v2.0.0 - GraphQL-php v2.0.0 Upgrade with Security Fixes

GraphQL Bundle v2.0.0 is a major release featuring a complete upgrade to GraphQL-php v2.0.0, critical security fixes, and comprehensive code quality improvements.

What's Changed

Core Upgrade

• Upgraded GraphQL-php from v0.x to v2.0.0
• Updated Symfony support to 7.4, PHP requirement to 8.4

Security Fixes

• Fixed critical guard compiler pass logic error preventing unauthorized field access
• Enhanced SymfonyContainer null safety and ContainerInterface compliance
• Improved file operation error handling and validation
• Updated file permissions from 0777 to 0755 (principle of least privilege)

Code Quality

• 100% strict type declarations across all files
• Applied Rector modernization for PHP 8.4+ syntax
• Fixed 9 code quality issues (1 critical, 3 important, 5 minor)
• Removed unused variables and dead code

Testing

• All 53 tests passing (100% pass rate)
• Added 6 comprehensive new test suites
• Full project code review completed (Grade A: 92%)

Breaking Changes

• PHP: Minimum 8.4+ (was 8.0)
• Symfony: Minimum 7.4+ (was 6.4)
• GraphQL-php: v2.0.0 (was v0.x)

Installation

composer require youshido/graphql-bundle:^2.0.0

Full Changelog: v1.0.2...v2.0.0

1.0.2

Update composer.json to support symfony 6.4
Support for docker, rector + upgraded phpunit and updated test