chore(deps): update dependency phpstan/phpstan to v2.3.1

2026-10-08 21:57:11 +00:00
6 changed files with 57 additions and 71 deletions
@@ -77,7 +77,6 @@ jobs:
          target: final
          platforms: linux/amd64,linux/arm64
          push: true
-          pull: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          # Registry-based layer cache — survives between runs without a separate cache store.
@@ -24,7 +24,7 @@ jobs:
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
-          token: ${{ secrets.RELEASE_TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}

      - name: Validate version and Unreleased section
        run: |
@@ -7,8 +7,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

 ## [Unreleased]

-## [0.2.2] - 2026-10-23
-
 ### Changed

 - Added `symfony/flex` so `extra.symfony.require: "7.4.*"` is enforced — every Symfony component, including transitive ones, now stays on 7.4 LTS
@@ -21,14 +19,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
  - `phpstan/phpstan` 2.2.5 → 2.2.16
 - Docker builds copy `symfony.lock` so Flex doesn't re-apply recipes during `composer install`

-### Fixed
-
- Renovate no longer pins `symfony/monolog-bundle` to `~7.4` — it is versioned independently (4.x) and was blocked from updates (#39)
-
-### Security
-
- Release images are built against the latest PHP 8.4.27 for CVE-2026-109618 and CVE-2026-109619 (critical RCE)
-
 ## [0.2.1] - 2026-07-31

