chore(deps-dev): bump spaze/phpstan-disallowed-calls from 4.12.0 to 4.13.0

[dependabot]

Bumps spaze/phpstan-disallowed-calls from 4.12.0 to 4.13.0.

Release notes

Sourced from spaze/phpstan-disallowed-calls's releases.

Attributes on methods match allowInMethods, and allow directives compose predictably

New

• Attributes placed on a method or a function - not just used inside one - now match the name-based allowInMethods/allowInFunctions patterns, the same way allowInMethodsWithAttributes already matched them (#427, #428 - possible BC break)

• Allow directives now fall through to the next one in the same config entry when they don't match, so e.g. allowInInstanceOf combined with allowInClassWithAttributes works as alternatives; how the directives compose is now documented (#429, #430)

• Documented that directive aliases (allowInFunctions/allowInMethods, disallowInMethods/allowExceptInMethods etc.) refer to one single directive and only one of them is used when an entry sets several (#430)

Internal changes

• Array types in PHPDoc adjusted for sealed arrays introduced in PHPStan 2.2 (#421), with the property config types following suit (#422)
• The lowest supported PHPUnit is now 9.6 so tests run on PHP 7.4 again (#426), and the PHPUnit 13.2 expectExceptionMessage() deprecation is handled while keeping older PHPUnit versions working (#425)
• shipmonk/dead-code-detector updated to ^1.1, which requires PHP 8.1+ so it's uninstalled when testing on older versions (#423)
• goto is reachable again in the test fixture (#420)
• actions/checkout bumped to 7 (#424, thanks @​dependabot)

Possible BC break note: allowExceptInMethods and its aliases can now report an attribute placed on a matching method or function, which was previously always allowed - if attribute errors newly appear, check your patterns. Other than that, errors can only disappear with this release.

Commits

• 94bd445 Allow directives fall through to the next one when they don't match (#430)
• be678df Document that setting multiple aliases of one directive uses just one of them
• edef780 Allow directives fall through to the next one when they don't match
• 46cd043 Match attributes on methods and functions with allowInMethods and `allowInFun...
• d79e6e2 Link the methods-with-attributes list item to its own doc
• 14c9e85 Match attributes on methods and functions with allowInMethods and `allowInF...
• 8ade936 Bump actions/checkout from 6 to 7 (#424)
• 30c9ca3 Bump actions/checkout from 6 to 7
• 7966237 "Upgrade" the lowest possible PHPUnit to 9.6 which supports PHP 7.4 (#426)
• d2d897f "Upgrade" the lowest possible PHPUnit to 9.6 which supports PHP 7.4
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)