Bump laminas/laminas-servicemanager from 3.22.1 to 4.0.0

[dependabot]

Bumps laminas/laminas-servicemanager from 3.22.1 to 4.0.0.

Release notes

Sourced from laminas/laminas-servicemanager's releases.

4.0.0

Release Notes for 4.0.0

Release Notes for 4.0.0

laminas-servicemanager 4.0.0 is here and finally enables projects to consume psr/container v2.0.0 after 2 years along with several type-additions and plugin manager decoupling.

The migration guide is not written yet but will be at some point (once we added support for SM v4 to other components) later.

Added

• Several native type-additions including property-, argument- and return-types and a lot more psalm types
• ServiceManager#get, PluginManagerInterface#get and ServiceLocatorInterface#build now explicitly implement mixed as return-type to synchronize types with ContainerInterface#get
• Support for psr/container v1.1 and v2.0
• Ahead of Time factory creation for services explicitly using ReflectionBasedAbstractFactory via laminas-cli

Removed

• Dropped support for PHP <8.1
• Removed deprecated interfaces such as
  • Laminas\ServiceManager\AbstractFactoryInterface
  • Laminas\ServiceManager\FactoryInterface
  • Laminas\ServiceManager\InitializerInterface
  • Laminas\ServiceManager\DelegatorFactoryInterface
• CLI commands which were exposed via vendor/bin are removed in favor of the laminas-cli integration. All CLI commands of v3.x are accessible via vendor/bin/laminas servicemanager:<v3.x command name> once laminas/laminas-cli is required in the projects dependencies
• Removed deprecated ConfigInterface and Config-class since these files did not provide any validation logic and were just used to proxy the configuration array structure
• Removed AbstractPluginManager#validate and AbstractPluginManager::$instanceOf property as in v3.x, implementing plugin managers were able to implicitly validate mixed. In case an implementing plugin manager is providing a single $instanceOf such as laminas-cache, there is a new class AbstractSingleInstancePluginManager available which requires the $instanceOf property to be configured

Breaking Changes

• AbstractPluginManager does not extend ServiceManager anymore and instead uses an own ServiceManager instance under the hood to manage plugin manager related services which can be configured the same way as in v3.x
• Dedicated CLI commands which were previously linked to vendor/bin are now integrated via laminas-cli and can be called via vendor/bin/laminas once laminas/laminas-cli is part of the projects requirements. Read more about how to consume these commands here.
• AbstractPluginManager does not provide the validate-Method anymore and requires migration action such as:
  • extend AbstractSingleInstancePluginManager in case the plugin manager only provides instances of a specific interface- or class-string (please be aware that the $instanceOf property now requires native string property type)
  • implement validate method and verify whatever type has to be returned and/or just allow mixed as v3.x did when omitting $instanceOf property
• Removed deprecated ConfigInterface and Config-class since these files did not provide any validation logic and were just used to proxy the configuration array structure
• neither ServiceManager nor AbstractPluginManager do validate the provided configuration at runtime anymore. due to the psalm-types provided to ServiceManager#__construct, ServiceManager#configure, AbstractPluginManager#__construct and AbstractPluginManager#configure, the configuration schema is strictly typed and thus, a miss-configuration can be mitigated on static-analysis level prior actual runtime
• AbstractPluginManager#get does not accept options anymore, in case an instance with options needs to be created, AbstractPluginManager#build has to be used

4.0.0

• Total issues resolved: 7
• Total pull requests resolved: 14
• Total contributors: 6

Enhancement

• 204: Introduce plugin manager static analysis file thanks to @​boesing
• 200: Replace scope to retrieve plugin manager from $this to self thanks to @​boesing
• 194: Narrow return type of single instance plugin managers thanks to @​boesing
• 187: Remove removed binaries from composer thanks to @​boesing
• 171: AOT factory creation CLI command for ReflectionBasedAbstractFactory mapped factories thanks to @​boesing
• 58: Merge release 3.5.0 into 4.0.x thanks to @​github-actions[bot]

... (truncated)

Commits

• aa4b0f5 Merge pull request #225 from boesing/docs/console-tools-bugfix
• e3ec60c bugfix: link to proper AoT factory section
• aa074ae Merge pull request #224 from laminas/renovate/lock-file-maintenance
• e80b222 Lock file maintenance
• d69bfef Merge pull request #206 from laminas/renovate/lock-file-maintenance
• c7edb25 Lock file maintenance
• a18bb35 Merge pull request #204 from boesing/qa/static-analysis
• ee7ab4e qa: remove redundant method implementations
• b79a3d4 qa: ignore `SlevomatCodingStandard.Commenting.InlineDocCommentDeclaration.NoA...
• 9fa7191 qa: update psalm to latest stable version
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #457.