Merge pull request #389 from sboldyreva/php

Add new PHP frameworks pages

Author: sboldyreva

docs/.vuepress/components/ELSTechnology.vue

@@ -967,6 +967,11 @@ const techData = [
     ecosystem: "PHP",
     ecosystemIcon: "/images/php-logo.webp",
     projects: [
+      {
+        name: "Browsershot",
+        versions: "3.61.0",
+        link: "./browsershot/",
+      },
       {
         name: "Carbon",
         versions: "1.26.6",
@@ -977,6 +982,11 @@ const techData = [
         versions: "0.8.x | 1.2.x",
         link: "./dompdf/",
       },
+      {
+        name: "Firebase PHP-JWT",
+        versions: "6.11.1",
+        link: "./firebase-php-jwt/",
+      },
       {
         name: "Laravel",
         versions: "5.8.38 | 8 | 10 | 11",
@@ -992,9 +1002,14 @@ const techData = [
         versions: "3.x",
         link: "./livewire/",
       },
+      {
+        name: "PhpSpreadsheet",
+        versions: "4.5.0",
+        link: "./phpspreadsheet/",
+      },
       {
         name: "Symfony HttpFoundation",
-        versions: "3.4.x | 4.4.x",
+        versions: "2.8.x | 3.4.x | 4.4.x",
         link: "./symfony/",
       },
       {

docs/.vuepress/config-client/sidebar.ts

@@ -226,6 +226,10 @@ export default {
                     type: 'section-header',
                     icon: '/images/php-logo.webp',
                 },
+                {
+                    path: '/els-for-libraries/browsershot/',
+                    icon: '/images/spatie.webp',
+                },
                 {
                     path: '/els-for-libraries/carbon/',
                     icon: '/images/nesbot-carbon.webp',
@@ -234,6 +238,10 @@ export default {
                     path: '/els-for-libraries/dompdf/',
                     icon: '/images/dompdf-logo.webp',
                 },
+                {
+                    path: '/els-for-libraries/firebase-php-jwt/',
+                    icon: '/images/firebase.webp',
+                },
                 {
                     path: '/els-for-libraries/laravel/',
                     icon: '/images/laravel-logo.webp',
@@ -246,6 +254,10 @@ export default {
                     path: '/els-for-libraries/livewire/',
                     icon: '/images/livewire-logo.webp',
                 },
+                {
+                    path: '/els-for-libraries/phpspreadsheet/',
+                    icon: '/images/phpspreadsheet.webp',
+                },
                 {
                     path: '/els-for-libraries/symfony/',
                     icon: '/images/symfony-logo.webp',

