Jwt Laravel Package

Release Notes for 5.6.0

Feature release (minor)

5.6.0

• Total issues resolved: 1
• Total pull requests resolved: 1
• Total contributors: 2

Improvement

• 1133: Add PHP 8.5 support thanks to @Slamdunk
• 1131: PHP 8.5 support thanks to @acelaya

Release Notes for 5.4.3

5.4.x bugfix release (patch)

5.4.3

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Documentation

• 1102: Add PS256 etc algorithm support into docs. thanks to @SvenRtbg

Release Notes for 5.5.0

Feature release (minor)

5.5.0

• Total issues resolved: 0
• Total pull requests resolved: 5
• Total contributors: 2

Improvement

• 1097: Exclude .readthedocs.yaml and /renovate.json files from dist thanks to @Slamdunk
• 1092: Add migration API for readonly classes thanks to @Slamdunk

CI,Improvement

• 1095: CI: simplify workflows with ramsey/composer-install thanks to @Slamdunk

CI

• 1093: Set PHP nightly as 8.5 thanks to @Slamdunk

renovate

• 1088: Update codecov/codecov-action action to v5 thanks to @renovate[bot]

Release Notes for 5.4.2

5.4.x bugfix release (patch)

5.4.2

• Total issues resolved: 1
• Total pull requests resolved: 1
• Total contributors: 1

Bug

• 1082: Add #[SensitiveParameter] attribute to sensitive parameters thanks to @slknijnenburg

Release Notes for 5.4.1

This release fixes doc blocks to make sure static analysis tools can identify usage issues.

5.4.1

• Total issues resolved: 1
• Total pull requests resolved: 1
• Total contributors: 1

Bug

• 1076: Mark Builder methods as pure thanks to @b1rdex

Release Notes for 5.4.0

This release adds PHP 8.4 compatibility and improvements on the codebase.

5.4.0

• Total issues resolved: 0
• Total pull requests resolved: 4
• Total contributors: 3

Improvement

• 1071: Add PHP 8.4 support thanks to @cedric-anne
• 1063: Benchmarks: add EdDSA algorithm thanks to @Slamdunk
• 1056: Use attributes for PHPUnit thanks to @lcobucci
• 1055: Require PHP 8.2 thanks to @lcobucci

Release Notes for 5.3.0

This release ships a new validation constraint to assert that a private claim exists.

5.3.0

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Improvement

• 1053: Add constraint to verify the existence of a custom claim thanks to @freebuu

Release Notes for 5.2.0

This release provides an API to ease key rotation procedures and dependency updates.

5.2.0

• Total issues resolved: 0
• Total pull requests resolved: 2
• Total contributors: 1

Improvement

• 1033: Add support to validate against multiple keys thanks to @lcobucci
• 1032: Remove requirement of core PHP extensions thanks to @lcobucci

Release Notes for 5.1.0

This releases compatibility guarantees with PHP 8.3 and adds testing against PHP 8.4-dev.

5.1.0

• Total issues resolved: 1
• Total pull requests resolved: 8
• Total contributors: 4

Dependencies

• 1030: Support PHP 8.3 thanks to @javer

renovate

• 1025: Update all non-major dependencies thanks to @renovate[bot]

• 1017: Update dependency phpstan/phpstan to v1.10.26 thanks to @renovate[bot]

• 1016: Update dependency lcobucci/coding-standard to v11 thanks to @renovate[bot]

• 1006: Lock file maintenance thanks to @renovate[bot]

• 1004: Update all non-major dependencies thanks to @renovate[bot]

• 1010: Fixed naming of assertShouldRaiseExceptionWhenSignatureIsValid() thanks to @rhertogh

Improvement

• 1002: Improve benchmarks thanks to @lcobucci

Release Notes for 5.0.0

This release removes deprecated components, makes PHP 8.1 the minimum required version, and ships some API improvements.

5.0.0

• Total issues resolved: 2
• Total pull requests resolved: 25
• Total contributors: 9

BC-break

• 979: Builder: make it immutable thanks to @Slamdunk
• 939: Remove empty Signer, empty Key, empty Signature, empty strings thanks to @Slamdunk
• 937: Remove \Lcobucci\JWT\Signer\None thanks to @Slamdunk
• 873: Use abstraction instead of concretion thanks to @lcobucci
• 872: Remove deprecated components thanks to @lcobucci
• 871: Require PHP 8.1+ thanks to @lcobucci
• 969: 4.3.x merge up into 5.0.x thanks to @lcobucci

Minor BC-break

• 967: Make testing less painful thanks to @lcobucci

Improvement

• 1001: Support other PSR-20 implementations thanks to @lcobucci
• 977: Builder fluent interface is confusing thanks to @Slamdunk
• 960: Setup Renovate as a replacement for Dependabot thanks to @Ocramius
• 931: Make test assertion more strict thanks to @peter279k
• 880: PHP Version constraint: stick to tested versions only thanks to @Slamdunk

