phpPackages.psalm: 6.5.0 -> 6.8.6 (#384574)

pkgs/development/php-packages/psalm/default.nix

@@ -1,25 +1,37 @@
 {
   lib,
+  fetchurl,
   fetchFromGitHub,
   php,
   versionCheckHook,
+  runCommand,
 }:
 
+let
+  version = "6.8.6";
+
+  # The PHAR file is only required to get the `composer.lock` file
+  psalm-phar = fetchurl {
+    url = "https://github.com/vimeo/psalm/releases/download/${version}/psalm.phar";
+    hash = "sha256-nPvA/pxBMJe4Ux4NmFOdrEmKqRqmwz8gFlCgsB0GbPI=";
+  };
+in
 php.buildComposerProject2 (finalAttrs: {
   pname = "psalm";
-  version = "6.5.0";
+  inherit version;
 
   src = fetchFromGitHub {
     owner = "vimeo";
     repo = "psalm";
     tag = finalAttrs.version;
-    hash = "sha256-RH4uPln90WrTdDF1S4i6e2OikPmIjTW3aM4gpM2qxgg=";
+    hash = "sha256-CewFeIUG+/5QCRpoPSOv1gqwBL9voBf4zgIzdnhk2t8=";
   };
 
-  # Missing `composer.lock` from the repository.
-  # Issue open at https://github.com/vimeo/psalm/issues/10446
-  composerLock = ./composer.lock;
-  vendorHash = "sha256-6eGj0gTXktm1zGHjHKKsMnudb9RfmAFgwcmDV/QMV5Y=";
+  composerLock = runCommand "composer.lock" { } ''
+    ${lib.getExe php} -r '$phar = new Phar("${psalm-phar}"); $phar->extractTo(".", "composer.lock");'
+    cp composer.lock $out
+  '';
+  vendorHash = "sha256-QObqXzazypumDnFtfNiFSZdpZ7PbsBZZBUsS3fseZok=";
 
   nativeInstallCheckInputs = [
     versionCheckHook
@@ -28,6 +40,7 @@ php.buildComposerProject2 (finalAttrs: {
   doInstallCheck = true;
 
   meta = {
+    broken = lib.versionOlder php.version "8.2";
     changelog = "https://github.com/vimeo/psalm/releases/tag/${finalAttrs.version}";
     description = "Static analysis tool for finding errors in PHP applications";
     homepage = "https://github.com/vimeo/psalm";