docs/.vuepress/public/images/Yajra.webp

@@ -0,0 +1,200 @@
+# Browsershot
+
+Endless Lifecycle Support (ELS) for Browsershot from TuxCare provides security fixes for Browsershot package versions that have reached their end-of-life. This allows you to continue running your applications without vulnerability concerns, even after official support has ended.
+
+## Supported Versions and Components
+
+* **Browsershot** 3.61.0
+
+Other versions upon request.
+
+## Connection to ELS for Browsershot Repository
+
+This guide outlines the steps needed to integrate the TuxCare ELS for Browsershot repository into your application. The repository provides trusted Browsershot packages that can be easily integrated into your **Composer** projects.
+
+### Step 1: Get user credentials
+
+You need a username and password in order to use TuxCare ELS for Browsershot repository. Anonymous access is disabled. To receive the credentials, please contact [sales@tuxcare.com](mailto:sales@tuxcare.com).
+
+### Step 2: Configure Composer authentication
+
+1. Create or edit the `auth.json` file for the user running Composer:
+
+    * **Linux/macOS**: 
+
+        <CodeWithCopy>
+        
+        ```text
+        ~/.composer/auth.json
+        ```
+
+        </CodeWithCopy>
+
+    * **Windows**: 
+
+        <CodeWithCopy>
+
+        ```text
+        %APPDATA%\Composer\auth.json
+        ```
+
+        </CodeWithCopy>
+
+2. Use either the Composer CLI or edit `auth.json` directly to add your credentials for `nexus.repo.tuxcare.com`.
+
+   <CodeTabs :tabs="[
+     { title: 'Composer CLI', content: `composer config --global --auth http-basic.nexus.repo.tuxcare.com USERNAME PASSWORD` },
+     { title: 'auth.json', content: authjson }
+   ]" />
+
+   Replace `USERNAME` and `PASSWORD` with the credentials you received in [Step 1](#step-1-get-user-credentials).
+
+### Step 3: Register the TuxCare repository
+
+Add the `els_php_custom1` Composer repository either via CLI or by editing `composer.json`:
+
+  <CodeTabs :tabs="[
+    { title: 'Composer CLI', content: cli },
+    { title: 'composer.json', content: composerjson }
+  ]" />
+
+### Step 4: Install Browsershot
+
+Install the TuxCare-maintained Browsershot release that matches your project:
+
+<CodeTabs :tabs="[
+  { title: 'Composer CLI', content: `composer require spatie/browsershot:3.61.0-p1+tuxcare` },
+  { title: 'composer.json', content: pkgjson }
+]" />
+
+**Check the exact version listed in your TuxCare Nexus account to ensure you receive the most recent patched release.**
+
+If you edited `composer.json` manually, run `composer update` to install the package:
+
+<CodeWithCopy>
+
+```text
+composer update
+```
+
+</CodeWithCopy>
+
+Composer will resolve dependencies against the TuxCare repository and install the patched releases.
+
+### Composer Repository Configuration
+
+If you encounter dependency resolution errors like:
+
+`packages from higher priority repository do not match your constraint`
+
+it usually means your project requires a package version that is not yet available in the TuxCare repository.
+
+**Solution**: Update your `composer.json` to set the TuxCare repository as non-canonical:
+
+<CodeWithCopy>
+
+```
+{
+    "repositories": [
+        {
+            "type": "composer",
+            "url": "https://nexus.repo.tuxcare.com/repository/els_php_custom1/",
+            "canonical": false
+        }
+    ]
+}
+```
+
+</CodeWithCopy>
+
+This allows Composer to fall back to Packagist for packages not available in the TuxCare repository, while still preferring TuxCare patches when available.
+
+## Vulnerability Exploitability eXchange (VEX)
+
+VEX is a machine-readable format that tells you if a known vulnerability is actually exploitable in your product. It reduces false positives and helps prioritize real risks.
+
+TuxCare provides VEX for Browsershot ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_php/spatie-browsershot/](https://security.tuxcare.com/vex/cyclonedx/els_lang_php/spatie-browsershot/)
+
+## How to Upgrade to a Newer Version
+
+If you have already installed a TuxCare Browsershot package and want to upgrade to a newer release, update the version string in your `composer.json` file or run the `composer require` command with the new version:
+
+<CodeWithCopy>
+
+```text
+composer require spatie/browsershot:VERSION-pN+tuxcare
+```
+
+</CodeWithCopy>
+
+Then run `composer update` to apply the changes:
+
+<CodeWithCopy>
+
+```text
+composer update
+```
+
+</CodeWithCopy>
+
+## Resolved CVEs
+
+Fixes for the following vulnerabilities are available in ELS for Browsershot from TuxCare:
+
+<TableTabs label="Choose Browsershot version: " >
+
+<template #Browsershot_3.61.0 >
+
+| CVE ID         | Severity | Vulnerable versions | Fixed in version       |
+|----------------|----------|---------------------|------------------------|
+| CVE-2025-1026  | High     | 3.61.0              | 3.61.0-p1+tuxcare      |
+| CVE-2024-21547 | High     | 3.61.0              | 3.61.0-p1+tuxcare      |
+| CVE-2024-21549 | High     | 3.61.0              | 3.61.0-p1+tuxcare      |
+| CVE-2024-21544 | High     | 3.61.0              | 3.61.0-p1+tuxcare      |
+| CVE-2025-1022  | High     | 3.61.0              | 3.61.0-p1+tuxcare      |
+
+</template>
+
+</TableTabs>
+
+If you are interested in the TuxCare Endless Lifecycle Support, contact [sales@tuxcare.com](mailto:sales@tuxcare.com).
+
+<script setup>
+
+const authjson =
+`{
+  "http-basic": {
+    "nexus.repo.tuxcare.com": {
+      "username": "USERNAME",
+      "password": "PASSWORD"
+    }
+  }
+}`
+
+const composerjson =
+`{
+    "repositories": [
+        {
+        "type": "composer",
+        "url": "https://nexus.repo.tuxcare.com/repository/els_php_custom1/",
+        "options": {
+            "http": {
+            "verify": true
+            }
+        }
+        }
+    ]
+}`
+
+const cli =
+`composer config repositories.tuxcare '{"type":"composer","url":"https://nexus.repo.tuxcare.com/repository/els_php_custom1/","options":{"http":{"verify":true}}}' --json`
+
+const pkgjson =
+`{
+    "require": {
+        "spatie/browsershot": "3.61.0-p1+tuxcare"
+    }
+}`
+
+</script>
+