Skip to content

Commit 7bd1ba2

Browse files
authored
fix(full): replace abandoned azure-storage-blob with azure-oss/storage (#154)
Removes the abandoned `microsoft/azure-storage-blob` SDK from the **full** image by adopting phpbu 6.0.32's migration to the maintained `azure-oss/storage`. ## Background `microsoft/azure-storage-blob` is abandoned upstream (Microsoft archived it; Packagist `abandoned: true`, no replacement). It was a direct require in the full image only because phpbu's Azure Blob sync adapter was hardwired to it. That's now fixed at the root: phpbu migrated the adapter to `azure-oss/storage` in [sebastianfeldmann/phpbu#402](sebastianfeldmann/phpbu#402), released in [phpbu 6.0.32](https://github.com/sebastianfeldmann/phpbu/releases/tag/6.0.32). ## What changed (`app/full/composer.json` + lock) - `phpbu/phpbu` `^6.0` → `^6.0.32` (the release whose Azure adapter uses azure-oss). - Direct require `microsoft/azure-storage-blob: ^1.4` → `azure-oss/storage: ^1.9` (phpbu lists azure-oss as `suggest`/`require-dev`, so the full image still declares it explicitly to enable the adapter). - `composer update` removed `microsoft/azure-storage-blob` + `microsoft/azure-storage-common` entirely; pulled `azure-oss/storage` 1.9.0, `azure-oss/storage-common`, `azure-oss/identity`. ## Verification - `composer validate` clean; **no abandoned packages remain in the lock**; `composer audit` reports no advisories. - phpbu 6.0.32's `azureblob` sync runs in `--simulate` under PHP 8.5: loads `AzureOss\Storage\Blob\BlobServiceClient` (no "SDK not loaded") and masks the credential (`connectionString: ********`). - The Security Scan (Trivy) runs on this PR and rebuilds the full image — it should now be clean of the abandonment finding. ## Supersedes This replaces the documentation-only workaround in #153 (which explained why the abandoned package was kept). With the package removed, that note is obsolete — closing #153 in favour of this fix.
2 parents 07fa778 + a318056 commit 7bd1ba2

2 files changed

Lines changed: 312 additions & 108 deletions

File tree

app/full/composer.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,10 +15,10 @@
1515
],
1616
"require": {
1717
"php": ">=8.5",
18-
"phpbu/phpbu": "^6.0",
18+
"phpbu/phpbu": "^6.0.32",
1919
"aws/aws-sdk-php": "^3.10",
2020
"google/cloud-storage": "^2.0",
21-
"microsoft/azure-storage-blob": "^1.4",
21+
"azure-oss/storage": "^1.9",
2222
"phpseclib/phpseclib": "^3.0",
2323
"sebastianfeldmann/ftp": "^0.9.2",
2424
"kunalvarma05/dropbox-php-sdk": "^0.5",

0 commit comments

Comments
 (0)