Require PHPStan 2.0.4 or newer in the 2.x series

Target a single PHPStan major version and align the declared minimum with the pinned compatibility job. Remove the 1.x development dependency alternatives and inline the remaining strict-rules settings.

This drops support for PHPStan 1.x and 2.0.0 through 2.0.3. Keep the runtime capability checks needed across supported 2.x versions.

Author: jbboehr

.github/workflows/ci.yml

@@ -118,11 +118,6 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - phpstan-version: "1.12.1"
-            phpstan-constraint: "1.12.1"
-            phpstan-phpunit-constraint: "^1.4.2"
-            phpstan-strict-rules-constraint: "1.5.2"
-            php-parser-constraint: "^4.19.5"
           - phpstan-version: "2.0.4"
             phpstan-constraint: "2.0.4"
             phpstan-phpunit-constraint: "2.0.6"

README.md

@@ -7,6 +7,8 @@
 
 ## Installation
 
+Requires PHP `^8.1` and PHPStan `^2.0.4`.
+
 To use this extension, require it in [Composer](https://getcomposer.org/):
 
 ```bash

composer.json

@@ -12,7 +12,7 @@
     ],
     "require": {
         "php": "^8.1",
-        "phpstan/phpstan": "^1.12.1 || ^2.0"
+        "phpstan/phpstan": "^2.0.4"
     },
     "autoload": {
         "psr-4": {
@@ -22,8 +22,8 @@
     "require-dev": {
         "composer-runtime-api": "*",
         "jbboehr/akashi": "^0.2",
-        "phpstan/phpstan-phpunit": "^1.4.2 || ^2.0.6",
-        "phpstan/phpstan-strict-rules": "^1.5.2 || ^2.0.4",
+        "phpstan/phpstan-phpunit": "^2.0.6",
+        "phpstan/phpstan-strict-rules": "^2.0.4",
         "phpunit/phpunit": "^10.5.62 || ^11.5.50",
         "slevomat/coding-standard": "^8.18",
         "squizlabs/php_codesniffer": "^3.13",

composer.lock

@@ -0,0 +1,26 @@
+# Dependency compatibility
+
+The supported requirements are PHP `^8.1` and PHPStan `^2.0.4`.
+PHPStan 1.x is no longer supported. This dependency restriction is a breaking
+compatibility change for users on 1.x or PHPStan 2.0.0 through 2.0.3.
+
+The PHPStan floor matches the exact version exercised by the compatibility CI
+job. The regular test jobs resolve current dependencies permitted by Composer;
+the compatibility job pins PHPStan 2.0.4, phpstan-phpunit 2.0.6, and
+phpstan-strict-rules 2.0.4 on PHP 8.1.
+
+Supporting only 2.x removes the separate 1.x development dependency constraints
+and strict-rules configuration branch. PHPStan also recommends targeting one
+major version in its [extension upgrade guide](https://phpstan.org/blog/upgrading-from-phpstan-1-to-2).
+
+Keep capability checks that cover differences within 2.x. In particular,
+unsealed array shapes were introduced in
+[PHPStan 2.2](https://phpstan.org/blog/phpstan-2-2-unsealed-array-shapes-safer-array-keys),
+so requiring 2.0.4 does not make the unsealed-shape fallbacks obsolete. Renderer
+differences within 2.x still matter to the test fixtures as well.
+
+When changing the minimum again, update Composer requirements, the pinned CI
+case, and the installation requirements together. Run the complete suite,
+including the [behavior contract](behavior-contract.md), on the proposed floor
+and the installed current version before removing compatibility code. Keep
+changes to inference behavior in a separate slice.

docs/development/compatibility.md

@@ -3,9 +3,11 @@ includes:
     - vendor/phpstan/phpstan-phpunit/extension.neon
     - vendor/phpstan/phpstan-phpunit/rules.neon
     - vendor/phpstan/phpstan-strict-rules/rules.neon
-    - phpstan-strict-rules.php
     - extension.neon
 parameters:
+    strictRules:
+        disallowedShortTernary: false
+        dynamicCallOnStaticMethod: false
     level: max
     paths:
         - src