Skip to content

build: bump phpunit constraints past GHSA-qrr6-mg7r-m243 - #317

Closed
sandervanhooft wants to merge 594 commits into
masterfrom
fix/phpunit-ghsa-qrr6-mg7r-m243
Closed

build: bump phpunit constraints past GHSA-qrr6-mg7r-m243#317
sandervanhooft wants to merge 594 commits into
masterfrom
fix/phpunit-ghsa-qrr6-mg7r-m243

Conversation

@sandervanhooft

@sandervanhooft sandervanhooft commented Apr 20, 2026

Copy link
Copy Markdown
Collaborator

Restrict PHPUnit to patched versions for GHSA-qrr6-mg7r-m243.

Affected ranges:

  • <= 12.5.21
  • 13.0.0 to 13.1.5

This updates the Composer constraint to allow only patched 12.x and 13.x releases while keeping existing 10.x and 11.x support.

sandervanhooft and others added 27 commits January 22, 2025 22:27
* fix query

* Matching test

* improved test

* query order
Simplify the valid() method for readability. onTrial() and onGracePeriod() are already checked in active(), so no need to check them again.
…291)

* fix 287 order id not found

* property type docblock

* swap http statuses
…ice()

## Summary

This PR fixes a PHP 8.4 deprecation warning by using explicit nullable type declaration.

## Problem

PHP 8.4 deprecated implicit nullable parameter declarations. The following warning is triggered:
…cation

fix: PHP 8.4 deprecation - use explicit nullable type in downloadInvoice()
fix: Use explicit nullable types in parameters
Replace all remaining implicit nullable parameter types with explicit
nullable type declarations to resolve PHP 8.4 deprecation warnings.

PR #306 previously fixed src/Billable.php; this commit addresses the
remaining 13 occurrences across exception constructors, interval
generators, Invoice methods, and test helpers.
* Add Laravel 13 support

- Add ^13 to illuminate/database and illuminate/support constraints
- Add orchestra/testbench ^11.0 and phpunit ^12.0 for L13 testing
- Add Laravel 13 to CI matrix with PHP version excludes
  (L13 requires PHP 8.3+, L12 requires PHP 8.2+)
- Bump actions/checkout to v4

Closes #311

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Remove phpunit ^12.0 — test suite uses docblock annotations

PHPUnit 12 dropped support for @test and @group docblock annotations in
favor of PHP 8 attributes. The test suite relies on these throughout,
so PHPUnit 12 either skips tests entirely (33 "no tests found" warnings)
or runs integration tests that should be excluded via @group. Converting
to attributes is a separate effort.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Upgrade to mollie/laravel-mollie v4

- Update mollie/laravel-mollie constraint from ^3.0 to ^4.0
- Remove direct mollie/mollie-api-php dependency (now transitive)
- Update Mollie SDK constant references (drop STATUS_/SEQUENCETYPE_ prefixes)
- Handle RefundCollection and ApiException constructor changes
- Migrate PHPUnit annotations to PHP 8 attributes (#[Test], #[Group])
- Require PHP 8.2+ and Laravel 11+
- Add CI resolve and prefer-lowest jobs

* Fix malformed docblocks in ManageSubscriptionTest and ConfigPlanRepositoryTest

* Bump orchestra/testbench minimum to ^9.6 for prefer-lowest compatibility

Testbench v9.0.x resolves to early Laravel 11 versions that lack the
$latestResponse static property, causing errors with --prefer-lowest.
@sandervanhooft
sandervanhooft force-pushed the fix/phpunit-ghsa-qrr6-mg7r-m243 branch from 01ef723 to fe740e2 Compare April 20, 2026 13:02
@sandervanhooft

Copy link
Copy Markdown
Collaborator Author

Closing this in favor of #318, which is based on the correct branch and contains only the intended one-line change.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.