Skip to content

chore: widen dependencies to support latest packages (2026-03-18)#12

Merged
zakhar-huzenko merged 4 commits intodevelopfrom
cursor/dependencies-latest-versions-51d4
Mar 18, 2026
Merged

chore: widen dependencies to support latest packages (2026-03-18)#12
zakhar-huzenko merged 4 commits intodevelopfrom
cursor/dependencies-latest-versions-51d4

Conversation

@zakhar-huzenko
Copy link
Contributor

@zakhar-huzenko zakhar-huzenko commented Mar 18, 2026

Summary

Widened runtime Symfony constraints to include latest stable major (^8.0) while preserving existing supported majors; bumped dev tooling constraints to current stable majors; added compatibility fixes for PHPCS 4 config and Symfony bundle signature compatibility.

Updated packages

Package Scope Constraint change
symfony/config require `^6.4
symfony/dependency-injection require `^6.4
symfony/http-kernel require `^6.4
symfony/routing require `^6.4
symfony/event-dispatcher require `^6.4
symfony/browser-kit require-dev ^6.0 -> `^6.4
symfony/yaml require-dev `^6.4
symfony/framework-bundle require-dev `^6.4
phpunit/phpunit require-dev ^10.5 -> ^12.5
squizlabs/php_codesniffer require-dev ^3.8 -> ^4.0
phpstan/phpstan-symfony require-dev `^1.3

Release-notes / changelog summary

  • symfony/* (7.x -> 8.x support): Symfony 8.0 requires PHP >= 8.4 and removes deprecated APIs retained in 7.4; package constraints are widened to allow 8.x while preserving 6.4/7.x compatibility.
  • phpunit/phpunit (10.x -> 12.x): PHPUnit 12 removes previously deprecated APIs (including legacy mock helpers) and raises baseline to PHP 8.3.
  • squizlabs/php_codesniffer (3.x -> 4.x): PHPCS 4 contains breaking changes and requires updated ruleset syntax for array properties.
  • phpstan/phpstan-symfony (1.x -> 2.x): 2.0 release removes legacy config options and tracks newer PHPStan APIs.

Compatibility code/config changes (no consumer API removals)

  • Updated phpcs.xml.dist forbidden-functions array property to PHPCS 4 <element .../> format.
  • Added explicit : void return type to DeprecatedRoutesBundle::build() to match Symfony Bundle contract in newer versions and satisfy static analysis.
  • No public classes/constants removed; no public method removed.

Validation results

Latest dependency set

  • composer update
  • vendor/bin/phpunit ✅ (suite passes; existing risky-test notices remain)
  • vendor/bin/phpstan analyse
  • vendor/bin/phpcs

Lowest dependency set

  • composer update --prefer-lowest
  • rm -rf var/cache/test && vendor/bin/phpunit

BC checker

  • vendor/bin/roave-backward-compatibility-check not available in this repository.

Blocked packages

  • None. All intended constraint widenings/bumps were applied successfully.

CI follow-up

  • Addressed failing PHPStan check by aligning DeprecatedRoutesBundle::build() return type with parent signature (void).
  • Node.js 20 deprecation warning from GitHub Actions is workflow-maintenance noise and not related to package runtime compatibility changes.
Open in Web Open in Cursor 

cursoragent and others added 4 commits March 18, 2026 15:00
Co-authored-by: Zakhar <zahar.guzenko@gmail.com>
Co-authored-by: Zakhar <zahar.guzenko@gmail.com>
Co-authored-by: Zakhar <zahar.guzenko@gmail.com>
Co-authored-by: Zakhar <zahar.guzenko@gmail.com>
@zakhar-huzenko zakhar-huzenko marked this pull request as ready for review March 18, 2026 18:50
@zakhar-huzenko zakhar-huzenko merged commit 89a1204 into develop Mar 18, 2026
9 checks passed
@zakhar-huzenko zakhar-huzenko deleted the cursor/dependencies-latest-versions-51d4 branch March 18, 2026 20:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants