Drop PHPUnit 9.6 support, add Psalm SARIF reporting, and update README

- Remove PHPUnit ^9.6 from composer.json (PHP 8.3+ requires PHPUnit 10.5+)
- Separate Psalm analysis into dedicated workflow job with SARIF upload
- Add GitHub Sponsor badge to README

Author: byjg

.github/workflows/phpunit.yml

@@ -45,9 +45,37 @@ jobs:
     steps:
       - uses: actions/checkout@v5
       - run: composer install
-      - run: composer psalm
       - run: composer test
 
+  Psalm:
+    name: Psalm Static Analyzer
+    runs-on: ubuntu-latest
+    permissions:
+      # for github/codeql-action/upload-sarif to upload SARIF results
+      security-events: write
+    container:
+      image: byjg/php:8.4-cli
+      options: --user root --privileged
+
+    steps:
+      - name: Git checkout
+        uses: actions/checkout@v4
+
+      - name: Composer
+        run: composer install
+
+      - name: Psalm
+        # Note: Ignoring error code 2, which just signals that some
+        # flaws were found, not that Psalm itself failed to run.
+        run: ./vendor/bin/psalm
+          --show-info=true
+          --report=psalm-results.sarif || [ $? = 2 ]
+
+      - name: Upload Analysis results to GitHub
+        uses: github/codeql-action/upload-sarif@v4
+        with:
+          sarif_file: psalm-results.sarif
+
   Documentation:
     if: github.ref == 'refs/heads/master'
     needs: Build

README.md

@@ -1,5 +1,6 @@
 # Cache Engine
 
+[![Sponsor](https://img.shields.io/badge/Sponsor-%23ea4aaa?logo=githubsponsors&logoColor=white&labelColor=0d1117)](https://github.com/sponsors/byjg)
 [![Build Status](https://github.com/byjg/php-cache-engine/actions/workflows/phpunit.yml/badge.svg?branch=master)](https://github.com/byjg/php-cache-engine/actions/workflows/phpunit.yml)
 [![Opensource ByJG](https://img.shields.io/badge/opensource-byjg-success.svg)](http://opensource.byjg.com)
 [![GitHub source](https://img.shields.io/badge/Github-source-informational?logo=github)](https://github.com/byjg/php-cache-engine/)

composer.json

@@ -19,7 +19,7 @@
     "psr/container": "^1.0|^1.1|^2.0"
   },
   "require-dev": {
-    "phpunit/phpunit": "^9.6|^10.5|^11.5",
+    "phpunit/phpunit": "^10.5|^11.5",
     "vimeo/psalm": "^5.9|^6.13"
   },
   "suggest": {