Repository navigation
chore(lib): update bundled vendor libraries - #265
Merged
Merged
Conversation
HTML Purifier 4.19.1, firebase/php-jwt 7.2.1, Monolog 3.12.1, Punic 3.8.2, Smarty 4.5.8, symfony/polyfill-mbstring 1.43.0, symfony/var-dumper 7.4.18, symfony/yaml 7.4.20, TCPDF 6.11.4 and webmozart/assert 2.5.0. All fit the existing composer.dist.json constraints; only the lock file and vendor/ change.
Contributor
Reviewer's guide (collapsed on small PRs)Reviewer's GuideThis PR updates ten bundled third-party PHP libraries to newer constraint-compatible patch/minor releases by refreshing composer.dist.lock and the committed vendor tree, regenerating Composer metadata, and documenting the update; no application dependency constraints are changed. File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
|
Important Review skippedAuto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Comment |
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #265 +/- ##
============================================
- Coverage 22.54% 22.54% -0.01%
Complexity 8666 8666
============================================
Files 685 685
Lines 46315 46316 +1
============================================
Hits 10444 10444
- Misses 35871 35872 +1 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
Monolog’s new hourly rotation mode calculates its next rotation at midnight, so long-running processes do not rotate logs hourly.
0 open findings
What changed in this PR
Updates ten bundled PHP dependencies, refreshes Composer metadata/autoloading, and records the upgrade.
Changes:
- Upgrades HTML Purifier, JWT, Monolog, Punic, Smarty, Symfony components, TCPDF, and Webmozart Assert.
- Incorporates upstream security, parser, logging, and compatibility fixes.
- Updates curated release notes.
| File | Description |
|---|---|
htdocs/xoops_lib/vendor/webmozart/assert/src/Mixin.php |
Adds assertion variants and generics. |
htdocs/xoops_lib/vendor/webmozart/assert/src/Assert.php |
Adds multi-key assertions. |
htdocs/xoops_lib/vendor/webmozart/assert/README.md |
Documents keysExist(). |
htdocs/xoops_lib/vendor/webmozart/assert/CHANGELOG.md |
Records 2.5.0 changes. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/VERSION |
Updates TCPDF version. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/tcpdf.php |
Adds deprecation notice. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/tcpdf_barcodes_2d.php |
Marks API deprecated. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/tcpdf_barcodes_1d.php |
Marks API deprecated. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/SECURITY.md |
Adds security policy. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/README.md |
Expands migration guidance. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/include/tcpdf_static.php |
Updates version and deprecation metadata. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/include/tcpdf_images.php |
Marks class deprecated. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/include/tcpdf_fonts.php |
Marks class deprecated. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/include/tcpdf_font_data.php |
Marks class deprecated. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/include/tcpdf_filters.php |
Marks class deprecated. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/include/tcpdf_colors.php |
Marks class deprecated. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/include/barcodes/qrcode.php |
Marks class deprecated. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/include/barcodes/pdf417.php |
Marks class deprecated. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/include/barcodes/datamatrix.php |
Marks class deprecated. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/composer.json |
Marks package abandoned. |
htdocs/xoops_lib/vendor/tecnickcom/tcpdf/CHANGELOG.TXT |
Records 6.11.4. |
htdocs/xoops_lib/vendor/symfony/yaml/Parser.php |
Updates YAML parsing behavior. |
htdocs/xoops_lib/vendor/symfony/yaml/Inline.php |
Updates inline YAML handling. |
htdocs/xoops_lib/vendor/symfony/var-dumper/Dumper/CliDumper.php |
Improves terminal detection. |
htdocs/xoops_lib/vendor/symfony/var-dumper/composer.json |
Adds Twig 4 compatibility. |
htdocs/xoops_lib/vendor/symfony/var-dumper/Command/Descriptor/HtmlDescriptor.php |
Escapes HTML descriptor data. |
htdocs/xoops_lib/vendor/symfony/var-dumper/Command/Descriptor/CliDescriptor.php |
Sanitizes CLI descriptor data. |
htdocs/xoops_lib/vendor/symfony/var-dumper/Caster/SplCaster.php |
Handles newer SPL deprecations. |
htdocs/xoops_lib/vendor/symfony/var-dumper/Caster/DateCaster.php |
Improves period calculation. |
htdocs/xoops_lib/vendor/smarty/smarty/libs/sysplugins/smarty_internal_runtime_updatecache.php |
Fixes cache code injection. |
htdocs/xoops_lib/vendor/smarty/smarty/libs/Smarty.class.php |
Updates Smarty version. |
htdocs/xoops_lib/vendor/smarty/smarty/CHANGELOG.md |
Records 4.5.8 security fix. |
htdocs/xoops_lib/vendor/punic/punic/src/Unit.php |
Applies formatting correction. |
htdocs/xoops_lib/vendor/punic/punic/src/Territory.php |
Corrects PHPDoc type. |
htdocs/xoops_lib/vendor/punic/punic/CHANGELOG.md |
Records 3.8.2. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Utils.php |
Adds formatter and sensitivity utilities. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Processor/IntrospectionProcessor.php |
