build(deps-dev): update mediawiki/mediawiki-codesniffer requirement from ^51.0 to ^52.0

[dependabot]

Updates the requirements on mediawiki/mediawiki-codesniffer to permit the latest version.

Changelog

Sourced from mediawiki/mediawiki-codesniffer's changelog.

v52.0.0 / 2026-08-06

Changed sniffs

• DeprecatedGlobalVariablesSniff: Deprecate $wgLang (MGChecker)
• MockBoilderplateSniff: Detect use of self::returnCallback() (Umherirrender)
• UnusedUseStatementSniff: Add more annotations with types (Gergő Tisza)

Documentation, dependencies and build changes

• Upgrade squizlabs/php_codesniffer to 3.13.6 for security issue (James D. Forrester)

• Drop support for PHP 8.2 (Alexander Vorwerk)

• Drop support for composer/spdx-licenses 1.5.* (Alexander Vorwerk)

v51.0.0 / 2026-05-03

Changed sniffs

• ForbiddenFunctionsSniff: Add utf8_encode and utf8_decode (Umherirrender)
• NullableTypeSniff: Fix for union types (MGChecker)

Documentation, dependencies and build changes

• Upgrade phpcsstandards/phpcsextra (1.4.0 => 1.5.0) (Alexander Vorwerk)

• build: Allow composer/spdx-licenses 1.6.0 (Alexander Vorwerk)

• build: Don't list json as a required extension (Umherirrender)

• build: Upgrade mediawiki/mediawiki-phan-config to 0.20.0 (Umherirrender)

• build: Upgrade mediawiki-phan-config for PHP 8.5 support (James D. Forrester)

• chore: Declare strict types on all php files (Umherirrender)

• chore: Handle possible false/null in PHPUnitTestTrait (Umherirrender)

v50.0.0 / 2026-02-10

Changed sniffs

• ForbiddenFunctionsSniff: Add more deprecated php internal functions (Umherirrender)
• FunctionCommentSniff: Use parameter type regex from phan (Daimona Eaytoy)

Documentation, dependencies and build changes

• build: Upgrade PHPUnit from 10.5.58 to 10.5.63 to unblock CI (James D. Forrester)
• build: Upgrade mediawiki/minus-x from 1.1.3 to 2.0.1 (Alexander Vorwerk)

v49.0.0 / 2026-01-11

Changed sniffs

• UnusedUseStatementSniff: Ignore const when searching class names (Umherirrender)
• UnusedUseStatementSniff: add support for more annotations (Daimona Eaytoy)
• NonNormalizedAnnotation: Forbid @phan-template and @psalm-template in favour of @template (Daimona Eaytoy)
• FunctionCommentSniff: Parse callable parameter syntax (Daimona Eaytoy)
• AssignmentInReturnSniff: Ignore arrow functions (SomeRandomDeveloper)
• ValidGlobalNameSniff: Treat deprecated or removed globals as invalid (Umherirrender)

... (truncated)

Commits

• bf16d45 Release v52.0.0
• f5bec72 Upgrade squizlabs/php_codesniffer to 3.13.6 for security issue
• 3c819dc Detect use of self::returnCallback() for MockBoilerplateSniff
• f3345e2 UnusedUseStatementSniff: Add more annotations with types
• 9fd2bf1 Deprecate $wgLang
• f1d6813 Drop support for PHP 8.2
• 9d8a2f4 Drop support for composer/spdx-licenses 1.5.*
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)