Skip to content

Bump required dependencies for v2.0 - #294

Open
chalasr wants to merge 2 commits into
thephpleague:2.xfrom
chalasr:bump-deps-2.x
Open

Bump required dependencies for v2.0#294
chalasr wants to merge 2 commits into
thephpleague:2.xfrom
chalasr:bump-deps-2.x

Conversation

@chalasr

@chalasr chalasr commented Jul 21, 2026

Copy link
Copy Markdown
Member

Removes support for:

  • PHP < 8.4
  • Symfony < 7.4
  • Doctrine DBAL < 4
  • Doctrine ORM < 3
  • Lcobuxci JWT < 5

chalasr and others added 2 commits July 21, 2026 15:02
`AccessToken::initJwtConfiguration()` calls `Configuration::withBuilderFactory()`,
which was introduced in lcobucci/jwt 5.6 (and is required by league/oauth2-server
9.4). On lowest dependencies league/oauth2-server resolved to 9.3 and pulled an
older jwt lacking that method, breaking the Symfony 7.4 CI job. Declare the direct
dependency explicitly and drop the now-redundant `<5.0` conflict.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@ajgarlag

ajgarlag commented Jul 21, 2026

Copy link
Copy Markdown
Collaborator

What are your thoughts on keeping support for PHP 8.2? It's the minimum required version for Symfony 7.4 and league/oauth2-server latest release. See ajgarlag@d40b3d0

@chalasr

chalasr commented Jul 23, 2026

Copy link
Copy Markdown
Member Author

I was not 100% sure about the bump so fair enough, let's go with 8.2 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants