From 576c5c9ee0b363dd9e36f131869423424ec74f56 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 16 Mar 2026 22:34:09 +0000 Subject: [PATCH 1/7] Bump geekyeggo/delete-artifact from 5 to 6 in the all-actions group Bumps the all-actions group with 1 update: [geekyeggo/delete-artifact](https://github.com/geekyeggo/delete-artifact). Updates `geekyeggo/delete-artifact` from 5 to 6 - [Release notes](https://github.com/geekyeggo/delete-artifact/releases) - [Changelog](https://github.com/GeekyEggo/delete-artifact/blob/main/CHANGELOG.md) - [Commits](https://github.com/geekyeggo/delete-artifact/compare/v5...v6) --- updated-dependencies: - dependency-name: geekyeggo/delete-artifact dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/php.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml index 1e22c64..3a2f787 100644 --- a/.github/workflows/php.yml +++ b/.github/workflows/php.yml @@ -286,6 +286,6 @@ jobs: (needs.unit-tests-linux.result == 'success' && needs.coverage.result == 'skipped') steps: - - uses: geekyeggo/delete-artifact@v5 + - uses: geekyeggo/delete-artifact@v6 with: name: coverage-data From 3b149e074228eaa8ff4bec968a055b1107c24681 Mon Sep 17 00:00:00 2001 From: Tim van Dijen Date: Fri, 20 Mar 2026 20:50:24 +0100 Subject: [PATCH 2/7] Drop composer-require-checker --- .github/workflows/php.yml | 1 - composer.json | 1 - 2 files changed, 2 deletions(-) diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml index 3a2f787..4a2b22c 100644 --- a/.github/workflows/php.yml +++ b/.github/workflows/php.yml @@ -194,7 +194,6 @@ jobs: run: | composer-unused \ --excludePackage=icanhazstring/composer-unused \ - --excludePackage=maglnet/composer-require-checker \ --excludePackage=phpstan/phpstan \ --excludePackage=phpstan/extension-installer \ --excludePackage=phpstan/phpstan-mockery \ diff --git a/composer.json b/composer.json index a65d742..bd5859c 100644 --- a/composer.json +++ b/composer.json @@ -26,7 +26,6 @@ "ext-curl": "*", "icanhazstring/composer-unused": "^0.9", - "maglnet/composer-require-checker": "^4.19", "phpstan/extension-installer": "^1.4", "phpstan/phpstan": "^2.1", "phpstan/phpstan-mockery": "^2.0", From 6d552dec50f064883f297d1f95c5250de29173ef Mon Sep 17 00:00:00 2001 From: Tim van Dijen Date: Fri, 20 Mar 2026 23:49:25 +0100 Subject: [PATCH 3/7] Use composer.json for cache key --- .github/workflows/php.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml index 4a2b22c..da4d268 100644 --- a/.github/workflows/php.yml +++ b/.github/workflows/php.yml @@ -78,7 +78,7 @@ jobs: uses: actions/cache@v5 with: path: ${{ env.COMPOSER_CACHE }} - key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }} + key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.json') }} restore-keys: ${{ runner.os }}-composer- - name: Install Composer dependencies @@ -141,7 +141,7 @@ jobs: uses: actions/cache@v5 with: path: ${{ env.COMPOSER_CACHE }} - key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }} + key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.json') }} restore-keys: ${{ runner.os }}-composer- - name: Install Composer dependencies @@ -178,7 +178,7 @@ jobs: uses: actions/cache@v5 with: path: ${{ env.COMPOSER_CACHE }} - key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }} + key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.json') }} restore-keys: ${{ runner.os }}-composer- - name: Validate composer.json and composer.lock @@ -241,7 +241,7 @@ jobs: uses: actions/cache@v5 with: path: ${{ env.COMPOSER_CACHE }} - key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }} + key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.json') }} restore-keys: ${{ runner.os }}-composer- - name: Install Composer dependencies From d4ae0c902e3b92200e76fdc0a2ed8972c82e03d7 Mon Sep 17 00:00:00 2001 From: Tim van Dijen Date: Sat, 21 Mar 2026 15:19:06 +0100 Subject: [PATCH 4/7] Fix Windows-cache --- .github/workflows/php.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml index da4d268..7e41606 100644 --- a/.github/workflows/php.yml +++ b/.github/workflows/php.yml @@ -141,7 +141,7 @@ jobs: uses: actions/cache@v5 with: path: ${{ env.COMPOSER_CACHE }} - key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.json') }} + key: ${{ runner.os }}-composer-${{ hashFiles('**\composer.json') }} restore-keys: ${{ runner.os }}-composer- - name: Install Composer dependencies From f8ac3684e9c6c01a4c8fa282834e880fee331e08 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 23 Mar 2026 22:34:04 +0000 Subject: [PATCH 5/7] Bump the all-actions group with 2 updates Bumps the all-actions group with 2 updates: [simplesamlphp/simplesamlphp-test-framework/.github/workflows/reusable_phplinter.yml](https://github.com/simplesamlphp/simplesamlphp-test-framework) and [simplesamlphp/simplesamlphp-test-framework/.github/workflows/reusable_linter.yml](https://github.com/simplesamlphp/simplesamlphp-test-framework). Updates `simplesamlphp/simplesamlphp-test-framework/.github/workflows/reusable_phplinter.yml` from 1.11.4 to 1.11.5 - [Commits](https://github.com/simplesamlphp/simplesamlphp-test-framework/compare/v1.11.4...v1.11.5) Updates `simplesamlphp/simplesamlphp-test-framework/.github/workflows/reusable_linter.yml` from 1.11.4 to 1.11.5 - [Commits](https://github.com/simplesamlphp/simplesamlphp-test-framework/compare/v1.11.4...v1.11.5) --- updated-dependencies: - dependency-name: simplesamlphp/simplesamlphp-test-framework/.github/workflows/reusable_phplinter.yml dependency-version: 1.11.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-actions - dependency-name: simplesamlphp/simplesamlphp-test-framework/.github/workflows/reusable_linter.yml dependency-version: 1.11.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/php.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml index 7e41606..297e798 100644 --- a/.github/workflows/php.yml +++ b/.github/workflows/php.yml @@ -20,7 +20,7 @@ jobs: matrix: php-version: ['8.3', '8.4', '8.5'] - uses: simplesamlphp/simplesamlphp-test-framework/.github/workflows/reusable_phplinter.yml@v1.11.4 + uses: simplesamlphp/simplesamlphp-test-framework/.github/workflows/reusable_phplinter.yml@v1.11.5 with: php-version: ${{ matrix.php-version }} @@ -29,7 +29,7 @@ jobs: strategy: fail-fast: false - uses: simplesamlphp/simplesamlphp-test-framework/.github/workflows/reusable_linter.yml@v1.11.4 + uses: simplesamlphp/simplesamlphp-test-framework/.github/workflows/reusable_linter.yml@v1.11.5 with: enable_eslinter: false enable_jsonlinter: true From 20befd9d4d25b11c083b73ca06e12a3fc6c083f3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 30 Mar 2026 22:56:04 +0000 Subject: [PATCH 6/7] Bump codecov/codecov-action from 5 to 6 in the all-actions group Bumps the all-actions group with 1 update: [codecov/codecov-action](https://github.com/codecov/codecov-action). Updates `codecov/codecov-action` from 5 to 6 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/v5...v6) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/php.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml index 297e798..7d6eb7a 100644 --- a/.github/workflows/php.yml +++ b/.github/workflows/php.yml @@ -269,7 +269,7 @@ jobs: path: ${{ github.workspace }}/build - name: Codecov - uses: codecov/codecov-action@v5 + uses: codecov/codecov-action@v6 with: token: ${{ secrets.CODECOV_TOKEN }} fail_ci_if_error: true From ff0f2e0cc856fc8b5ef7a427c7caead772740c1a Mon Sep 17 00:00:00 2001 From: Tim van Dijen Date: Fri, 10 Apr 2026 09:57:53 +0200 Subject: [PATCH 7/7] Remove SimpleSAMLphp as a direct dependency --- .github/workflows/php.yml | 2 +- composer.json | 4 +++- tools/composer-require-checker.json | 11 +++++++++++ 3 files changed, 15 insertions(+), 2 deletions(-) diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml index 7d6eb7a..99d665c 100644 --- a/.github/workflows/php.yml +++ b/.github/workflows/php.yml @@ -188,7 +188,7 @@ jobs: run: composer install --no-progress --prefer-dist --optimize-autoloader - name: Check code for hard dependencies missing in composer.json - run: composer-require-checker check composer.json + run: composer-require-checker check --config-file=tools/composer-require-checker.json composer.json - name: Check code for unused dependencies in composer.json run: | diff --git a/composer.json b/composer.json index bd5859c..9ef42b9 100644 --- a/composer.json +++ b/composer.json @@ -32,12 +32,14 @@ "phpstan/phpstan-phpunit": "^2.0", "phpunit/phpunit": "^12.3 || ^13.0", "psr/log": "^3.0", - "simplesamlphp/simplesamlphp": "^2.5", "slevomat/coding-standard": "^8.25", "squizlabs/php_codesniffer": "^4.0", "symfony/phpunit-bridge": "^8.0", "twig/twig": "~3.23" }, + "require-dev": { + "simplesamlphp/simplesamlphp": "^2.5" + }, "support": { "issues": "https://github.com/simplesamlphp/simplesamlphp-test-framework/issues", "source": "https://github.com/simplesamlphp/simplesamlphp-test-framework" diff --git a/tools/composer-require-checker.json b/tools/composer-require-checker.json index eed71aa..3efcd31 100644 --- a/tools/composer-require-checker.json +++ b/tools/composer-require-checker.json @@ -1,4 +1,15 @@ { "symbol-whitelist": [ + "SimpleSAML\\Configuration", + "SimpleSAML\\Logger\\LoggingHandlerInterface", + "SimpleSAML\\Metadata\\MetaDataStorageHandler", + "SimpleSAML\\Module", + "SimpleSAML\\Session", + "SimpleSAML\\Store\\StoreFactory", + "SimpleSAML\\Store\\StoreInterface", + "SimpleSAML\\Utils", + "SimpleSAML\\Utils\\ClearableState", + "SimpleSAML\\Utils\\System", + "SimpleSAML\\XHTML\\Template" ] }