Update phan/phan requirement from ^4.0 to ^5.4

[dependabot[bot]]

Updates the requirements on phan/phan to permit the latest version.

Changelog

Sourced from phan/phan's changelog.

Aug 08 2022, Phan 5.4.0

New Features(CLI, Configs):

• Add tool/analyze_phpt to analyze phpt files. See https://www.phpinternalsbook.com/tests/phpt_file_structure.html

New Features(Analysis):

• Support php 8.2's true type (https://wiki.php.net/rfc/true-type). Emit PhanCompatTrueType when true is used when minimum_target_php_version is less than 8.2.
• Emit PhanCompatStandaloneType instead of PhanInvalidNode for uses of null/false as real standalone types to support php 8.2 https://wiki.php.net/rfc/null-false-standalone-types (Not emitted when minimum_target_php_version is 8.2 or higher)
• Improve support for php 8.2 readonly classes and php 8.1 readonly properties

Bug fixes:

• Fix php 8.2.0-dev deprecation notice for ast\Node when running Phan in php 5.2.0 with the polyfill instead of the native php-ast version.
• Fix DuplicateArrayKeyPlugin "Implicit conversion from float ... to int" warning causing crash in php 8.1 (#4666)
• Fix slow memory leak of reference cycles in the language server - enable garbage collection for the Phan daemon/language server consistently. (#4665) (This fix is only enabled in php 7.3+ when using pcntl, the pcntl fallback already re-enabled garbage collection. php 7.3 improved the garbage collection efficiency for large collections of objects.)
• Move PhanGenericConstructorTypes warning to the class inheriting a constructor if needed (#4675)
• Fix crash when combining types for null and an array with PHP_INT_MAX as a key (#4688)
• Fix incorrect type inference for arrays with keys that were invalid UTF-8 (#4688)
• Fix error due to deprecation notice running Phan in php 8.2 due to use of "${}" string interpolation (#4692)

Jan 31 2022, Phan 5.3.2

New Features(Analysis):

• Use intersection type of original variable value and array elements when inferring type of $var in in_array($var, $array) instead of just the type of the array elements (#4630)
• Treat type of concatenation of one or more non-real strings as a phpdoc(non-real) string with the real type string. (#4635)
• In phan --init, allow inferring php 8.1 as the target php version in the generated config file. (#4655)

Maintenance:

• Allow installing xdebug-handler version ^3.0 (#4639)
• Allow installing symfony/console version ^6.0 (#4642)

Bug fixes:

• Fix AST download link for PHP 8.0+ for Windows (#4645)

• Fix dead code detection for PHP 8.0 non-capturing catch statements. (#4633) This should still analyze the catch body even if there is no caught exception variable.

• Ignore phpdoc comment tags that don't start at the start of a line of the doc comment (* @sometag) or aren't an inline tag (* something {@sometag}). (#4640) See https://docs.phpdoc.org/3.0/guide/references/phpdoc/tags/internal.html and https://docs.phpdoc.org/2.9/guides/docblocks.html

  E.g. * This is not @abstract. is no longer treated as an abstract method.

Dec 14 2021, Phan 5.3.1

New Features(Analysis):

• Emit PhanDeprecatedPartiallySupportedCallable for functions that work with call_user_func($expr) but not $expr().

... (truncated)

Commits

• d373358 Merge pull request #4698 from TysonAndre/release-phan-5.4.0
• 75622e2 Release Phan 5.4.0
• 3674714 Merge pull request #4697 from TysonAndre/readonly-class-support
• d081b86 Improve support for php 8.2 readonly classes, readonly properties
• ac3bc1f Merge pull request #4695 from TysonAndre/true-type-support
• 59cb84b Other fixes for php 8.2 compatibility with latest php-ast
• c8a04df Support true type
• 3dda523 Fix other test failures
• 6d44361 Support php 8.2 true type, fix crash
• cc1cd47 Merge pull request #4690 from TysonAndre/4688-array-shape-followup
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)