Restrict phpcs to 3.5.4 due to sniff bugs

composer.json

@@ -19,7 +19,7 @@
     "require-dev": {
         "phpunit/phpunit": "^6.4 || ^8.3",
         "sebastian/comparator": "^2.0 || ^3.0",
-        "squizlabs/php_codesniffer": "^3.5",
+        "squizlabs/php_codesniffer": "^3.5, <3.5.5",
         "symfony/phpunit-bridge": "^4.4@dev"
     },
     "autoload": {