[danog]

Since 2.0 every assertion returns the value it checked, but Psalm's taint analysis doesn't analyse library code, so a tainted input passed through e.g. $id = Assert::stringNotEmpty($_GET['id']) comes out clean and the taint is lost.

This adds @psalm-flow ($value) -> return (or the checked parameter: $array, $classOrObject, $values, $callable, $expression) to every assertion in Assert, and @psalm-taint-specialize to the assertions that aren't @psalm-pure (pure ones are specialized already), so the taint of one call doesn't leak into the others.

Mixin is regenerated with composer generate-mixin: the generator copies the annotations to the nullOr*, all* and allNullOr* variants, which also return their first argument. The generator change only adds a blank line after @psalm-flow to keep the generated docblocks tidy.

https://claude.ai/code/session_016B9dWRw6Lako9sXAWMtWAx