From 32acbb27359da6427c2b9e8ef7be35e041288b87 Mon Sep 17 00:00:00 2001 From: Aaron Silverman Date: Tue, 26 May 2026 09:50:04 -0400 Subject: [PATCH 1/2] fix(FFESUPPORT-734): address open security vulnerabilities MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Clears the two open security advisories reported by `composer audit`, plus picks up other available minor/patch transitive bumps in the process. composer.json is unchanged — all bumps land via lockfile resolution within existing constraints. - HIGH GHSA-p2gh-cfq4-4wjc / CVE-2026-6409: google/protobuf v4.33.5 -> v5.35.0 (dev transitive) — DoS via negative varints / deep recursion. Patched in 4.33.6; we get the v5 line via google/cloud-storage's resolution since `^8.1` PHP allows it. - CVE-2026-45073: symfony/cache v7.3.5 -> v7.4.12 (prod) — SQL Injection in `PdoAdapter::doClear()` via unsanitized `$prefix`. Patched in >=7.4.12. Not yet propagated to the GitHub advisory database but flagged by Composer's audit / Symfony security team. Verified: - `composer audit` -> "No security vulnerability advisories found." - `composer validate --strict` -> clean. - `make test` -> 98 tests, 664 assertions, all pass (matches baseline). Co-Authored-By: Claude Opus 4.7 (1M context) --- composer.lock | 439 ++++++++++++++++++++++++++------------------------ 1 file changed, 226 insertions(+), 213 deletions(-) diff --git a/composer.lock b/composer.lock index 703bf00..5e78fd3 100644 --- a/composer.lock +++ b/composer.lock @@ -8,24 +8,24 @@ "packages": [ { "name": "composer/semver", - "version": "3.4.2", + "version": "3.4.4", "source": { "type": "git", "url": "https://github.com/composer/semver.git", - "reference": "c51258e759afdb17f1fd1fe83bc12baaef6309d6" + "reference": "198166618906cb2de69b95d7d47e5fa8aa1b2b95" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/composer/semver/zipball/c51258e759afdb17f1fd1fe83bc12baaef6309d6", - "reference": "c51258e759afdb17f1fd1fe83bc12baaef6309d6", + "url": "https://api.github.com/repos/composer/semver/zipball/198166618906cb2de69b95d7d47e5fa8aa1b2b95", + "reference": "198166618906cb2de69b95d7d47e5fa8aa1b2b95", "shasum": "" }, "require": { "php": "^5.3.2 || ^7.0 || ^8.0" }, "require-dev": { - "phpstan/phpstan": "^1.4", - "symfony/phpunit-bridge": "^4.2 || ^5" + "phpstan/phpstan": "^1.11", + "symfony/phpunit-bridge": "^3 || ^7" }, "type": "library", "extra": { @@ -69,7 +69,7 @@ "support": { "irc": "ircs://irc.libera.chat:6697/composer", "issues": "https://github.com/composer/semver/issues", - "source": "https://github.com/composer/semver/tree/3.4.2" + "source": "https://github.com/composer/semver/tree/3.4.4" }, "funding": [ { @@ -79,26 +79,22 @@ { "url": "https://github.com/composer", "type": "github" - }, - { - "url": "https://tidelift.com/funding/github/packagist/composer/composer", - "type": "tidelift" } ], - "time": "2024-07-12T11:35:52+00:00" + "time": "2025-08-20T19:15:30+00:00" }, { "name": "php-http/discovery", - "version": "1.19.4", + "version": "1.20.0", "source": { "type": "git", "url": "https://github.com/php-http/discovery.git", - "reference": "0700efda8d7526335132360167315fdab3aeb599" + "reference": "82fe4c73ef3363caed49ff8dd1539ba06044910d" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/php-http/discovery/zipball/0700efda8d7526335132360167315fdab3aeb599", - "reference": "0700efda8d7526335132360167315fdab3aeb599", + "url": "https://api.github.com/repos/php-http/discovery/zipball/82fe4c73ef3363caed49ff8dd1539ba06044910d", + "reference": "82fe4c73ef3363caed49ff8dd1539ba06044910d", "shasum": "" }, "require": { @@ -162,9 +158,9 @@ ], "support": { "issues": "https://github.com/php-http/discovery/issues", - "source": "https://github.com/php-http/discovery/tree/1.19.4" + "source": "https://github.com/php-http/discovery/tree/1.20.0" }, - "time": "2024-03-29T13:00:05+00:00" + "time": "2024-10-02T11:20:13+00:00" }, { "name": "psr/cache", @@ -533,16 +529,16 @@ }, { "name": "symfony/cache", - "version": "v7.3.5", + "version": "v7.4.12", "source": { "type": "git", "url": "https://github.com/symfony/cache.git", - "reference": "4a55feb59664f49042a0824c0f955e2f4c1412ad" + "reference": "902d621e0b6ef0ebeaa133770b5c339a19328589" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/symfony/cache/zipball/4a55feb59664f49042a0824c0f955e2f4c1412ad", - "reference": "4a55feb59664f49042a0824c0f955e2f4c1412ad", + "url": "https://api.github.com/repos/symfony/cache/zipball/902d621e0b6ef0ebeaa133770b5c339a19328589", + "reference": "902d621e0b6ef0ebeaa133770b5c339a19328589", "shasum": "" }, "require": { @@ -550,12 +546,14 @@ "psr/cache": "^2.0|^3.0", "psr/log": "^1.1|^2|^3", "symfony/cache-contracts": "^3.6", - "symfony/deprecation-contracts": "^2.5|^3.0", + "symfony/deprecation-contracts": "^2.5|^3", "symfony/service-contracts": "^2.5|^3", - "symfony/var-exporter": "^6.4|^7.0" + "symfony/var-exporter": "^6.4|^7.0|^8.0" }, "conflict": { "doctrine/dbal": "<3.6", + "ext-redis": "<6.1", + "ext-relay": "<0.12.1", "symfony/dependency-injection": "<6.4", "symfony/http-kernel": "<6.4", "symfony/var-dumper": "<6.4" @@ -570,13 +568,13 @@ "doctrine/dbal": "^3.6|^4", "predis/predis": "^1.1|^2.0", "psr/simple-cache": "^1.0|^2.0|^3.0", - "symfony/clock": "^6.4|^7.0", - "symfony/config": "^6.4|^7.0", - "symfony/dependency-injection": "^6.4|^7.0", - "symfony/filesystem": "^6.4|^7.0", - "symfony/http-kernel": "^6.4|^7.0", - "symfony/messenger": "^6.4|^7.0", - "symfony/var-dumper": "^6.4|^7.0" + "symfony/clock": "^6.4|^7.0|^8.0", + "symfony/config": "^6.4|^7.0|^8.0", + "symfony/dependency-injection": "^6.4|^7.0|^8.0", + "symfony/filesystem": "^6.4|^7.0|^8.0", + "symfony/http-kernel": "^6.4|^7.0|^8.0", + "symfony/messenger": "^6.4|^7.0|^8.0", + "symfony/var-dumper": "^6.4|^7.0|^8.0" }, "type": "library", "autoload": { @@ -611,7 +609,7 @@ "psr6" ], "support": { - "source": "https://github.com/symfony/cache/tree/v7.3.5" + "source": "https://github.com/symfony/cache/tree/v7.4.12" }, "funding": [ { @@ -631,20 +629,20 @@ "type": "tidelift" } ], - "time": "2025-10-16T13:55:38+00:00" + "time": "2026-05-20T07:20:23+00:00" }, { "name": "symfony/cache-contracts", - "version": "v3.6.0", + "version": "v3.7.0", "source": { "type": "git", "url": "https://github.com/symfony/cache-contracts.git", - "reference": "5d68a57d66910405e5c0b63d6f0af941e66fc868" + "reference": "225e8a254166bd3442e370c6f50145465db63831" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/symfony/cache-contracts/zipball/5d68a57d66910405e5c0b63d6f0af941e66fc868", - "reference": "5d68a57d66910405e5c0b63d6f0af941e66fc868", + "url": "https://api.github.com/repos/symfony/cache-contracts/zipball/225e8a254166bd3442e370c6f50145465db63831", + "reference": "225e8a254166bd3442e370c6f50145465db63831", "shasum": "" }, "require": { @@ -658,7 +656,7 @@ "name": "symfony/contracts" }, "branch-alias": { - "dev-main": "3.6-dev" + "dev-main": "3.7-dev" } }, "autoload": { @@ -691,7 +689,7 @@ "standards" ], "support": { - "source": "https://github.com/symfony/cache-contracts/tree/v3.6.0" + "source": "https://github.com/symfony/cache-contracts/tree/v3.7.0" }, "funding": [ { @@ -702,25 +700,29 @@ "url": "https://github.com/fabpot", "type": "github" }, + { + "url": "https://github.com/nicolas-grekas", + "type": "github" + }, { "url": "https://tidelift.com/funding/github/packagist/symfony/symfony", "type": "tidelift" } ], - "time": "2025-03-13T15:25:07+00:00" + "time": "2026-05-05T15:33:14+00:00" }, { "name": "symfony/deprecation-contracts", - "version": "v3.6.0", + "version": "v3.7.0", "source": { "type": "git", "url": "https://github.com/symfony/deprecation-contracts.git", - "reference": "63afe740e99a13ba87ec199bb07bbdee937a5b62" + "reference": "50f59d1f3ca46d41ac911f97a78626b6756af35b" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/symfony/deprecation-contracts/zipball/63afe740e99a13ba87ec199bb07bbdee937a5b62", - "reference": "63afe740e99a13ba87ec199bb07bbdee937a5b62", + "url": "https://api.github.com/repos/symfony/deprecation-contracts/zipball/50f59d1f3ca46d41ac911f97a78626b6756af35b", + "reference": "50f59d1f3ca46d41ac911f97a78626b6756af35b", "shasum": "" }, "require": { @@ -733,7 +735,7 @@ "name": "symfony/contracts" }, "branch-alias": { - "dev-main": "3.6-dev" + "dev-main": "3.7-dev" } }, "autoload": { @@ -758,7 +760,7 @@ "description": "A generic function and convention to trigger deprecation notices", "homepage": "https://symfony.com", "support": { - "source": "https://github.com/symfony/deprecation-contracts/tree/v3.6.0" + "source": "https://github.com/symfony/deprecation-contracts/tree/v3.7.0" }, "funding": [ { @@ -769,25 +771,29 @@ "url": "https://github.com/fabpot", "type": "github" }, + { + "url": "https://github.com/nicolas-grekas", + "type": "github" + }, { "url": "https://tidelift.com/funding/github/packagist/symfony/symfony", "type": "tidelift" } ], - "time": "2024-09-25T14:21:43+00:00" + "time": "2026-04-13T15:52:40+00:00" }, { "name": "symfony/service-contracts", - "version": "v3.6.0", + "version": "v3.7.0", "source": { "type": "git", "url": "https://github.com/symfony/service-contracts.git", - "reference": "f021b05a130d35510bd6b25fe9053c2a8a15d5d4" + "reference": "d25d82433a80eba6aa0e6c24b61d7370d99e444a" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/symfony/service-contracts/zipball/f021b05a130d35510bd6b25fe9053c2a8a15d5d4", - "reference": "f021b05a130d35510bd6b25fe9053c2a8a15d5d4", + "url": "https://api.github.com/repos/symfony/service-contracts/zipball/d25d82433a80eba6aa0e6c24b61d7370d99e444a", + "reference": "d25d82433a80eba6aa0e6c24b61d7370d99e444a", "shasum": "" }, "require": { @@ -805,7 +811,7 @@ "name": "symfony/contracts" }, "branch-alias": { - "dev-main": "3.6-dev" + "dev-main": "3.7-dev" } }, "autoload": { @@ -841,7 +847,7 @@ "standards" ], "support": { - "source": "https://github.com/symfony/service-contracts/tree/v3.6.0" + "source": "https://github.com/symfony/service-contracts/tree/v3.7.0" }, "funding": [ { @@ -852,35 +858,38 @@ "url": "https://github.com/fabpot", "type": "github" }, + { + "url": "https://github.com/nicolas-grekas", + "type": "github" + }, { "url": "https://tidelift.com/funding/github/packagist/symfony/symfony", "type": "tidelift" } ], - "time": "2025-04-25T09:37:31+00:00" + "time": "2026-03-28T09:44:51+00:00" }, { "name": "symfony/var-exporter", - "version": "v7.3.4", + "version": "v8.0.9", "source": { "type": "git", "url": "https://github.com/symfony/var-exporter.git", - "reference": "0f020b544a30a7fe8ba972e53ee48a74c0bc87f4" + "reference": "24cf67be4dd0926e4413635418682f4fff831412" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/symfony/var-exporter/zipball/0f020b544a30a7fe8ba972e53ee48a74c0bc87f4", - "reference": "0f020b544a30a7fe8ba972e53ee48a74c0bc87f4", + "url": "https://api.github.com/repos/symfony/var-exporter/zipball/24cf67be4dd0926e4413635418682f4fff831412", + "reference": "24cf67be4dd0926e4413635418682f4fff831412", "shasum": "" }, "require": { - "php": ">=8.2", - "symfony/deprecation-contracts": "^2.5|^3" + "php": ">=8.4" }, "require-dev": { - "symfony/property-access": "^6.4|^7.0", - "symfony/serializer": "^6.4|^7.0", - "symfony/var-dumper": "^6.4|^7.0" + "symfony/property-access": "^7.4|^8.0", + "symfony/serializer": "^7.4|^8.0", + "symfony/var-dumper": "^7.4|^8.0" }, "type": "library", "autoload": { @@ -918,7 +927,7 @@ "serialize" ], "support": { - "source": "https://github.com/symfony/var-exporter/tree/v7.3.4" + "source": "https://github.com/symfony/var-exporter/tree/v8.0.9" }, "funding": [ { @@ -938,7 +947,7 @@ "type": "tidelift" } ], - "time": "2025-09-11T10:12:26+00:00" + "time": "2026-04-18T13:51:42+00:00" }, { "name": "teapot/status-code", @@ -989,16 +998,16 @@ }, { "name": "webclient/ext-redirect", - "version": "v2.0.0", + "version": "v2.0.1", "source": { "type": "git", "url": "https://github.com/phpwebclient/ext-redirect.git", - "reference": "7c71ff08d206775c7f6df31b2f6ba1aec617bbcf" + "reference": "5d88fcf42a86c62248f1100cf64deb55f439a100" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/phpwebclient/ext-redirect/zipball/7c71ff08d206775c7f6df31b2f6ba1aec617bbcf", - "reference": "7c71ff08d206775c7f6df31b2f6ba1aec617bbcf", + "url": "https://api.github.com/repos/phpwebclient/ext-redirect/zipball/5d88fcf42a86c62248f1100cf64deb55f439a100", + "reference": "5d88fcf42a86c62248f1100cf64deb55f439a100", "shasum": "" }, "require": { @@ -1044,7 +1053,7 @@ ], "support": { "issues": "https://github.com/phpwebclient/ext-redirect/issues", - "source": "https://github.com/phpwebclient/ext-redirect/tree/v2.0.0" + "source": "https://github.com/phpwebclient/ext-redirect/tree/v2.0.1" }, "funding": [ { @@ -1052,7 +1061,7 @@ "type": "custom" } ], - "time": "2022-07-21T16:34:23+00:00" + "time": "2025-04-02T12:38:09+00:00" } ], "packages-dev": [ @@ -1118,30 +1127,29 @@ }, { "name": "doctrine/instantiator", - "version": "2.0.0", + "version": "2.1.0", "source": { "type": "git", "url": "https://github.com/doctrine/instantiator.git", - "reference": "c6222283fa3f4ac679f8b9ced9a4e23f163e80d0" + "reference": "23da848e1a2308728fe5fdddabf4be17ff9720c7" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/doctrine/instantiator/zipball/c6222283fa3f4ac679f8b9ced9a4e23f163e80d0", - "reference": "c6222283fa3f4ac679f8b9ced9a4e23f163e80d0", + "url": "https://api.github.com/repos/doctrine/instantiator/zipball/23da848e1a2308728fe5fdddabf4be17ff9720c7", + "reference": "23da848e1a2308728fe5fdddabf4be17ff9720c7", "shasum": "" }, "require": { - "php": "^8.1" + "php": "^8.4" }, "require-dev": { - "doctrine/coding-standard": "^11", + "doctrine/coding-standard": "^14", "ext-pdo": "*", "ext-phar": "*", "phpbench/phpbench": "^1.2", - "phpstan/phpstan": "^1.9.4", - "phpstan/phpstan-phpunit": "^1.3", - "phpunit/phpunit": "^9.5.27", - "vimeo/psalm": "^5.4" + "phpstan/phpstan": "^2.1", + "phpstan/phpstan-phpunit": "^2.0", + "phpunit/phpunit": "^10.5.58" }, "type": "library", "autoload": { @@ -1168,7 +1176,7 @@ ], "support": { "issues": "https://github.com/doctrine/instantiator/issues", - "source": "https://github.com/doctrine/instantiator/tree/2.0.0" + "source": "https://github.com/doctrine/instantiator/tree/2.1.0" }, "funding": [ { @@ -1184,20 +1192,20 @@ "type": "tidelift" } ], - "time": "2022-12-30T00:23:10+00:00" + "time": "2026-01-05T06:47:08+00:00" }, { "name": "firebase/php-jwt", - "version": "v7.0.2", + "version": "v7.0.5", "source": { "type": "git", - "url": "https://github.com/firebase/php-jwt.git", - "reference": "5645b43af647b6947daac1d0f659dd1fbe8d3b65" + "url": "https://github.com/googleapis/php-jwt.git", + "reference": "47ad26bab5e7c70ae8a6f08ed25ff83631121380" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/firebase/php-jwt/zipball/5645b43af647b6947daac1d0f659dd1fbe8d3b65", - "reference": "5645b43af647b6947daac1d0f659dd1fbe8d3b65", + "url": "https://api.github.com/repos/googleapis/php-jwt/zipball/47ad26bab5e7c70ae8a6f08ed25ff83631121380", + "reference": "47ad26bab5e7c70ae8a6f08ed25ff83631121380", "shasum": "" }, "require": { @@ -1205,6 +1213,7 @@ }, "require-dev": { "guzzlehttp/guzzle": "^7.4", + "phpfastcache/phpfastcache": "^9.2", "phpspec/prophecy-phpunit": "^2.0", "phpunit/phpunit": "^9.5", "psr/cache": "^2.0||^3.0", @@ -1244,23 +1253,23 @@ "php" ], "support": { - "issues": "https://github.com/firebase/php-jwt/issues", - "source": "https://github.com/firebase/php-jwt/tree/v7.0.2" + "issues": "https://github.com/googleapis/php-jwt/issues", + "source": "https://github.com/googleapis/php-jwt/tree/v7.0.5" }, - "time": "2025-12-16T22:17:28+00:00" + "time": "2026-04-01T20:38:03+00:00" }, { "name": "google/auth", - "version": "v1.50.0", + "version": "v1.50.1", "source": { "type": "git", "url": "https://github.com/googleapis/google-auth-library-php.git", - "reference": "e1c26a718198e16d8a3c69b1cae136b73f959b0f" + "reference": "870c17ee3a1d73338d39a9ffa77a700ba77f5a83" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/googleapis/google-auth-library-php/zipball/e1c26a718198e16d8a3c69b1cae136b73f959b0f", - "reference": "e1c26a718198e16d8a3c69b1cae136b73f959b0f", + "url": "https://api.github.com/repos/googleapis/google-auth-library-php/zipball/870c17ee3a1d73338d39a9ffa77a700ba77f5a83", + "reference": "870c17ee3a1d73338d39a9ffa77a700ba77f5a83", "shasum": "" }, "require": { @@ -1270,7 +1279,7 @@ "php": "^8.1", "psr/cache": "^2.0||^3.0", "psr/http-message": "^1.1||^2.0", - "psr/log": "^3.0" + "psr/log": "^2.0||^3.0" }, "require-dev": { "guzzlehttp/promises": "^2.0", @@ -1307,22 +1316,22 @@ "support": { "docs": "https://cloud.google.com/php/docs/reference/auth/latest", "issues": "https://github.com/googleapis/google-auth-library-php/issues", - "source": "https://github.com/googleapis/google-auth-library-php/tree/v1.50.0" + "source": "https://github.com/googleapis/google-auth-library-php/tree/v1.50.1" }, - "time": "2026-01-08T21:33:57+00:00" + "time": "2026-03-18T20:03:29+00:00" }, { "name": "google/cloud-core", - "version": "v1.71.1", + "version": "v1.72.1", "source": { "type": "git", "url": "https://github.com/googleapis/google-cloud-php-core.git", - "reference": "b170c5d2095f05def125a1f7452f7fcca0a9ffaf" + "reference": "aa7869016cb9e87e95071bb92579fd22146ababb" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/googleapis/google-cloud-php-core/zipball/b170c5d2095f05def125a1f7452f7fcca0a9ffaf", - "reference": "b170c5d2095f05def125a1f7452f7fcca0a9ffaf", + "url": "https://api.github.com/repos/googleapis/google-cloud-php-core/zipball/aa7869016cb9e87e95071bb92579fd22146ababb", + "reference": "aa7869016cb9e87e95071bb92579fd22146ababb", "shasum": "" }, "require": { @@ -1338,7 +1347,7 @@ }, "require-dev": { "erusev/parsedown": "^1.6", - "google/cloud-common-protos": "~0.5", + "google/cloud-common-protos": "~0.5||^1.0", "nikic/php-parser": "^5.6", "opis/closure": "^3.7|^4.0", "phpdocumentor/reflection": "^6.0", @@ -1374,34 +1383,35 @@ ], "description": "Google Cloud PHP shared dependency, providing functionality useful to all components.", "support": { - "source": "https://github.com/googleapis/google-cloud-php-core/tree/v1.71.1" + "source": "https://github.com/googleapis/google-cloud-php-core/tree/v1.72.1" }, - "time": "2026-01-23T22:57:13+00:00" + "time": "2026-05-12T19:06:48+00:00" }, { "name": "google/cloud-storage", - "version": "v1.49.2", + "version": "v1.51.0", "source": { "type": "git", "url": "https://github.com/googleapis/google-cloud-php-storage.git", - "reference": "1cab44377fc65c7feba1f706970f3abf5ccba392" + "reference": "9ba3d5e8cbd53bf67fab644b5be310e719533def" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/googleapis/google-cloud-php-storage/zipball/1cab44377fc65c7feba1f706970f3abf5ccba392", - "reference": "1cab44377fc65c7feba1f706970f3abf5ccba392", + "url": "https://api.github.com/repos/googleapis/google-cloud-php-storage/zipball/9ba3d5e8cbd53bf67fab644b5be310e719533def", + "reference": "9ba3d5e8cbd53bf67fab644b5be310e719533def", "shasum": "" }, "require": { - "google/cloud-core": "^1.57", + "google/cloud-core": "^1.72.0", "php": "^8.1", "ramsey/uuid": "^4.2.3" }, "require-dev": { "erusev/parsedown": "^1.6", "google/cloud-pubsub": "^2.0", - "phpdocumentor/reflection": "^5.3.3||^6.0", - "phpdocumentor/reflection-docblock": "^5.3.3||^6.0", + "nikic/php-parser": "^5", + "phpdocumentor/reflection": "^6.0", + "phpdocumentor/reflection-docblock": "^5.3.3", "phpseclib/phpseclib": "^2.0||^3.0", "phpspec/prophecy-phpunit": "^2.0", "phpunit/phpunit": "^9.0", @@ -1431,26 +1441,26 @@ ], "description": "Cloud Storage Client for PHP", "support": { - "source": "https://github.com/googleapis/google-cloud-php-storage/tree/v1.49.2" + "source": "https://github.com/googleapis/google-cloud-php-storage/tree/v1.51.0" }, - "time": "2026-01-23T22:57:13+00:00" + "time": "2026-04-09T21:01:46+00:00" }, { "name": "google/common-protos", - "version": "4.12.4", + "version": "4.14.0", "source": { "type": "git", "url": "https://github.com/googleapis/common-protos-php.git", - "reference": "0127156899af0df2681bd42024c60bd5360d64e3" + "reference": "f8e72f7b581702e7c3ee0776144f4974da172428" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/googleapis/common-protos-php/zipball/0127156899af0df2681bd42024c60bd5360d64e3", - "reference": "0127156899af0df2681bd42024c60bd5360d64e3", + "url": "https://api.github.com/repos/googleapis/common-protos-php/zipball/f8e72f7b581702e7c3ee0776144f4974da172428", + "reference": "f8e72f7b581702e7c3ee0776144f4974da172428", "shasum": "" }, "require": { - "google/protobuf": "^4.31", + "google/protobuf": "^4.31||^5.0", "php": "^8.1" }, "require-dev": { @@ -1490,22 +1500,22 @@ "google" ], "support": { - "source": "https://github.com/googleapis/common-protos-php/tree/v4.12.4" + "source": "https://github.com/googleapis/common-protos-php/tree/v4.14.0" }, - "time": "2025-09-20T01:29:44+00:00" + "time": "2026-04-09T21:01:46+00:00" }, { "name": "google/gax", - "version": "v1.42.0", + "version": "v1.42.4", "source": { "type": "git", "url": "https://github.com/googleapis/gax-php.git", - "reference": "7ad13e5b9ca201a5f60e7b3342842d1217bc23a6" + "reference": "9b1f5fb68960a9020e34fdb88583bcd43779e4fd" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/googleapis/gax-php/zipball/7ad13e5b9ca201a5f60e7b3342842d1217bc23a6", - "reference": "7ad13e5b9ca201a5f60e7b3342842d1217bc23a6", + "url": "https://api.github.com/repos/googleapis/gax-php/zipball/9b1f5fb68960a9020e34fdb88583bcd43779e4fd", + "reference": "9b1f5fb68960a9020e34fdb88583bcd43779e4fd", "shasum": "" }, "require": { @@ -1513,7 +1523,7 @@ "google/common-protos": "^4.4", "google/grpc-gcp": "^0.4", "google/longrunning": "~0.4", - "google/protobuf": "^4.31", + "google/protobuf": "^4.31||^5.34", "grpc/grpc": "^1.13", "guzzlehttp/promises": "^2.0", "guzzlehttp/psr7": "^2.0", @@ -1524,10 +1534,10 @@ "ext-protobuf": "<4.31.0" }, "require-dev": { + "google/cloud-tools": "^0.16.1", "phpspec/prophecy-phpunit": "^2.1", "phpstan/phpstan": "^2.0", - "phpunit/phpunit": "^9.6", - "squizlabs/php_codesniffer": "4.