Makes skip functions overridable. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Logger.php |
Adds PSR clock support. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Handler/TelegramBotHandler.php |
Improves Telegram handling. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Handler/SyslogUdpHandler.php |
Adds datagram-size control. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Handler/SyslogUdp/UdpSocket.php |
Enforces configured datagram size. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Handler/StreamHandler.php |
Handles partial writes. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Handler/SocketHandler.php |
Corrects write timeout tracking. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Handler/RotatingFileHandler.php |
Adds hourly rotation and wrapper cleanup. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Handler/LogMonsterHandler.php |
Adds activity watchdog handler. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Handler/FrankenPhpHandler.php |
Adds FrankenPHP handler. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Handler/FlowdockHandler.php |
Supports wrapped formatters. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Handler/ErrorLogHandler.php |
Removes unused import. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Handler/ElasticsearchHandler.php |
Supports wrapped formatters. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Handler/ElasticaHandler.php |
Supports wrapped formatters. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Handler/DeduplicationHandler.php |
Improves concurrent store writes. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Handler/BrowserConsoleHandler.php |
Prevents console-output XSS. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Handler/AbstractProcessingHandler.php |
Honors bubble overrides. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Formatter/WrappingFormatterInterface.php |
Defines formatter decorators. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Formatter/RedactingFormatter.php |
Adds sensitive-data redaction. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Formatter/NormalizerFormatter.php |
Improves trace normalization. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Formatter/JsonFormatter.php |
Corrects scalar normalization. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Formatter/GelfMessageFormatter.php |
Handles empty record fields. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/ErrorHandler.php |
Adds error stack capture. |
htdocs/xoops_lib/vendor/monolog/monolog/src/Monolog/Attribute/WithMonologChannel.php |
Supports parameter targets. |
htdocs/xoops_lib/vendor/monolog/monolog/README.md |
Updates logo reference. |
htdocs/xoops_lib/vendor/monolog/monolog/composer.json |
Adds optional PSR clock support. |
htdocs/xoops_lib/vendor/monolog/monolog/CHANGELOG.md |
Records 3.11–3.12.1 changes. |
htdocs/xoops_lib/vendor/firebase/php-jwt/VERSION |
Adds version marker. |
htdocs/xoops_lib/vendor/firebase/php-jwt/src/Key.php |
Applies formatting correction. |
htdocs/xoops_lib/vendor/firebase/php-jwt/src/JWT.php |
Bounds JWT segment splitting. |
htdocs/xoops_lib/vendor/firebase/php-jwt/src/JWK.php |
Reformats documentation. |
htdocs/xoops_lib/vendor/firebase/php-jwt/composer.json |
Refreshes development metadata. |
htdocs/xoops_lib/vendor/firebase/php-jwt/CHANGELOG.md |
Records JWT bug fix. |
htdocs/xoops_lib/vendor/ezyang/htmlpurifier/VERSION |
Updates HTML Purifier version. |
htdocs/xoops_lib/vendor/ezyang/htmlpurifier/library/HTMLPurifier/URISchemeRegistry.php |
Handles null schemes. |
htdocs/xoops_lib/vendor/ezyang/htmlpurifier/library/HTMLPurifier/Lexer.php |
Normalizes input type. |
htdocs/xoops_lib/vendor/ezyang/htmlpurifier/library/HTMLPurifier/Injector/RemoveSpansWithoutAttributes.php |
Updates storage API calls. |
htdocs/xoops_lib/vendor/ezyang/htmlpurifier/library/HTMLPurifier/Filter/ExtractStyleBlocks.php |
Normalizes filter input. |
htdocs/xoops_lib/vendor/ezyang/htmlpurifier/library/HTMLPurifier/DefinitionCache/Serializer.php |
Corrects cache permissions. |
htdocs/xoops_lib/vendor/ezyang/htmlpurifier/library/HTMLPurifier/Config.php |
Updates version metadata. |
htdocs/xoops_lib/vendor/ezyang/htmlpurifier/library/HTMLPurifier.php |
Updates version and string handling. |
htdocs/xoops_lib/vendor/ezyang/htmlpurifier/library/HTMLPurifier.includes.php |
Updates generated metadata. |
htdocs/xoops_lib/vendor/composer/installed.php |
Refreshes installed-package metadata. |
htdocs/xoops_lib/vendor/composer/installed.json |
Refreshes installed-package metadata. |
htdocs/xoops_lib/vendor/composer/autoload_static.php |
Registers new Monolog classes. |
htdocs/xoops_lib/vendor/composer/autoload_classmap.php |
Registers new Monolog classes. |
htdocs/xoops_lib/composer.dist.lock |
Locks upgraded dependencies. |
docs/changelog.270.txt |
Records bundled library versions. |
🧠 Review effort: Balanced
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
HTML Purifier 4.19.1, firebase/php-jwt 7.2.1, Monolog 3.12.1, Punic 3.8.2, Smarty 4.5.8, symfony/polyfill-mbstring 1.43.0, symfony/var-dumper 7.4.18, symfony/yaml 7.4.20, TCPDF 6.11.4 and webmozart/assert 2.5.0. All fit the existing composer.dist.json constraints; only the lock file and vendor/ change.
Summary by Sourcery
Update the bundled PHP dependencies to current compatible versions.
Enhancements:
Build:
Chores: