Updated vendors (#115)

* Updated vendors

* Removed composer.lock

* Removed downgrade of PHPUnit

* Ignore composer.lock

* Added comment

Co-authored-by: Samuel Weirich <[email protected]>

Author: FelixJacobi

.github/workflows/ci.yml

@@ -23,8 +23,7 @@ jobs:
         php-version: ${{ matrix.php-versions }}
         extensions: bcmath, ctype, fileinfo, json, mbstring, dom, ldap, pdo, tokenizer, xml, mysql, sqlite
         coverage: xdebug
-    - name: Downgrade phpunit for php7.2
-      run: composer update phpunit/phpunit -W
+
     - name: Update to lowest php dependencies
       run: composer update --prefer-lowest
     - name: Install php dependencies
@@ -53,9 +52,6 @@ jobs:
         php-version: ${{ matrix.php-versions }}
         extensions: bcmath, ctype, fileinfo, json, mbstring, dom, ldap, pdo, tokenizer, xml, mysql, sqlite
         coverage: xdebug
-    - name: Downgrade phpunit for php7.2
-      if: ${{ matrix.php-versions == '7.2' }}
-      run: composer update phpunit/phpunit -W
     - name: Install php dependencies
       run: composer install --dev --no-interaction
       continue-on-error: ${{ matrix.experimental }}

.gitignore

@@ -19,3 +19,14 @@ reports
 # Local environment variables
 /.env.local
 /.env.*.local
+
+# Composer lock file
+#
+# The library does not locks down the dependencies for several reasons:
+#
+# * In the outer world, the lock is not effective. Only the lock of the requiring application is accounted.
+# * It makes it hard, to run the library with its deps in the CI as when running `composer require` under PHP 8.1,
+#   an incompatible lock file is created which is unsuable unter PHP 7.x.
+#
+# See https://github.com/littleredbutton/bigbluebutton-api-php/pull/115 for the discussion.
+/composer.lock