Taint analysis
$_REQUEST
is now treated as a source, and taints now flow throughtrim
and similar funcs@psalm-taint-specialize
now works in static methods
Also @TysonAndre added a --debug-emitted-issues
command line flag to help debug the route of a Psalm issue.
Bugfixes
preg_replace_callback
now supports arrays properly even when the closure is not well-documented (#3639)