Bump PHP_CodeSniffer and coding-standard plugin versions

[stefanvacareanu7]

Summary

• Bump squizlabs/php_codesniffer 4.0.1 → 4.0.4
• Bump cakephp/cakephp-codesniffer 5.3.0 → 5.3.2
• Bump slevomat/coding-standard 8.30.1 → 8.31.1
• Bump phpstan/phpdoc-parser 2.3.2 → 2.3.5
• Regenerated composer.lock to match (kept phpcsstandards/phpcsutils pinned at 1.2.3, avoiding the CVE-2026-65954 arbitrary-code-execution advisory affecting <1.2.3)

Other pinned packages (drupal/coder, escapestudios/symfony2-coding-standard, phpcompatibility/*, symfony/flex, dealerdirect/phpcodesniffer-composer-installer, doctrine/coding-standard) are already at their latest Packagist versions, so left untouched. CircleCI orb versions, build.sbt toolchain versions, and the Dockerfile base images (phpdoc 3.10.0, php:8.5-cli) were also verified to already be current, per the playbook's "don't bump opportunistically" guidance.

Validation

• composer update <packages> --with-dependencies — resolved cleanly, composer audit reports no vulnerabilities
• docker build -t codacy-codesniffer . — succeeds end-to-end (doc-generator, native-image builder, final PHP runtime stages)
• codacy-plugins-test json DockerTest — all tests passed
• codacy-plugins-test pattern DockerTest — all tests passed
• codacy-plugins-test multiple DockerTest (matches CI's run_multiple_tests: true) — all tests passed

🤖 Generated with Claude Code

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[codacy-production]

Pull Request Overview

The required dependency updates and lockfile regeneration cannot be independently verified from the available diff evidence. Docker builds, dependency resolution, audit, and the specified DockerTest scenarios are also unverified. No Codacy issues were reported, and the analysis is up to standards.

About this PR

• Please provide evidence that composer.lock was regenerated with phpcsutils pinned at 1.2.3 and that dependency resolution, composer audit, Docker builds, and the listed DockerTest scenarios pass.

Test suggestions

• Verify all requested composer.json package versions are updated.
• Verify composer.lock is regenerated consistently with the requested dependency updates.
• Run composer update with dependencies and composer audit successfully.
• Build the Docker image successfully through all stages.
• Pass json, pattern, and multiple codacy-plugins-test DockerTest scenarios.

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Verify all requested composer.json package versions are updated.
2. Verify composer.lock is regenerated consistently with the requested dependency updates.
3. Run composer update with dependencies and composer audit successfully.
4. Build the Docker image successfully through all stages.
5. Pass json, pattern, and multiple codacy-plugins-test DockerTest scenarios.

_{TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback}