chore(deps): bump zircote/swagger-php from 4.11.1 to 6.0.6 in /src by dependabot[bot] · Pull Request #8118 · ChurchCRM/CRM

dependabot · 2026-03-02T06:32:15Z

Bumps zircote/swagger-php from 4.11.1 to 6.0.6.

Release notes

Sourced from zircote/swagger-php's releases.

6.0.6

What's Changed

Centralize all pure JSON Schema properties by @DerManoMann in zircote/swagger-php#1960

Refactor AbstractAnnotation::identity() by @DerManoMann in zircote/swagger-php#1962

Cleanup imports and improve CS rules by @DerManoMann in zircote/swagger-php#1964

Serialize context by @DerManoMann in zircote/swagger-php#1968

Full Changelog: zircote/swagger-php@6.0.5...6.0.6

6.0.5

What's Changed

Fix v6 migration typo: TypeInfoTypeResolver is the default resolver by @thePanz in zircote/swagger-php#1951

Update npm tools deps by @DerManoMann in zircote/swagger-php#1954

Add missing deepObject parameter to attribute Parameter by @DerManoMann in zircote/swagger-php#1957

Full Changelog: zircote/swagger-php@6.0.4...6.0.5

6.0.4

What's Changed

Improve phpstan config by @DerManoMann in zircote/swagger-php#1928

Schema type check type array by @DerManoMann in zircote/swagger-php#1936

Limit backport workflow to PRs against master by @DerManoMann in zircote/swagger-php#1938

Consistently use Generator::isDefault() where appropriate by @DerManoMann in zircote/swagger-php#1940

Subject examples and tests to rector rules by @DerManoMann in zircote/swagger-php#1942

Remove obsolete conditionals around TypeInfoTypeResolver by @DerManoMann in zircote/swagger-php#1945

Code cleanup by @DerManoMann in zircote/swagger-php#1947

Fix regression about unexpected items when augmenting parameters by @DerManoMann in zircote/swagger-php#1949

Full Changelog: zircote/swagger-php@6.0.3...6.0.4

6.0.3

What's Changed

Update readme by @DerManoMann in zircote/swagger-php#1922

Verify the Generator default config and allow to show in CLI by @DerManoMann in zircote/swagger-php#1925

Full Changelog: zircote/swagger-php@6.0.2...6.0.3

6.0.2

What's Changed

Skip type resolving on Schema with items set (#1916) by @DerManoMann in zircote/swagger-php#1916

Full Changelog: zircote/swagger-php@6.0.1...6.0.2

6.0.1

What's Changed

... (truncated)

Commits

9447c1f Allow to pass Context into Serializer (#1968)
380227f Cleanup imports and improve CS rules (#1964)
d99f8c3 Refactor AbstractAnnotation::identity() (#1962)
ec21679 Centralize all pure JSON Schema properties (#1960)
9a0a612 Add missing deepObject parameter to attribute Parameter (#1957)
6c92867 Update npm tools deps (#1954)
6a221d1 Fix v6 migration typo: TypeInfoTypeResolver is the default resolver (#1951)
f0717a5 Fix regression about unexpected items when augmenting parameters (#1949)
40d8c82 Some code cleanup (#1947)
01a7fcd Remove obsolete conditionals around TypeInfoTypeResolver (#1945)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [zircote/swagger-php](https://github.com/zircote/swagger-php) from 4.11.1 to 6.0.6. - [Release notes](https://github.com/zircote/swagger-php/releases) - [Commits](zircote/swagger-php@4.11.1...6.0.6) --- updated-dependencies: - dependency-name: zircote/swagger-php dependency-version: 6.0.6 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

DawoudIO · 2026-03-02T23:01:50Z

@copilot any updates to our software to support this major lib update

Copilot · 2026-03-02T23:01:57Z

@DawoudIO I've opened a new pull request, #8132, to work on those changes. Once the pull request is ready, I'll request review from you.

Copilot

Pull request overview

Updates the swagger-php dependency to v6 and adjusts ChurchCRM’s OpenAPI generation workflow to remain compatible with the removal of --legacy, then regenerates the published OpenAPI YAML specs.

Changes:

Bump zircote/swagger-php from ^4.x to ^6.0 (plus updated lockfile dependency graph).
Replace vendor/bin/openapi --legacy with a custom generator script (src/api/openapi/generate.php) wired into Composer scripts.
Regenerate openapi/public-api.yaml and openapi/private-api.yaml using the new generation pipeline.

Reviewed changes

Copilot reviewed 3 out of 5 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
`src/composer.json`	Updates swagger-php version constraint and switches OpenAPI scripts to the new generator entrypoint.
`src/composer.lock`	Locks updated dependency set for swagger-php v6 and its new transitive requirements.
`src/api/openapi/generate.php`	Adds a custom “legacy-style” docblock scanner intended to replace removed `--legacy` behavior.
`openapi/public-api.yaml`	Regenerated public OpenAPI spec output.
`openapi/private-api.yaml`	Regenerated private OpenAPI spec output.

Copilot · 2026-03-04T14:44:58Z

src/api/openapi/generate.php

+            $options['output'] = $argv[++$i] ?? null;
+            break;
+        case '--format':
+        case '-f':
+            $options['format'] = $argv[++$i] ?? 'yaml';
+            break;
+        case '--exclude':
+        case '-e':
+            $options['exclude'][] = $argv[++$i] ?? '';
+            break;
+        case '--debug':
+        case '-d':
+            $options['debug'] = true;
+            break;
+        case '--version':
+            $options['version'] = $argv[++$i] ?? null;


--version reads its value via $argv[++$i] without checking that a value follows. If omitted, this can emit an undefined array key warning in PHP 8.4. Consider validating required option values consistently across all flags.

Suggested change

$options['output'] = $argv[++$i] ?? null;

break;

case '--format':

case '-f':

$options['format'] = $argv[++$i] ?? 'yaml';

break;

case '--exclude':

case '-e':

$options['exclude'][] = $argv[++$i] ?? '';

break;

case '--debug':

case '-d':

$options['debug'] = true;

break;

case '--version':

$options['version'] = $argv[++$i] ?? null;

if ($i + 1 >= $argc) {

$error = "Missing value for $arg";

break 2;

}

$options['output'] = $argv[++$i];

break;

case '--format':

case '-f':

if ($i + 1 >= $argc) {

$error = "Missing value for $arg";

break 2;

}

$options['format'] = $argv[++$i];

break;

case '--exclude':

case '-e':

if ($i + 1 >= $argc) {

$error = "Missing value for $arg";

break 2;

}

$options['exclude'][] = $argv[++$i];

break;

case '--debug':

case '-d':

$options['debug'] = true;

break;

case '--version':

if ($i + 1 >= $argc) {

$error = "Missing value for $arg";

break 2;

}

$options['version'] = $argv[++$i];

Copilot · 2026-03-04T14:44:59Z

src/api/openapi/generate.php

+$vendorAutoload = __DIR__ . '/../../vendor/autoload.php';
+if (!file_exists($vendorAutoload)) {
+    fwrite(STDERR, "vendor/autoload.php not found. Run `composer install` first.\n");
+    exit(1);
+}
+require_once $vendorAutoload;


use import statements must appear before any executable code. Because this file executes require_once $vendorAutoload; and only then declares use OpenApi\..., PHP will throw a parse error. Move the use statements above the autoloader require (or avoid use and reference classes by FQCN).

Copilot · 2026-03-04T14:44:59Z

src/api/openapi/generate.php

+            $options['output'] = $argv[++$i] ?? null;
+            break;
+        case '--format':
+        case '-f':
+            $options['format'] = $argv[++$i] ?? 'yaml';
+            break;
+        case '--exclude':
+        case '-e':
+            $options['exclude'][] = $argv[++$i] ?? '';
+            break;
+        case '--debug':
+        case '-d':
+            $options['debug'] = true;
+            break;
+        case '--version':
+            $options['version'] = $argv[++$i] ?? null;


Option parsing uses $argv[++$i] without validating that a value actually follows the flag. If --output (or -o) is the last argument, PHP 8.4 will emit an "Undefined array key" warning and the script may mis-parse subsequent args. Add an explicit bounds check and treat a missing value as an error.

Suggested change

$options['output'] = $argv[++$i] ?? null;

break;

case '--format':

case '-f':

$options['format'] = $argv[++$i] ?? 'yaml';

break;

case '--exclude':

case '-e':

$options['exclude'][] = $argv[++$i] ?? '';

break;

case '--debug':

case '-d':

$options['debug'] = true;

break;

case '--version':

$options['version'] = $argv[++$i] ?? null;

if ($i + 1 >= $argc) {

$error = '--output requires a value';

break 2;

}

$options['output'] = $argv[++$i];

break;

case '--format':

case '-f':

if ($i + 1 >= $argc) {

$error = '--format requires a value';

break 2;

}

$options['format'] = $argv[++$i];

break;

case '--exclude':

case '-e':

if ($i + 1 >= $argc) {

$error = '--exclude requires a value';

break 2;

}

$options['exclude'][] = $argv[++$i];

break;

case '--debug':

case '-d':

$options['debug'] = true;

break;

case '--version':

if ($i + 1 >= $argc) {

$error = '--version requires a value';

break 2;

}

$options['version'] = $argv[++$i];

Copilot · 2026-03-04T14:44:59Z

src/api/openapi/generate.php

+            $options['output'] = $argv[++$i] ?? null;
+            break;
+        case '--format':
+        case '-f':
+            $options['format'] = $argv[++$i] ?? 'yaml';
+            break;
+        case '--exclude':
+        case '-e':
+            $options['exclude'][] = $argv[++$i] ?? '';
+            break;
+        case '--debug':
+        case '-d':
+            $options['debug'] = true;
+            break;
+        case '--version':
+            $options['version'] = $argv[++$i] ?? null;


Similar to --output, --format / -f reads the next argv slot via $argv[++$i] without checking it exists. If the value is missing, this triggers an undefined array key warning and silently falls back to yaml. Consider failing fast with a clear error when the value is omitted.

Suggested change

$options['output'] = $argv[++$i] ?? null;

break;

case '--format':

case '-f':

$options['format'] = $argv[++$i] ?? 'yaml';

break;

case '--exclude':

case '-e':

$options['exclude'][] = $argv[++$i] ?? '';

break;

case '--debug':

case '-d':

$options['debug'] = true;

break;

case '--version':

$options['version'] = $argv[++$i] ?? null;

if ($i + 1 >= $argc) {

fwrite(STDERR, "Missing value for $arg option.\n");

exit(1);

}

$options['output'] = $argv[++$i];

break;

case '--format':

case '-f':

if ($i + 1 >= $argc) {

fwrite(STDERR, "Missing value for $arg option.\n");

exit(1);

}

$options['format'] = $argv[++$i];

break;

case '--exclude':

case '-e':

if ($i + 1 >= $argc) {

fwrite(STDERR, "Missing value for $arg option.\n");

exit(1);

}

$options['exclude'][] = $argv[++$i];

break;

case '--debug':

case '-d':

$options['debug'] = true;

break;

case '--version':

if ($i + 1 >= $argc) {

fwrite(STDERR, "Missing value for $arg option.\n");

exit(1);

}

$options['version'] = $argv[++$i];

Copilot · 2026-03-04T14:45:00Z

src/api/openapi/generate.php

+            break;
+        case '--exclude':
+        case '-e':
+            $options['exclude'][] = $argv[++$i] ?? '';


--exclude / -e also uses $argv[++$i] without validating a following value. If the user forgets to pass a path, the script will add an empty string to the exclude list and may behave unexpectedly. Please validate the option value and surface a user-facing error.

Suggested change

$options['exclude'][] = $argv[++$i] ?? '';

$nextIndex = $i + 1;

if ($nextIndex >= $argc || $argv[$nextIndex] === '') {

$error = "Missing path for $arg option.";

break;

}

$i = $nextIndex;

$options['exclude'][] = $argv[$i];

dependabot bot added dependencies Pull requests that update a dependency file Package Dependencies labels Mar 2, 2026

dependabot bot requested a review from a team as a code owner March 2, 2026 06:32

dependabot bot added the Package Dependencies label Mar 2, 2026

dependabot bot requested review from DawoudIO, grayeul and respencer and removed request for a team March 2, 2026 06:32

dependabot bot added the dependencies Pull requests that update a dependency file label Mar 2, 2026

dependabot bot requested review from DAcodedBEAT, MrClever and bigtigerku March 2, 2026 06:32

Copilot AI mentioned this pull request Mar 2, 2026

feat: update OpenAPI generation for swagger-php v6 compatibility #8132

Merged

feat: update OpenAPI generation for swagger-php v6 compatibility (#8132)

37e9c3b

DawoudIO requested review from Copilot and removed request for DAcodedBEAT, DawoudIO, MrClever, bigtigerku, grayeul and respencer March 4, 2026 14:38

Copilot started reviewing on behalf of DawoudIO March 4, 2026 14:39 View session

Copilot AI reviewed Mar 4, 2026

View reviewed changes

DawoudIO added this to the 7.0.2 milestone Mar 4, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump zircote/swagger-php from 4.11.1 to 6.0.6 in /src#8118

chore(deps): bump zircote/swagger-php from 4.11.1 to 6.0.6 in /src#8118
dependabot[bot] wants to merge 2 commits intomasterfrom
dependabot/composer/src/zircote/swagger-php-6.0.6

dependabot bot commented on behalf of github Mar 2, 2026

Uh oh!

DawoudIO commented Mar 2, 2026

Uh oh!

Copilot AI commented Mar 2, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Mar 4, 2026

Uh oh!

Copilot AI Mar 4, 2026

Uh oh!

Copilot AI Mar 4, 2026

Uh oh!

Copilot AI Mar 4, 2026

Uh oh!

Copilot AI Mar 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

-            $options['exclude'][] = $argv[++$i] ?? '';
+            $nextIndex = $i + 1;
+            if ($nextIndex >= $argc || $argv[$nextIndex] === '') {
+                $error = "Missing path for $arg option.";
+                break;
+            }
+            $i = $nextIndex;
+            $options['exclude'][] = $argv[$i];

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 2, 2026

6.0.6

What's Changed

6.0.5

What's Changed

6.0.4

What's Changed

6.0.3

What's Changed

6.0.2

What's Changed

6.0.1

What's Changed

Uh oh!

DawoudIO commented Mar 2, 2026

Uh oh!

Copilot AI commented Mar 2, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Mar 4, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 4, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 4, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 4, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 4, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants