lock in phpstan at 0.12.38

this will trigger dependabot pulls for new versions, which will allow us to see any errors that new versions detected instead of having CI builds randomly fail after months of inactivity.

Author: dktapps

composer.json

@@ -8,7 +8,7 @@
 		"php-64bit": "*"
 	},
 	"require-dev": {
-		"phpstan/phpstan": "^0.12.8"
+		"phpstan/phpstan": "0.12.38"
 	},
 	"autoload": {
 		"psr-4": {