[jbdelhommeau]

The company behind this package is now Youtrust. This moves the package and its namespace accordingly, and realigns the PHP requirement with what the code and its dependencies actually need.

What changes

	before	after
Packagist	yousign/safe-migrations	youtrust/safe-migrations
PHP namespace	Yousign\SafeMigrations\	Youtrust\SafeMigrations\
Minimum PHP	^8.1	^8.3
Licence holder	yousign	Youtrust

Apart from the raised PHP floor, no functional change — the rest of the diff is a pure rename plus an upgrade section in the README.

Why a major version

The namespace is part of the public API, so this is a hard break for consumers. Two of the breaking spots live in configuration, not in PHP code, and are easy to miss:

• the middleware service id in services.yaml
• the use statement in the migration.php.tpl migration template

Both are called out in the new ## ⬆️ Upgrading section.

yousign/safe-migrations will be marked abandoned on Packagist, pointing at the new name. It gets no further release of any kind, security fixes included.

Raising the PHP floor from 8.1 to 8.3

The floor was picked from evidence rather than from a wish to look modern — this is a public package and excluding users needs a reason:

• Dependencies resolve from PHP 8.1 up. doctrine/migrations ^3.6 is what rules out 8.0; nothing rules out 8.1.
• The source runs on 8.2 and above. Verified on real interpreters, not static analysis: the suite is green on PHP 8.2, 8.3 and 8.4, each with its own dependency resolution.
• Support lifecycle is the binding constraint. PHP 8.1 left security support on 31 Dec 2025 and no longer appears in php.net's supported versions. PHP 8.2 leaves it on 31 Dec 2026, so it would be an EOL floor within months.

Hence 8.3, whose security support runs to 31 Dec 2027. The CI matrix loses its 8.1 and 8.2 rows; --prefer-lowest moves to 8.3 so DBAL 3 stays covered.

Left alone on purpose: symfony/string: ^6.4|^7.0|^8.0. Symfony 6.4 is still in support and runs fine on PHP 8.3, so narrowing that range is a separate call — say the word and I'll fold it in.

Verification

make tests on PHP 8.4.24, all green after the floor change:

composer validate --strict   ./composer.json is valid
phpstan analyse              [OK] No errors
phpunit                      26/26 OK (2 pre-existing deprecations)
php-cs-fixer --dry-run       Found 0 of 7 files that can be fixed

Plus the suite run on real 8.2 / 8.3 / 8.4 interpreters. grep -ri yousign . returns nothing outside .git.

Release plan, after merge

1. Tag v2.0.0.
2. Submit this repository to Packagist so the youtrust/safe-migrations package is created.
3. Publish the final v1.0.8 on the old package carrying the abandoned flag, and set Abandon on its Packagist page.

⚠️ Sequencing: publish that final v1.0.x bridge release before merging this PR. Once main declares the new package name, Packagist can no longer crawl a matching composer.json for the old package.

🤖 Generated with Claude Code

[jbdelhommeau]

@benconda your suggestion from the previous PR is in: minimum PHP is now ^8.3, and the CI matrix drops its 8.1 and 8.2 rows.

I left symfony/string: ^6.4|^7.0|^8.0 as is — Symfony 6.4 is still in support and runs on PHP 8.3, so dropping it felt like a separate decision rather than something to slip into this PR. Happy to add it if you want it in the same major.