Repository navigation
1.10.0
Supported PHP
~8.2.0 || ~8.3.0 || ~8.4.0 || ~8.5.0 — adds 8.5, drops 8.1.
Dependency declarations fixed
Four production dependencies were undeclared, all reachable only transitively:
| dependency | evidence |
|---|---|
psr/container ^1.1 || ^2.0 |
Psr\Container imported by 14 src/ classes |
laminas/laminas-router ^3.16 |
Laminas\Router imported by 3 |
laminas/laminas-modulemanager ^2.19 |
Laminas\ModuleManager imported by 2 |
bshaffer/oauth2-server-php ^1.14.1 |
OAuth2\Server, GrantType, Request, Response, OpenID across src/, previously reaching this package only through api-tools-oauth2 |
Other changes
- Dependency floors raised to releases covering the whole supported range;
api-tools-oauth2→^1.11,laminas-mvc→^3.8with adatasage/laminas-mvcVCS repository entry. src/Identity/IdentityInterface.php:getAuthenticationIdentity()gains a@return mixedannotation, required by the newer slevomat standard. Annotated rather than given a: mixedreturn type, which would break implementors.vimeo/psalm^5→^6.14; baseline regenerated; one deadInternalMethodsuppression removed.- Removed 5 no-op
setAccessible()calls fromtest/, deprecated in 8.5. config.platform.php8.1.99 → 8.2.99.- CI:
.laminas-ci.jsonkeeps itspdo/pdo-sqliteextensions and swaps the 8.4 platform-req ignore for doc-lint exclusions; removedrelease-on-milestone-closed.yml.
No functional src/ changes.
CI green on 8.2, 8.3, 8.4 and 8.5 across locked, lowest and latest. 188 tests, 500 assertions.
Known issues, unchanged here
ModuleTest::expectedListeners()is a non-static data provider, which PHPUnit deprecates and PHPUnit 11 rejects. It reads$thisin four places, so making it static is a restructure. This package does not depend on laminas-test, so phpunit stays at^10and it is not yet forced.src/Factory/OAuth2ServerFactory.phpreferencesMongoClientfrom the legacymongoextension, removed in PHP 7. That path cannot execute on any supported PHP; it is dead code and a removal candidate.