We need to check whether taint-check supports it before moving on.
Local tests say that it does. Also, the changelog only seems to mention changes that won't affect taint-check. There are some new flags/nodes, but nothing that we really care about, methinks.
Unfortunately not, but:
Is 1.0.1 incompatible with 70?
Based on https://gerrit.wikimedia.org/r/plugins/gitiles/integration/config/+/2ebd52c4d29febd698bf6948063a5d51a552b694 this is likely what I thought. However, it's wrong: https://pecl.php.net/package/ast says that 1.0.6 is supported on PHP 7.0.0+, so...
Also it looks like 0.1.2 is never used any more; can we consolidate?
Ah, yes, it can be removed now. That was used by phan 0.8.0 and taint-check 1.x, and we stopped using both last year.