 ### Added
@@ -4,7 +4,7 @@
    "type": "project",
    "license": "MIT",
    "require": {
-        "php": ">=8.3",
+        "php": ">=8.2",
        "monolog/monolog": "^3.10",
        "symfony/cache": "7.4.*",
        "symfony/console": "7.4.*",
@@ -4,7 +4,7 @@
        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
        "This file is @generated automatically"
    ],
-    "content-hash": "79811db631df6eb8fad05f9bb2caf385",
+    "content-hash": "65e112e17f2cf3ba6ebccbbc3a0fcbfa",
    "packages": [
        {
            "name": "monolog/monolog",
@@ -315,16 +315,16 @@
        },
        {
            "name": "symfony/cache",
-            "version": "v7.4.22",
+            "version": "v7.4.20",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/cache.git",
-                "reference": "f0024b7dd1e6d4f2f34b08c1a61c6c7d33febad7"
+                "reference": "e7e604eab58639503495a46f5c194cc69a9c80a8"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/cache/zipball/f0024b7dd1e6d4f2f34b08c1a61c6c7d33febad7",
-                "reference": "f0024b7dd1e6d4f2f34b08c1a61c6c7d33febad7",
+                "url": "https://api.github.com/repos/symfony/cache/zipball/e7e604eab58639503495a46f5c194cc69a9c80a8",
+                "reference": "e7e604eab58639503495a46f5c194cc69a9c80a8",
                "shasum": ""
            },
            "require": {
@@ -394,7 +394,7 @@
                "psr6"
            ],
            "support": {
-                "source": "https://github.com/symfony/cache/tree/v7.4.22"
+                "source": "https://github.com/symfony/cache/tree/v7.4.20"
            },
            "funding": [
                {
@@ -414,7 +414,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-10-28T10:54:34+00:00"
+            "time": "2026-09-29T12:35:16+00:00"
        },
        {
            "name": "symfony/cache-contracts",
@@ -577,16 +577,16 @@
        },
        {
            "name": "symfony/console",
-            "version": "v7.4.22",
+            "version": "v7.4.20",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/console.git",
-                "reference": "8012f842110b414fd1cc641adb0ed8423353b0bb"
+                "reference": "d7bca2fe05241dc7732d0c8b6d551b879f5d0a7d"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/console/zipball/8012f842110b414fd1cc641adb0ed8423353b0bb",
-                "reference": "8012f842110b414fd1cc641adb0ed8423353b0bb",
+                "url": "https://api.github.com/repos/symfony/console/zipball/d7bca2fe05241dc7732d0c8b6d551b879f5d0a7d",
+                "reference": "d7bca2fe05241dc7732d0c8b6d551b879f5d0a7d",
                "shasum": ""
            },
            "require": {
@@ -651,7 +651,7 @@
                "terminal"
            ],
            "support": {
-                "source": "https://github.com/symfony/console/tree/v7.4.22"
+                "source": "https://github.com/symfony/console/tree/v7.4.20"
            },
            "funding": [
                {
@@ -671,7 +671,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-10-28T11:08:27+00:00"
+            "time": "2026-09-18T15:55:00+00:00"
        },
        {
            "name": "symfony/dependency-injection",
@@ -1215,16 +1215,16 @@
        },
        {
            "name": "symfony/flex",
-            "version": "v2.12.0",
+            "version": "v2.11.0",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/flex.git",
-                "reference": "3d37e8597c2290c095433b4260563986f857a274"
+                "reference": "4a6d98eea3ebc7f68d82810cb682eedca2649e99"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/flex/zipball/3d37e8597c2290c095433b4260563986f857a274",
-                "reference": "3d37e8597c2290c095433b4260563986f857a274",
+                "url": "https://api.github.com/repos/symfony/flex/zipball/4a6d98eea3ebc7f68d82810cb682eedca2649e99",
+                "reference": "4a6d98eea3ebc7f68d82810cb682eedca2649e99",
                "shasum": ""
            },
            "require": {
@@ -1264,7 +1264,7 @@
            "description": "Composer plugin for Symfony",
            "support": {
                "issues": "https://github.com/symfony/flex/issues",
-                "source": "https://github.com/symfony/flex/tree/v2.12.0"
+                "source": "https://github.com/symfony/flex/tree/v2.11.0"
            },
            "funding": [
                {
@@ -1284,21 +1284,20 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-10-29T17:24:46+00:00",
-            "published-time": "2026-10-29T17:26:51+00:00"
+            "time": "2026-05-29T17:25:22+00:00"
        },
        {
            "name": "symfony/framework-bundle",
-            "version": "v7.4.22",
+            "version": "v7.4.20",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/framework-bundle.git",
-                "reference": "17d23a62561b493b85486c9ae8c2752f36303b2c"
+                "reference": "99786f9338c24770ce4de6a95d049675aa75b129"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/framework-bundle/zipball/17d23a62561b493b85486c9ae8c2752f36303b2c",
-                "reference": "17d23a62561b493b85486c9ae8c2752f36303b2c",
+                "url": "https://api.github.com/repos/symfony/framework-bundle/zipball/99786f9338c24770ce4de6a95d049675aa75b129",
+                "reference": "99786f9338c24770ce4de6a95d049675aa75b129",
                "shasum": ""
            },
            "require": {
@@ -1422,7 +1421,7 @@
            "description": "Provides a tight integration between Symfony components and the Symfony full-stack framework",
            "homepage": "https://symfony.com",
            "support": {
-                "source": "https://github.com/symfony/framework-bundle/tree/v7.4.22"
+                "source": "https://github.com/symfony/framework-bundle/tree/v7.4.20"
            },
            "funding": [
                {
@@ -1442,20 +1441,20 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-10-26T21:52:50+00:00"
+            "time": "2026-09-28T19:09:50+00:00"
        },
        {
            "name": "symfony/http-client",
-            "version": "v7.4.22",
+            "version": "v7.4.20",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/http-client.git",
-                "reference": "9dd7ba9dc326b37d7f6e19588de79b5d91b20d66"
+                "reference": "750a420b8dd0af3d6e1c6c1412802abf2cdd2b6c"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/http-client/zipball/9dd7ba9dc326b37d7f6e19588de79b5d91b20d66",
-                "reference": "9dd7ba9dc326b37d7f6e19588de79b5d91b20d66",
+                "url": "https://api.github.com/repos/symfony/http-client/zipball/750a420b8dd0af3d6e1c6c1412802abf2cdd2b6c",
+                "reference": "750a420b8dd0af3d6e1c6c1412802abf2cdd2b6c",
                "shasum": ""
            },
            "require": {
@@ -1523,7 +1522,7 @@
                "http"
            ],
            "support": {
-                "source": "https://github.com/symfony/http-client/tree/v7.4.22"
+                "source": "https://github.com/symfony/http-client/tree/v7.4.20"
            },
            "funding": [
                {
@@ -1543,7 +1542,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-10-26T21:52:50+00:00"
+            "time": "2026-09-24T11:02:13+00:00"
        },
        {
            "name": "symfony/http-client-contracts",
@@ -2653,16 +2652,16 @@
        },
        {
            "name": "symfony/runtime",
-            "version": "v7.4.22",
+            "version": "v7.4.14",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/runtime.git",
-                "reference": "b2c5957ced36512af5ac68bf4a9afeca76361234"
+                "reference": "15497f743dd714f3167cb6a56509b9d42e6417b3"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/runtime/zipball/b2c5957ced36512af5ac68bf4a9afeca76361234",
-                "reference": "b2c5957ced36512af5ac68bf4a9afeca76361234",
+                "url": "https://api.github.com/repos/symfony/runtime/zipball/15497f743dd714f3167cb6a56509b9d42e6417b3",
+                "reference": "15497f743dd714f3167cb6a56509b9d42e6417b3",
                "shasum": ""
            },
            "require": {
@@ -2714,7 +2713,7 @@
                "runtime"
            ],
            "support": {
-                "source": "https://github.com/symfony/runtime/tree/v7.4.22"
+                "source": "https://github.com/symfony/runtime/tree/v7.4.14"
            },
            "funding": [
                {
@@ -2734,7 +2733,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-10-23T12:52:46+00:00"
+            "time": "2026-06-05T06:22:21+00:00"
        },
        {
            "name": "symfony/service-contracts",
@@ -3084,16 +3083,16 @@
        },
        {
            "name": "symfony/yaml",
-            "version": "v7.4.22",
+            "version": "v7.4.20",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/yaml.git",
-                "reference": "1ed6afa13d48c579c51cbf32e38f50686313497b"
+                "reference": "0222bf4dfaa1e3ceb8fff579635d655f2950d5a7"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/yaml/zipball/1ed6afa13d48c579c51cbf32e38f50686313497b",
-                "reference": "1ed6afa13d48c579c51cbf32e38f50686313497b",
+                "url": "https://api.github.com/repos/symfony/yaml/zipball/0222bf4dfaa1e3ceb8fff579635d655f2950d5a7",
+                "reference": "0222bf4dfaa1e3ceb8fff579635d655f2950d5a7",
                "shasum": ""
            },
            "require": {
@@ -3136,7 +3135,7 @@
            "description": "Loads and dumps YAML files",
            "homepage": "https://symfony.com",
            "support": {
-                "source": "https://github.com/symfony/yaml/tree/v7.4.22"
+                "source": "https://github.com/symfony/yaml/tree/v7.4.20"
            },
            "funding": [
                {
@@ -3156,7 +3155,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-10-18T14:39:27+00:00"
+            "time": "2026-09-26T06:31:10+00:00"
        }
    ],
    "packages-dev": [
@@ -3397,11 +3396,11 @@
        },
        {
            "name": "phpstan/phpstan",
-            "version": "2.3.5",
+            "version": "2.3.1",
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/645a1bd6bead15fc1b8474137467961d0fa30a79",
-                "reference": "645a1bd6bead15fc1b8474137467961d0fa30a79",
+                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/6155239b488e95d26d1ebd95c6b4bb294d7f09db",
+                "reference": "6155239b488e95d26d1ebd95c6b4bb294d7f09db",
                "shasum": ""
            },
            "require": {
@@ -3457,8 +3456,7 @@
                    "type": "github"
                }
            ],
-            "time": "2026-11-03T12:14:22+00:00",
-            "published-time": "2026-11-03T12:14:36+00:00"
+            "time": "2026-10-08T21:09:11+00:00"
        },
        {
            "name": "phpunit/php-code-coverage",
@@ -4941,16 +4939,16 @@
        },
        {
            "name": "symfony/phpunit-bridge",
-            "version": "v7.4.22",
+            "version": "v7.4.18",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/phpunit-bridge.git",
-                "reference": "6acbf2203c2364dc55376644aafba180bcac3ae1"
+                "reference": "ff3a78aceb731b24b256a2845a8ad6e6851f942b"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/phpunit-bridge/zipball/6acbf2203c2364dc55376644aafba180bcac3ae1",
-                "reference": "6acbf2203c2364dc55376644aafba180bcac3ae1",
+                "url": "https://api.github.com/repos/symfony/phpunit-bridge/zipball/ff3a78aceb731b24b256a2845a8ad6e6851f942b",
+                "reference": "ff3a78aceb731b24b256a2845a8ad6e6851f942b",
                "shasum": ""
            },
            "require": {
@@ -5002,7 +5000,7 @@
                "testing"
            ],
            "support": {
-                "source": "https://github.com/symfony/phpunit-bridge/tree/v7.4.22"
+                "source": "https://github.com/symfony/phpunit-bridge/tree/v7.4.18"
            },
            "funding": [
                {
@@ -5022,7 +5020,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-10-18T14:39:27+00:00"
+            "time": "2026-08-30T18:28:44+00:00"
        },
        {
            "name": "theseer/tokenizer",
@@ -5081,8 +5079,8 @@
    "prefer-stable": false,
    "prefer-lowest": false,
    "platform": {
-        "php": ">=8.3"
+        "php": ">=8.2"
    },
    "platform-dev": {},
-    "plugin-api-version": "2.11.0"
+    "plugin-api-version": "2.9.0"
 }
@@ -15,7 +15,6 @@
      "matchPackageNames": [
        "/^symfony//",
        "!symfony/flex",
-        "!symfony/monolog-bundle",
        "!/^symfony/polyfill-/",
        "!/-contracts$/"
      ]