Use session-stored UUID7 for anonymous ID, require Laravel 11+ (#27)

Replace hashed session ID with a UUID7 stored via session()->remember()
so anonymous users get a stable ID across requests and session
regeneration. Fall back to a static UUID7 for non-session contexts.
Bump minimum to Laravel 11 / PHP 8.2 for Str::uuid7() support.

Author: jszobody

README.md

@@ -279,7 +279,7 @@ The closure will be called fresh each time a metric is formatted. This also work
 Drivers automatically resolve the current user ID via `getUserId()`:
 
 1. If a user is authenticated: `auth()->id()`
-2. Otherwise: `getAnonymousId()`, which returns a hashed session ID if a session is active, or a random string (stable for the lifetime of the process)
+2. Otherwise: `getAnonymousId()`, which returns a UUID stored in the session (stable across requests), or a static UUID for non-session contexts (CLI, queues)
 
 This is used by the PostHog driver as the `distinctId`, and is available to any driver via `$driver->getUserId()`.
 

composer.json

@@ -14,12 +14,12 @@
         }
     ],
     "require": {
-        "php": "^8.1",
-        "illuminate/support": "^8.0|^9.0|^10.0|^11.0|^12.0"
+        "php": "^8.2",
+        "illuminate/support": "^11.0|^12.0"
     },
     "require-dev": {
         "phpunit/phpunit": "^10.0|^11.5.3",
-        "orchestra/testbench": "^8.0|^9.0|^10.0",
+        "orchestra/testbench": "^9.0|^10.0",
         "mockery/mockery": "^1.6",
         "aws/aws-sdk-php": "^3.2",
         "guzzlehttp/guzzle": "^7.5",

src/Drivers/AbstractDriver.php

@@ -87,12 +87,12 @@ public function getUserId(): mixed
     public function getAnonymousId(): string
     {
         if (session()->isStarted()) {
-            return sha1(session()->getId());
+            return session()->remember('metrics.anonymous_id', fn() => Str::uuid7()->toString());
         }
 
         static $anonymousId = null;
 
-        return $anonymousId ??= Str::random();
+        return $anonymousId ??= Str::uuid7()->toString();
     }
 
     /**