https://gerrit.wikimedia.org/r/#/c/410372/ removed -no-dev from composer which results in the code for dev dependencies like codesniffer or php linter.
Both are not pass on phan, so this broke the CI tests there.
The failing output:
https://integration.wikimedia.org/ci/job/mwext-php70-phan-docker/3165/console
The extensions:
https://codesearch.wmflabs.org/search/?q=%5C.%2Fvendor%5B'%22'%5D&i=nope&files=.*%5C.php%24&repos=