chore(deps): refresh xoops_lib vendor tree to current Packagist releases#56
Conversation
Run composer update against composer.dist.json constraints to pick up
package releases published since the repo's lock was last regenerated
(early March 2026). Refreshes htdocs/xoops_lib/vendor/ and
composer.dist.lock together.
Version moves (all permitted by existing ^X.Y constraints):
- firebase/php-jwt: v7.0.3 -> v7.0.5
(upstream repo moved from firebase/
to googleapis/ namespace; package
name on Packagist unchanged)
- php-debugbar/php-debugbar: v3.5.1 -> v3.7.6
- symfony/deprecation-contracts: v3.6.0 -> v3.7.0
- symfony/polyfill-ctype: v1.33.0 -> v1.37.0
- symfony/polyfill-mbstring: v1.33.0 -> v1.37.0
- symfony/var-dumper: v7.4.6 -> v7.4.8
- symfony/yaml: v7.4.6 -> v7.4.11
- tecnickcom/tcpdf: 6.11.2 -> 6.11.3
- webmozart/assert: 1.12.1 -> 2.3.0
(major bump pulled in transitively
via php-debugbar 3.7; PHP >= 8.1
floor, fine for 2.7's PHP 8.2 min)
- xoops/xmf: v1.3.0-beta1 -> v1.3.0
(XMF 1.3.0 final release)
Intentionally held back (constraints pin these majors out):
- phpmailer/phpmailer: pinned ^6.x in composer.dist.json; 7.0.2 available
- smarty/smarty: pinned ^4.x; Smarty 5 has breaking API changes
per CLAUDE.md R-006 and needs a separate RFC
Includes new files introduced by the bumped versions:
- xoops/xmf: SchemaDefinitionException, SendmailException,
DecompressionException
- php-debugbar: DebugBarJsonCaster, DebugBarJsonVar, ReverseJsonDumper
under DataFormatter/VarDumper/
- tcpdf: Makefile
No changes to composer.dist.json. No security-vulnerability advisories
reported by `composer audit`.
|
Warning Rate limit exceeded
You’ve run out of usage credits. Purchase more in the billing tab. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: ASSERTIVE Plan: Pro Run ID: ⛔ Files ignored due to path filters (3)
📒 Files selected for processing (109)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #56 +/- ##
============================================
+ Coverage 18.04% 18.12% +0.07%
- Complexity 7845 7854 +9
============================================
Files 665 666 +1
Lines 43083 43142 +59
============================================
+ Hits 7775 7818 +43
- Misses 35308 35324 +16 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|



Run composer update against composer.dist.json constraints to pick up
package releases published since the repo's lock was last regenerated
(early March 2026). Refreshes htdocs/xoops_lib/vendor/ and
composer.dist.lock together.
Version moves (all permitted by existing ^X.Y constraints):
(upstream repo moved from firebase/
to googleapis/ namespace; package
name on Packagist unchanged)
(major bump pulled in transitively
via php-debugbar 3.7; PHP >= 8.1
floor, fine for 2.7's PHP 8.2 min)
(XMF 1.3.0 final release)
Intentionally held back (constraints pin these majors out):
per CLAUDE.md R-006 and needs a separate RFC
Includes new files introduced by the bumped versions:
DecompressionException
under DataFormatter/VarDumper/
No changes to composer.dist.json. No security-vulnerability advisories
reported by
composer audit.