build(deps): bump psy/psysh from 0.11.19 to 0.11.23

[dependabot]

Bumps psy/psysh from 0.11.19 to 0.11.23.

Release notes

Sourced from psy/psysh's releases.

PsySH v0.11.23

• Fixed CWD configuration poisoning vulnerability (CVE-2026-25129). Backported Restricted Mode from v0.12. PsySH now requires explicit trust before loading local config (.psysh.php), local PsySH binaries, or Composer autoloads from untrusted projects. Configure with trustProject config option, --trust-project / --no-trust-project CLI flags, or PSYSH_TRUST_PROJECT env var.

PsySH v0.11.22

• Fix Sudo static property manipulation in PHP 8.3.

PsySH v0.11.21

Made a bunch of behind the scenes fixes, that you probably won't even notice. Specifically:

• Ensure that parse errors show the original message, not "unexpected EOF" (unless that was the original error).
• Prettier output for Symfony Console exceptions.
• Improve argument parsing for timeit command.
• Remove very deprecated Symfony TableHelper fallback (it's been unsupported by our oldest supported Console version for years).
• A bunch of static analysis improvements.

PsySH v0.11.20

• Fix undefined array key (when argv doesn't exist) in userland readline implementation (Thanks @​BafS!)

Commits

• e9ac4fa Bump to v0.11.23
• 8ec3d58 Add Restricted Mode for untrusted projects
• 128fa1b Merge branch 'release/0.11.22' into 0.11
• 0db96a7 Bump to v0.11.22
• 5927f39 Fix Sudo static property manipulation in PHP 8.3.
• 8a11c39 Test against PHP 8.3 and 8.4
• 1013fdd Update alias for v0.11.x-dev
• bcb2210 Merge branch 'release/0.11.21'
• 2b78273 Bump to v0.11.21
• 2be8beb Oops.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.