bump phpcsstandards/xmllint-validate from 1.0.1 to 2.0.0 (#374)
• 65e6f6a GH Actions: Bump actions/checkout from 6.0.3 to 7.0.0 (#372)
• 3aa3ce9 GH Actions: Bump shivammathur/setup-php (#373)
• 99ee751 Update README for PHPCSUtils dependency
• c4486f4 Add CHANGELOG
• 9cf4cd7 GH Actions: Bump actions/checkout in the action-runners group (#370)
• a74dbae GH Actions: Bump shivammathur/setup-php in the action-runners group (#369)
• 711a32c Restore version and dependabot updates from 2.x branch
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)