NoPublicNonActionMethodInControllerRule reports attribute-routed actions (#[Route]) #368

Version: symplify/phpstan-rules 14.18.3

NoPublicNonActionMethodInControllerRule treats a public controller method as a route action only if its name ends in Action or it is __invoke(). Methods that carry a #[Route] attribute are not recognised, so every attribute-routed controller with conventional method names gets reported:

use Symfony\Component\Routing\Attribute\Route;

final class LeadLayerController extends AbstractController
{
    #[Route(path: '/lead-layer/submit', name: 'lead_layer_submit', methods: ['POST'])]
    public function submit(Request $request): JsonResponse
    {
        // ...
    }
}

Controller method "submit()" is not a route action, so it cannot be public. Make it protected or private
🪪  symfony.noPublicNonActionMethodInController

Making the method private breaks the route, and the *Action suffix has not been the Symfony convention since attribute routing became the default. In our project the upgrade from 14.17.0 produced 63 errors, all of them on #[Route] methods.

Expected: methods with a Symfony\Component\Routing\Attribute\Route (or the legacy Symfony\Component\Routing\Annotation\Route) attribute are skipped, the same way #[Required] setters already are.

Suggested fix: extend hasRequiredAttribute() (or add a sibling check) to also return early for the two Route attribute classes. I can open a PR with a fixture if that helps.