Skip to content

Conservative update of composer.json require-dev#804

Open
talkinnl wants to merge 1 commit intoauth0:mainfrom
talkinnl:patch-1
Open

Conservative update of composer.json require-dev#804
talkinnl wants to merge 1 commit intoauth0:mainfrom
talkinnl:patch-1

Conversation

@talkinnl
Copy link
Copy Markdown

Changes

  • Specifying ext-json is no longer needed since PHP8.0. Explained here: https://php.watch/versions/8.0/ext-json . Fixes Useless ext-json requirement #791
  • pestphp/pest: 2.34 -> 2.35. (2.36 upgrades indirect dependencies and needs a test fix)
  • phpstan/phpstan: 1.11 -> 1.12
  • symfony: v4 no longer has security versions. Only 5.4 and 6.4 still do.
  • vimeo/psalm: 5.25 -> 5.26

This is a very conservative update, without changes to any other file, just raising the bare minimum versions.
It's probably wise to do major upgrades of at least Rector and PHPStan in a next PR. Especially Rector v1 would require a big config change. Rector 0 blocks upgrades of PHPStan.

References

Fixes #791

Testing

The tests still pass.

Contributor Checklist

- Specifying ext-json is no longer needed since PHP8.0. Explained here: https://php.watch/versions/8.0/ext-json . Fixes auth0#791
- pestphp/pest: 2.34 -> 2.35. (2.36 upgrades indirect dependencies and needs a test fix)
- phpstan/phpstan: 1.11 -> 1.12
- symfony: v4 no longer has security versions. Only 5.4 and 6.4 still do.
- vimeo/psalm: 5.25 -> 5.26

This is a very conservative update, without changes to any other file, just raising the bare minimum versions.
It's probably wise to do major upgrades of at least Rector and PHPStan in a next PR. Especially Rector v1 would require a big config change. Rector 0 blocks upgrades of PHPStan. 

Signed-off-by: Maarten S <42799774+talkinnl@users.noreply.github.com>
@talkinnl talkinnl requested a review from a team as a code owner January 22, 2026 10:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Useless ext-json requirement

1 participant