*" + "phpunit/phpunit": "^9.6" }, "type": "library", "autoload": { @@ -1547,27 +1557,27 @@ ], "support": { "issues": "https://github.com/googleapis/gax-php/issues", - "source": "https://github.com/googleapis/gax-php/tree/v1.42.0" + "source": "https://github.com/googleapis/gax-php/tree/v1.42.4" }, - "time": "2026-01-22T20:31:50+00:00" + "time": "2026-05-11T17:49:55+00:00" }, { "name": "google/grpc-gcp", - "version": "v0.4.1", + "version": "0.4.2", "source": { "type": "git", "url": "https://github.com/GoogleCloudPlatform/grpc-gcp-php.git", - "reference": "e585b7721bbe806ef45b5c52ae43dfc2bff89968" + "reference": "1049c0c15b6a1789fdeb52af688a94d540932469" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/GoogleCloudPlatform/grpc-gcp-php/zipball/e585b7721bbe806ef45b5c52ae43dfc2bff89968", - "reference": "e585b7721bbe806ef45b5c52ae43dfc2bff89968", + "url": "https://api.github.com/repos/GoogleCloudPlatform/grpc-gcp-php/zipball/1049c0c15b6a1789fdeb52af688a94d540932469", + "reference": "1049c0c15b6a1789fdeb52af688a94d540932469", "shasum": "" }, "require": { "google/auth": "^1.3", - "google/protobuf": "^v3.25.3||^4.26.1", + "google/protobuf": "^v3.25.3||^4.26.1||^5.0", "grpc/grpc": "^v1.13.0", "php": "^8.0", "psr/cache": "^1.0.1||^2.0.0||^3.0.0" @@ -1592,22 +1602,22 @@ "description": "gRPC GCP library for channel management", "support": { "issues": "https://github.com/GoogleCloudPlatform/grpc-gcp-php/issues", - "source": "https://github.com/GoogleCloudPlatform/grpc-gcp-php/tree/v0.4.1" + "source": "https://github.com/GoogleCloudPlatform/grpc-gcp-php/tree/v0.4.2" }, - "time": "2025-02-19T21:53:22+00:00" + "time": "2026-03-12T22:56:09+00:00" }, { "name": "google/longrunning", - "version": "0.6.0", + "version": "0.7.1", "source": { "type": "git", "url": "https://github.com/googleapis/php-longrunning.git", - "reference": "226d3b5166eaa13754cc5e452b37872478e23375" + "reference": "cac9bedf199239ae2b1acd4a8e4ea2276bd9f55a" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/googleapis/php-longrunning/zipball/226d3b5166eaa13754cc5e452b37872478e23375", - "reference": "226d3b5166eaa13754cc5e452b37872478e23375", + "url": "https://api.github.com/repos/googleapis/php-longrunning/zipball/cac9bedf199239ae2b1acd4a8e4ea2276bd9f55a", + "reference": "cac9bedf199239ae2b1acd4a8e4ea2276bd9f55a", "shasum": "" }, "require-dev": { @@ -1636,29 +1646,29 @@ ], "description": "Google LongRunning Client for PHP", "support": { - "source": "https://github.com/googleapis/php-longrunning/tree/v0.6.0" + "source": "https://github.com/googleapis/php-longrunning/tree/v0.7.1" }, - "time": "2025-10-07T18:41:09+00:00" + "time": "2026-03-31T19:52:22+00:00" }, { "name": "google/protobuf", - "version": "v4.33.5", + "version": "v5.35.0", "source": { "type": "git", "url": "https://github.com/protocolbuffers/protobuf-php.git", - "reference": "ebe8010a61b2ae0cff0d246fe1c4d44e9f7dfa6d" + "reference": "d96ed77c7edaff3cd576a74173aa0b0655c87b1a" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/protocolbuffers/protobuf-php/zipball/ebe8010a61b2ae0cff0d246fe1c4d44e9f7dfa6d", - "reference": "ebe8010a61b2ae0cff0d246fe1c4d44e9f7dfa6d", + "url": "https://api.github.com/repos/protocolbuffers/protobuf-php/zipball/d96ed77c7edaff3cd576a74173aa0b0655c87b1a", + "reference": "d96ed77c7edaff3cd576a74173aa0b0655c87b1a", "shasum": "" }, "require": { - "php": ">=8.1.0" + "php": ">=8.2.0" }, "require-dev": { - "phpunit/phpunit": ">=5.0.0 <8.5.27" + "phpunit/phpunit": ">=11.5.0 <12.0.0" }, "suggest": { "ext-bcmath": "Need to support JSON deserialization" @@ -1680,26 +1690,26 @@ "proto" ], "support": { - "source": "https://github.com/protocolbuffers/protobuf-php/tree/v4.33.5" + "source": "https://github.com/protocolbuffers/protobuf-php/tree/v5.35.0" }, - "time": "2026-01-29T20:49:00+00:00" + "time": "2026-05-19T22:13:40+00:00" }, { "name": "grpc/grpc", - "version": "1.74.0", + "version": "1.80.0", "source": { "type": "git", "url": "https://github.com/grpc/grpc-php.git", - "reference": "32bf4dba256d60d395582fb6e4e8d3936bcdb713" + "reference": "a0dc463d5d5064cdd7ff344f13f61d7e233f9b5a" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/grpc/grpc-php/zipball/32bf4dba256d60d395582fb6e4e8d3936bcdb713", - "reference": "32bf4dba256d60d395582fb6e4e8d3936bcdb713", + "url": "https://api.github.com/repos/grpc/grpc-php/zipball/a0dc463d5d5064cdd7ff344f13f61d7e233f9b5a", + "reference": "a0dc463d5d5064cdd7ff344f13f61d7e233f9b5a", "shasum": "" }, "require": { - "php": ">=7.0.0" + "php": ">=7.1.0" }, "require-dev": { "google/auth": "^v1.3.0" @@ -1724,22 +1734,22 @@ "rpc" ], "support": { - "source": "https://github.com/grpc/grpc-php/tree/v1.74.0" + "source": "https://github.com/grpc/grpc-php/tree/v1.80.0" }, - "time": "2025-07-24T20:02:16+00:00" + "time": "2026-03-30T09:22:39+00:00" }, { "name": "guzzlehttp/guzzle", - "version": "7.10.0", + "version": "7.10.4", "source": { "type": "git", "url": "https://github.com/guzzle/guzzle.git", - "reference": "b51ac707cfa420b7bfd4e4d5e510ba8008e822b4" + "reference": "aec528da477062d3af11f51e6b33402be233b21f" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/guzzle/guzzle/zipball/b51ac707cfa420b7bfd4e4d5e510ba8008e822b4", - "reference": "b51ac707cfa420b7bfd4e4d5e510ba8008e822b4", + "url": "https://api.github.com/repos/guzzle/guzzle/zipball/aec528da477062d3af11f51e6b33402be233b21f", + "reference": "aec528da477062d3af11f51e6b33402be233b21f", "shasum": "" }, "require": { @@ -1757,8 +1767,9 @@ "bamarni/composer-bin-plugin": "^1.8.2", "ext-curl": "*", "guzzle/client-integration-tests": "3.0.2", + "guzzlehttp/test-server": "^0.3.2", "php-http/message-factory": "^1.1", - "phpunit/phpunit": "^8.5.39 || ^9.6.20", + "phpunit/phpunit": "^8.5.52 || ^9.6.34", "psr/log": "^1.1 || ^2.0 || ^3.0" }, "suggest": { @@ -1836,7 +1847,7 @@ ], "support": { "issues": "https://github.com/guzzle/guzzle/issues", - "source": "https://github.com/guzzle/guzzle/tree/7.10.0" + "source": "https://github.com/guzzle/guzzle/tree/7.10.4" }, "funding": [ { @@ -1852,20 +1863,20 @@ "type": "tidelift" } ], - "time": "2025-08-23T22:36:01+00:00" + "time": "2026-05-22T19:00:53+00:00" }, { "name": "guzzlehttp/promises", - "version": "2.3.0", + "version": "2.4.1", "source": { "type": "git", "url": "https://github.com/guzzle/promises.git", - "reference": "481557b130ef3790cf82b713667b43030dc9c957" + "reference": "09e8a212562fb1fb6a512c4156ed71525969d6c2" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/guzzle/promises/zipball/481557b130ef3790cf82b713667b43030dc9c957", - "reference": "481557b130ef3790cf82b713667b43030dc9c957", + "url": "https://api.github.com/repos/guzzle/promises/zipball/09e8a212562fb1fb6a512c4156ed71525969d6c2", + "reference": "09e8a212562fb1fb6a512c4156ed71525969d6c2", "shasum": "" }, "require": { @@ -1873,7 +1884,7 @@ }, "require-dev": { "bamarni/composer-bin-plugin": "^1.8.2", - "phpunit/phpunit": "^8.5.44 || ^9.6.25" + "phpunit/phpunit": "^8.5.52 || ^9.6.34" }, "type": "library", "extra": { @@ -1919,7 +1930,7 @@ ], "support": { "issues": "https://github.com/guzzle/promises/issues", - "source": "https://github.com/guzzle/promises/tree/2.3.0" + "source": "https://github.com/guzzle/promises/tree/2.4.1" }, "funding": [ { @@ -1935,20 +1946,20 @@ "type": "tidelift" } ], - "time": "2025-08-22T14:34:08+00:00" + "time": "2026-05-20T22:57:30+00:00" }, { "name": "guzzlehttp/psr7", - "version": "2.8.0", + "version": "2.10.2", "source": { "type": "git", "url": "https://github.com/guzzle/psr7.git", - "reference": "21dc724a0583619cd1652f673303492272778051" + "reference": "a1bbdc172f32a25fe999965b65b6e71fd87da9ed" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/guzzle/psr7/zipball/21dc724a0583619cd1652f673303492272778051", - "reference": "21dc724a0583619cd1652f673303492272778051", + "url": "https://api.github.com/repos/guzzle/psr7/zipball/a1bbdc172f32a25fe999965b65b6e71fd87da9ed", + "reference": "a1bbdc172f32a25fe999965b65b6e71fd87da9ed", "shasum": "" }, "require": { @@ -1963,8 +1974,9 @@ }, "require-dev": { "bamarni/composer-bin-plugin": "^1.8.2", - "http-interop/http-factory-tests": "0.9.0", - "phpunit/phpunit": "^8.5.44 || ^9.6.25" + "http-interop/http-factory-tests": "1.1.0", + "jshttp/mime-db": "1.54.0.1", + "phpunit/phpunit": "^8.5.52 || ^9.6.34" }, "suggest": { "laminas/laminas-httphandlerrunner": "Emit PSR-7 responses" @@ -2035,7 +2047,7 @@ ], "support": { "issues": "https://github.com/guzzle/psr7/issues", - "source": "https://github.com/guzzle/psr7/tree/2.8.0" + "source": "https://github.com/guzzle/psr7/tree/2.10.2" }, "funding": [ { @@ -2051,7 +2063,7 @@ "type": "tidelift" } ], - "time": "2025-08-23T21:21:41+00:00" + "time": "2026-05-25T22:58:15+00:00" }, { "name": "monolog/monolog", @@ -2850,16 +2862,16 @@ "type": "metapackage", "extra": { "merge-plugin": { - "ignore-duplicates": false, "include": [ "composer.local.json" ], + "recurse": true, + "replace": true, "merge-dev": true, "merge-extra": false, - "merge-extra-deep": false, "merge-scripts": false, - "recurse": true, - "replace": true + "merge-extra-deep": false, + "ignore-duplicates": false } }, "autoload": { @@ -2931,16 +2943,16 @@ "type": "library", "extra": { "merge-plugin": { - "ignore-duplicates": false, "include": [ "composer.local.json" ], + "recurse": true, + "replace": true, "merge-dev": true, "merge-extra": false, - "merge-extra-deep": false, "merge-scripts": false, - "recurse": true, - "replace": true + "merge-extra-deep": false, + "ignore-duplicates": false } }, "autoload": { @@ -3012,16 +3024,16 @@ "type": "library", "extra": { "merge-plugin": { - "ignore-duplicates": false, "include": [ "composer.local.json" ], + "recurse": true, + "replace": true, "merge-dev": true, "merge-extra": false, - "merge-extra-deep": false, "merge-scripts": false, - "recurse": true, - "replace": true + "merge-extra-deep": false, + "ignore-duplicates": false } }, "autoload": { @@ -3090,16 +3102,16 @@ "type": "library", "extra": { "merge-plugin": { - "ignore-duplicates": false, "include": [ "composer.local.json" ], + "recurse": true, + "replace": true, "merge-dev": true, "merge-extra": false, - "merge-extra-deep": false, "merge-scripts": false, - "recurse": true, - "replace": true + "merge-extra-deep": false, + "ignore-duplicates": false } }, "autoload": { @@ -3388,16 +3400,16 @@ }, { "name": "rize/uri-template", - "version": "0.4.1", + "version": "0.4.2", "source": { "type": "git", "url": "https://github.com/rize/UriTemplate.git", - "reference": "abb53c8b73a5b6c24e11f49036ab842f560cad33" + "reference": "7ad22944daede547b4542e1c977ec4a81aa20832" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/rize/UriTemplate/zipball/abb53c8b73a5b6c24e11f49036ab842f560cad33", - "reference": "abb53c8b73a5b6c24e11f49036ab842f560cad33", + "url": "https://api.github.com/repos/rize/UriTemplate/zipball/7ad22944daede547b4542e1c977ec4a81aa20832", + "reference": "7ad22944daede547b4542e1c977ec4a81aa20832", "shasum": "" }, "require": { @@ -3432,7 +3444,7 @@ ], "support": { "issues": "https://github.com/rize/UriTemplate/issues", - "source": "https://github.com/rize/UriTemplate/tree/0.4.1" + "source": "https://github.com/rize/UriTemplate/tree/0.4.2" }, "funding": [ { @@ -3448,7 +3460,7 @@ "type": "open_collective" } ], - "time": "2025-12-02T15:19:04+00:00" + "time": "2026-05-07T15:30:40+00:00" }, { "name": "sebastian/cli-parser", @@ -3560,6 +3572,7 @@ "type": "github" } ], + "abandoned": true, "time": "2020-10-26T13:08:54+00:00" }, { @@ -3615,6 +3628,7 @@ "type": "github" } ], + "abandoned": true, "time": "2020-09-28T05:30:19+00:00" }, { @@ -4463,16 +4477,16 @@ }, { "name": "squizlabs/php_codesniffer", - "version": "3.10.2", + "version": "3.13.5", "source": { "type": "git", "url": "https://github.com/PHPCSStandards/PHP_CodeSniffer.git", - "reference": "86e5f5dd9a840c46810ebe5ff1885581c42a3017" + "reference": "0ca86845ce43291e8f5692c7356fccf3bcf02bf4" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/PHPCSStandards/PHP_CodeSniffer/zipball/86e5f5dd9a840c46810ebe5ff1885581c42a3017", - "reference": "86e5f5dd9a840c46810ebe5ff1885581c42a3017", + "url": "https://api.github.com/repos/PHPCSStandards/PHP_CodeSniffer/zipball/0ca86845ce43291e8f5692c7356fccf3bcf02bf4", + "reference": "0ca86845ce43291e8f5692c7356fccf3bcf02bf4", "shasum": "" }, "require": { @@ -4489,11 +4503,6 @@ "bin/phpcs" ], "type": "library", - "extra": { - "branch-alias": { - "dev-master": "3.x-dev" - } - }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" @@ -4537,9 +4546,13 @@ { "url": "https://opencollective.com/php_codesniffer", "type": "open_collective" + }, + { + "url": "https://thanks.dev/u/gh/phpcsstandards", + "type": "thanks_dev" } ], - "time": "2024-07-21T23:26:44+00:00" + "time": "2025-11-04T16:30:35+00:00" }, { "name": "theseer/tokenizer", @@ -4606,5 +4619,5 @@ "ext-pcntl": "*", "ext-sockets": "*" }, - "plugin-api-version": "2.6.0" + "plugin-api-version": "2.9.0" } From f91d5d72a5c268dc0c618c1151dec3549fea4766 Mon Sep 17 00:00:00 2001 From: Aaron Silverman Date: Tue, 26 May 2026 09:52:34 -0400 Subject: [PATCH 2/2] build: pin composer platform PHP to 8.1 floor MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The previous lockfile resolved against the developer's local PHP (8.5) and pulled in transitive deps that require PHP 8.4+ (symfony/var-exporter v8, doctrine/instantiator 2.1), which broke CI on its PHP 8.3 image. Add `config.platform.php: 8.1.0` so Composer's solver targets the project's declared minimum (`"php": "^8.1"`) regardless of who runs `composer update`. Re-resolves to: - google/protobuf v4.33.6 (still clears GHSA-p2gh-cfq4-4wjc) - symfony/cache v6.4.40 (still clears CVE-2026-45073 — 6.4.40 is the patched 6.4 line per the Symfony advisory) - symfony/var-exporter v6.4.37 (PHP 8.1-compatible) - doctrine/instantiator 2.0.0 (PHP 8.1-compatible) `composer audit` -> still 0 advisories. `make test` -> 98/98 pass. Co-Authored-By: Claude Opus 4.7 (1M context) --- composer.json | 3 ++ composer.lock | 127 +++++++++++++++++++++++++------------------------- 2 files changed, 67 insertions(+), 63 deletions(-) diff --git a/composer.json b/composer.json index 27a6851..a8f6689 100644 --- a/composer.json +++ b/composer.json @@ -44,6 +44,9 @@ "config": { "allow-plugins": { "php-http/discovery": true + }, + "platform": { + "php": "8.1.0" } }, "scripts": { diff --git a/composer.lock b/composer.lock index 5e78fd3..7457b38 100644 --- a/composer.lock +++ b/composer.lock @@ -4,7 +4,7 @@ "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies", "This file is @generated automatically" ], - "content-hash": "e792ecf4e40a93549007d04d80bea305", + "content-hash": "b3ee69a71ef7626dbb25f67a4c582f91", "packages": [ { "name": "composer/semver", @@ -529,34 +529,31 @@ }, { "name": "symfony/cache", - "version": "v7.4.12", + "version": "v6.4.40", "source": { "type": "git", "url": "https://github.com/symfony/cache.git", - "reference": "902d621e0b6ef0ebeaa133770b5c339a19328589" + "reference": "8f9b022e63fa02bd984c06dc886039936ea17714" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/symfony/cache/zipball/902d621e0b6ef0ebeaa133770b5c339a19328589", - "reference": "902d621e0b6ef0ebeaa133770b5c339a19328589", + "url": "https://api.github.com/repos/symfony/cache/zipball/8f9b022e63fa02bd984c06dc886039936ea17714", + "reference": "8f9b022e63fa02bd984c06dc886039936ea17714", "shasum": "" }, "require": { - "php": ">=8.2", + "php": ">=8.1", "psr/cache": "^2.0|^3.0", "psr/log": "^1.1|^2|^3", - "symfony/cache-contracts": "^3.6", - "symfony/deprecation-contracts": "^2.5|^3", + "symfony/cache-contracts": "^2.5|^3", "symfony/service-contracts": "^2.5|^3", - "symfony/var-exporter": "^6.4|^7.0|^8.0" + "symfony/var-exporter": "^6.3.6|^7.0" }, "conflict": { - "doctrine/dbal": "<3.6", - "ext-redis": "<6.1", - "ext-relay": "<0.12.1", - "symfony/dependency-injection": "<6.4", - "symfony/http-kernel": "<6.4", - "symfony/var-dumper": "<6.4" + "doctrine/dbal": "<2.13.1", + "symfony/dependency-injection": "<5.4", + "symfony/http-kernel": "<5.4", + "symfony/var-dumper": "<5.4" }, "provide": { "psr/cache-implementation": "2.0|3.0", @@ -565,16 +562,15 @@ }, "require-dev": { "cache/integration-tests": "dev-master", - "doctrine/dbal": "^3.6|^4", + "doctrine/dbal": "^2.13.1|^3|^4", "predis/predis": "^1.1|^2.0", "psr/simple-cache": "^1.0|^2.0|^3.0", - "symfony/clock": "^6.4|^7.0|^8.0", - "symfony/config": "^6.4|^7.0|^8.0", - "symfony/dependency-injection": "^6.4|^7.0|^8.0", - "symfony/filesystem": "^6.4|^7.0|^8.0", - "symfony/http-kernel": "^6.4|^7.0|^8.0", - "symfony/messenger": "^6.4|^7.0|^8.0", - "symfony/var-dumper": "^6.4|^7.0|^8.0" + "symfony/config": "^5.4|^6.0|^7.0", + "symfony/dependency-injection": "^5.4|^6.0|^7.0", + "symfony/filesystem": "^5.4|^6.0|^7.0", + "symfony/http-kernel": "^5.4|^6.0|^7.0", + "symfony/messenger": "^5.4|^6.0|^7.0", + "symfony/var-dumper": "^5.4|^6.0|^7.0" }, "type": "library", "autoload": { @@ -609,7 +605,7 @@ "psr6" ], "support": { - "source": "https://github.com/symfony/cache/tree/v7.4.12" + "source": "https://github.com/symfony/cache/tree/v6.4.40" }, "funding": [ { @@ -629,7 +625,7 @@ "type": "tidelift" } ], - "time": "2026-05-20T07:20:23+00:00" + "time": "2026-05-19T20:33:22+00:00" }, { "name": "symfony/cache-contracts", @@ -871,25 +867,26 @@ }, { "name": "symfony/var-exporter", - "version": "v8.0.9", + "version": "v6.4.37", "source": { "type": "git", "url": "https://github.com/symfony/var-exporter.git", - "reference": "24cf67be4dd0926e4413635418682f4fff831412" + "reference": "34f6957deffacabd1b1c579a312daa481e3e99ca" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/symfony/var-exporter/zipball/24cf67be4dd0926e4413635418682f4fff831412", - "reference": "24cf67be4dd0926e4413635418682f4fff831412", + "url": "https://api.github.com/repos/symfony/var-exporter/zipball/34f6957deffacabd1b1c579a312daa481e3e99ca", + "reference": "34f6957deffacabd1b1c579a312daa481e3e99ca", "shasum": "" }, "require": { - "php": ">=8.4" + "php": ">=8.1", + "symfony/deprecation-contracts": "^2.5|^3" }, "require-dev": { - "symfony/property-access": "^7.4|^8.0", - "symfony/serializer": "^7.4|^8.0", - "symfony/var-dumper": "^7.4|^8.0" + "symfony/property-access": "^6.4|^7.0", + "symfony/serializer": "^6.4|^7.0", + "symfony/var-dumper": "^5.4|^6.0|^7.0" }, "type": "library", "autoload": { @@ -927,7 +924,7 @@ "serialize" ], "support": { - "source": "https://github.com/symfony/var-exporter/tree/v8.0.9" + "source": "https://github.com/symfony/var-exporter/tree/v6.4.37" }, "funding": [ { @@ -947,7 +944,7 @@ "type": "tidelift" } ], - "time": "2026-04-18T13:51:42+00:00" + "time": "2026-04-14T12:12:40+00:00" }, { "name": "teapot/status-code", @@ -1067,25 +1064,25 @@ "packages-dev": [ { "name": "brick/math", - "version": "0.14.8", + "version": "0.13.1", "source": { "type": "git", "url": "https://github.com/brick/math.git", - "reference": "63422359a44b7f06cae63c3b429b59e8efcc0629" + "reference": "fc7ed316430118cc7836bf45faff18d5dfc8de04" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/brick/math/zipball/63422359a44b7f06cae63c3b429b59e8efcc0629", - "reference": "63422359a44b7f06cae63c3b429b59e8efcc0629", + "url": "https://api.github.com/repos/brick/math/zipball/fc7ed316430118cc7836bf45faff18d5dfc8de04", + "reference": "fc7ed316430118cc7836bf45faff18d5dfc8de04", "shasum": "" }, "require": { - "php": "^8.2" + "php": "^8.1" }, "require-dev": { "php-coveralls/php-coveralls": "^2.2", - "phpstan/phpstan": "2.1.22", - "phpunit/phpunit": "^11.5" + "phpunit/phpunit": "^10.1", + "vimeo/psalm": "6.8.8" }, "type": "library", "autoload": { @@ -1115,7 +1112,7 @@ ], "support": { "issues": "https://github.com/brick/math/issues", - "source": "https://github.com/brick/math/tree/0.14.8" + "source": "https://github.com/brick/math/tree/0.13.1" }, "funding": [ { @@ -1123,33 +1120,34 @@ "type": "github" } ], - "time": "2026-02-10T14:33:43+00:00" + "time": "2025-03-29T13:50:30+00:00" }, { "name": "doctrine/instantiator", - "version": "2.1.0", + "version": "2.0.0", "source": { "type": "git", "url": "https://github.com/doctrine/instantiator.git", - "reference": "23da848e1a2308728fe5fdddabf4be17ff9720c7" + "reference": "c6222283fa3f4ac679f8b9ced9a4e23f163e80d0" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/doctrine/instantiator/zipball/23da848e1a2308728fe5fdddabf4be17ff9720c7", - "reference": "23da848e1a2308728fe5fdddabf4be17ff9720c7", + "url": "https://api.github.com/repos/doctrine/instantiator/zipball/c6222283fa3f4ac679f8b9ced9a4e23f163e80d0", + "reference": "c6222283fa3f4ac679f8b9ced9a4e23f163e80d0", "shasum": "" }, "require": { - "php": "^8.4" + "php": "^8.1" }, "require-dev": { - "doctrine/coding-standard": "^14", + "doctrine/coding-standard": "^11", "ext-pdo": "*", "ext-phar": "*", "phpbench/phpbench": "^1.2", - "phpstan/phpstan": "^2.1", - "phpstan/phpstan-phpunit": "^2.0", - "phpunit/phpunit": "^10.5.58" + "phpstan/phpstan": "^1.9.4", + "phpstan/phpstan-phpunit": "^1.3", + "phpunit/phpunit": "^9.5.27", + "vimeo/psalm": "^5.4" }, "type": "library", "autoload": { @@ -1176,7 +1174,7 @@ ], "support": { "issues": "https://github.com/doctrine/instantiator/issues", - "source": "https://github.com/doctrine/instantiator/tree/2.1.0" + "source": "https://github.com/doctrine/instantiator/tree/2.0.0" }, "funding": [ { @@ -1192,7 +1190,7 @@ "type": "tidelift" } ], - "time": "2026-01-05T06:47:08+00:00" + "time": "2022-12-30T00:23:10+00:00" }, { "name": "firebase/php-jwt", @@ -1652,23 +1650,23 @@ }, { "name": "google/protobuf", - "version": "v5.35.0", + "version": "v4.33.6", "source": { "type": "git", "url": "https://github.com/protocolbuffers/protobuf-php.git", - "reference": "d96ed77c7edaff3cd576a74173aa0b0655c87b1a" + "reference": "84b008c23915ed94536737eae46f41ba3bccfe67" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/protocolbuffers/protobuf-php/zipball/d96ed77c7edaff3cd576a74173aa0b0655c87b1a", - "reference": "d96ed77c7edaff3cd576a74173aa0b0655c87b1a", + "url": "https://api.github.com/repos/protocolbuffers/protobuf-php/zipball/84b008c23915ed94536737eae46f41ba3bccfe67", + "reference": "84b008c23915ed94536737eae46f41ba3bccfe67", "shasum": "" }, "require": { - "php": ">=8.2.0" + "php": ">=8.1.0" }, "require-dev": { - "phpunit/phpunit": ">=11.5.0 <12.0.0" + "phpunit/phpunit": ">=10.5.62 <11.0.0" }, "suggest": { "ext-bcmath": "Need to support JSON deserialization" @@ -1690,9 +1688,9 @@ "proto" ], "support": { - "source": "https://github.com/protocolbuffers/protobuf-php/tree/v5.35.0" + "source": "https://github.com/protocolbuffers/protobuf-php/tree/v4.33.6" }, - "time": "2026-05-19T22:13:40+00:00" + "time": "2026-03-18T17:32:05+00:00" }, { "name": "grpc/grpc", @@ -4619,5 +4617,8 @@ "ext-pcntl": "*", "ext-sockets": "*" }, + "platform-overrides": { + "php": "8.1.0" + }, "plugin-api-version": "2.9.0" }