Skip to content

Fix CI: update Symfony and PSR cache dependencies for no-framework example, make static analysis happy with possible types of callback params#811

Open
andrew-demb wants to merge 2 commits into
thecodingmachine:masterfrom
andrew-demb:patch-2
Open

Fix CI: update Symfony and PSR cache dependencies for no-framework example, make static analysis happy with possible types of callback params#811
andrew-demb wants to merge 2 commits into
thecodingmachine:masterfrom
andrew-demb:patch-2

Conversation

@andrew-demb

@andrew-demb andrew-demb commented Jun 9, 2026

Copy link
Copy Markdown
Contributor
  1. symfony/cache v4 is affected by PKSA-z7t6-zt6p-wtng security advisory

Addresses CI failure for "Check Examples (no-framework)"

Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires symfony/cache ^4.3, found symfony/cache[v4.3.0, ..., v4.4.48] but these were not loaded, because they are affected by security advisories ("PKSA-z7t6-zt6p-wtng", "PKSA-w17b-j6zx-knvn"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add their IDs to the "policy.advisories.ignore-id" config or add the package to "policy.advisories.ignore". To turn the feature off entirely, you can set "policy.advisories.block" to false.
  Problem 2
    - Root composer.json requires thecodingmachine/graphqlite @dev -> satisfiable by thecodingmachine/graphqlite[dev-703ca1fcacb60789bd36d39a93ee28b5b6ec457b].
    - thecodingmachine/graphqlite dev-703ca1fcacb60789bd36d39a93ee28b5b6ec457b requires symfony/cache ^4.3 || ^5 || ^6 || ^7 || ^8 -> found symfony/cache[v4.3.0, ..., v4.4.48, v5.0.0, ..., v5.4.53, v6.0.0, ..., v6.4.41, v7.0.0, ..., v7.4.13, v8.0.0, ..., v8.1.0] but these were not loaded, because they are affected by security advisories ("PKSA-z7t6-zt6p-wtng", "PKSA-w17b-j6zx-knvn"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add their IDs to the "policy.advisories.ignore-id" config or add the package to "policy.advisories.ignore". To turn the feature off entirely, you can set "policy.advisories.block" to false.

Error: Your requirements could not be resolved to an installable set of packages.

  1. Static analysis starts emitting issue about validation rules callback params.

Addresses CI failure for "Continuous Integration (*)" jobs.

Error: Parameter #1 $operation of callable callable(GraphQL\Server\OperationParams, GraphQL\Language\AST\DocumentNode, string): array<GraphQL\Validator\Rules\ValidationRule> expects GraphQL\Server\OperationParams, GraphQL\Language\AST\DocumentNode|GraphQL\Server\OperationParams|string given.
 ------ ----------------------------------------------------------------------- 
  Line   Http/Psr15GraphQLMiddlewareBuilder.php                                 
 ------ ----------------------------------------------------------------------- 
  138    Parameter #1 $operation of callable                                    
         callable(GraphQL\Server\OperationParams,                               
         GraphQL\Language\AST\DocumentNode, string): array<GraphQL\Validator\R  
         ules\ValidationRule> expects GraphQL\Server\OperationParams, GraphQL\  
         Language\AST\DocumentNode|GraphQL\Server\OperationParams|string        
         given.                                                                 
         🪪  argument.type                                                      
PHP runtime version: 8.5.6
 ------ ----------------------------------------------------------------------- 


Error:  [ERROR] Found 1 error                  

@andrew-demb andrew-demb changed the title Update Symfony and PSR cache dependencies for no-framework example Update Symfony and PSR cache dependencies for no-framework example, make static analysis happy with possible types of callback params Jun 9, 2026
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 88.88889% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 94.84%. Comparing base (53f9d49) to head (1b34161).
⚠️ Report is 155 commits behind head on master.

Files with missing lines Patch % Lines
src/Http/Psr15GraphQLMiddlewareBuilder.php 88.88% 1 Missing ⚠️
Additional details and impacted files
@@             Coverage Diff              @@
##             master     #811      +/-   ##
============================================
- Coverage     95.72%   94.84%   -0.88%     
- Complexity     1773     1893     +120     
============================================
  Files           154      176      +22     
  Lines          4586     4987     +401     
============================================
+ Hits           4390     4730     +340     
- Misses          196      257      +61     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@andrew-demb andrew-demb changed the title Update Symfony and PSR cache dependencies for no-framework example, make static analysis happy with possible types of callback params Fix CI: update Symfony and PSR cache dependencies for no-framework example, make static analysis happy with possible types of callback params Jun 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants