build(deps-dev): bump carthage-software/mago from 1.47.6 to 1.48.0

[dependabot]

Bumps carthage-software/mago from 1.47.6 to 1.48.0.

Release notes

Sourced from carthage-software/mago's releases.

Mago 1.48.0

Mago 1.48.0 ships MANA 1.1 with richer analyzer hooks, sharper type inference, safer formatting, and tighter PHP checks.

✨ Features

Analyzer

• array_pad shapes: infers exact list shapes when the target size is known. (#2341, 7a3dba7)

Reporting

• Relative editor paths: adds %rel_file% to editor URL templates. (#2299, d747922)

🐛 Bug Fixes

Analyzer

• Generic property overrides: substitutes inherited templates before comparing property types. (#2324, #2325, c888b1b)
• Callable objects: keeps valid object arms when narrowing with is_callable(). (#2333, f7dbdc8)
• Class docblocks: honors @extends and @implements in all PHP attachment positions. (#2331, 1a5f625)
• Class aliases: scans class_alias() declarations and resolves aliases at lookup sites. (#2323, 6ae0c3c)
• Exact assertions: preserves one-way assertions across || and negated &&. (#2320, #2321, 0d451a8)
• Object class strings: preserves templates when instantiating inferred class-string<T>. (#2330, 54871ae)
• Reference loops: prevents type explosions during by-reference loop analysis. (#2336, e043db9)
• array_multisort: handles variadic arrays and by-reference arguments correctly. (#2235, 9ef20b6)
• PCRE delimiters: reports malformed patterns in preg_match() and preg_match_all(). (#2205, #2350, 3df9f9c)
• Runtime class checks: preserves correlated unions after is_a() and ::class checks. (#2352, 0aa7d51)
• Pure getters: applies PHPDoc assertions to stable method results before their first call. (#2335, 435a6e7)

Codex

• Enum wildcards: accepts an enum where Enum::* denotes all of its cases. (#2343, 645529e)

PHPDoc Syntax

• Nested assertions: preserves full property and method targets in PHPDoc assertions. (#2319, #2322, 13bc480)

Prelude

• Reflection types: corrects missing and invalid types across Reflection stubs. (#2329, 9b3c26a)

Formatter

• Ignore regions: prevents OOM and output corruption from malformed heredoc ignore ranges. (#2346, #2347, 6a152c1)
• Ignored nodes: honors empty-line-after-use before @mago-format-ignore-next. (#2348, dfd69a8)
• Trailing commas: respects the target PHP version in formatting and syntax checks. (#2345, 528efc3)

Linter

... (truncated)

Commits

• a86492e release: 1.48.0
• 435a6e7 fix(analyzer): apply assertions to pure method results
• 5757b10 ci: close issues opened by AI agents
• e212bfe fix(syntax): enforce variable syntax in braced interpolation
• e406a75 fix(linter): preserve array_merge key semantics
• 645529e fix(codex): normalize enum case wildcards
• 0aa7d51 fix(analyzer): preserve runtime class correlations in method calls
• 528efc3 fix(formatter): only add trailing commas the target PHP version accepts (#2345)
• dfd69a8 fix(formatter): respect empty-line-after-use with ignore markers
• 6a152c1 fix(formatter): prevent OOM on malformed ignore ranges
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 612ddaa2-a64d-4a6e-a098-f11e4a858bf6

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}