CI

• 1000: Update docs and CI files thanks to @lcobucci
• 999: Use roave/backward-compatibility-check directly thanks to @lcobucci

Dependencies

• 998: Update to PHPUnit 10 thanks to @Slamdunk
• 988: Merge release 4.3.0 into 5.0.x thanks to @github-actions[bot]
• 984: Update dependency phpstan/phpstan to ^1.9.4 thanks to @renovate[bot]
• 906: Bump phpstan/phpdoc-parser from 1.7.0 to 1.8.0 thanks to @dependabot[bot]
• 905: Bump nikic/php-parser from 4.14.0 to 4.15.1 thanks to @dependabot[bot]
• 904: Bump phpstan/phpstan from 1.8.3 to 1.8.5 thanks to @dependabot[bot]
• 902: Bump phpstan/phpstan-strict-rules from 1.4.2 to 1.4.3 thanks to @dependabot[bot]
• 898: Bump phpstan/phpstan from 1.8.2 to 1.8.3 thanks to @dependabot[bot]
• 973: Update all non-major dependencies thanks to @renovate[bot]

Documentation

• 981: [docs] Fix typo in code example comment thanks to @LauLaman
• 909: Clarify Ecdsa\Sha512::expectedKeyLength() thanks to @enumag
• 882: Fix typo: you must create a new token builder thanks to @Slamdunk

Release Notes for 4.3.0

Feature release (minor)

4.3.0

• Total issues resolved: 0
• Total pull requests resolved: 4
• Total contributors: 4

Dependencies,Improvement

• 986: Allow lcobucci/clock:^3.0 to be installed with lcobucci/jwt:^4 thanks to @Ocramius

Improvement,Minor BC-break

• 968: Deprecate Ecdsa create thanks to @lcobucci

Improvement

• 938: Deprecate empty Signer, empty Key and empty Signature thanks to @Slamdunk

Documentation

• 879: fix typo : you must create a new token builder, thanks to @roxie-dev

Release Notes for 4.2.1

This release fixes a documentation mistake.

4.2.1

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Documentation,Minor BC-break

• 874: Make method explicitly internal thanks to @lcobucci

Release Notes for 4.2.0

This release provides a high-level API, a new (non-standard) algorithm, and validation for key length requirements. The latter is a minor BC-break for users that aren't following the RFC recommendations.

To contain the impact of the changes and give time for people to rotate keys, we have deprecated implementations that maintain the previous behaviour and allow unsafe keys. For more information, please read the documentation.

4.2.0

• Total issues resolved: 3
• Total pull requests resolved: 15
• Total contributors: 7

Documentation

• 866: Improve documentation thanks to @lcobucci
• 853: Add documentation for JwtFacade thanks to @lcobucci
• 768: Be more clear about adding validation constraints in the doc thanks to @NicolasCARPi
• 725: [docs] Clarify change in date-formats thanks to @jaylinski

Improvement

• 865: Track constraint on violations thanks to @lcobucci
• 836: Key: require non-empty-string for factory methods too thanks to @Slamdunk
• 832: Add Blake2b signature algorithm thanks to @Slamdunk
• 827: Add constraint for private claim validation thanks to @james-bw
• 826: Add withClaim validation for custom claim validation thanks to @james-bw
• 759: Add simplified API thanks to @Slamdunk

Improvement,Minor BC-break,Security

• 864: Fix ecdsa key size validation thanks to @lcobucci
• 855: Require minimum key size for OpenSSL keys thanks to @Slamdunk
• 854: Require minimum key size for RSA keys thanks to @lcobucci
• 835: Require minimum key size for HMAC algorithm thanks to @Slamdunk
• 833: Key: permit empty keys only with ::empty() factory method thanks to @Slamdunk

Security

• 789: Merge release 4.1.5 into 4.2.x thanks to @github-actions[bot]

• 704: Invalid signing with SHA256 alg using secp521r1 curve thanks to @KartaviK

CI

• 657: Migrate to native dependabot thanks to @lcobucci

Release Notes for 4.1.5

This patch ships a minor security fix to prevent misuse of the LocalFileReference key.

More info: https://github.com/lcobucci/jwt/security/advisories/GHSA-7322-jrq4-x5hf

4.1.5

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Security

• 788: Merge release 4.0.4 into 4.1.x thanks to @github-actions[bot]

Release Notes for 4.0.4

This patch ships a minor security fix to prevent misuse of the LocalFileReference key.

More info: More info: https://github.com/lcobucci/jwt/security/advisories/GHSA-7322-jrq4-x5hf

4.0.4

• Total issues resolved: 0
• Total pull requests resolved: 0
• Total contributors: 0

Release Notes for 3.4.6

This patch ships a minor security fix to prevent misuse of the LocalFileReference key.

More info: More info: https://github.com/lcobucci/jwt/security/advisories/GHSA-7322-jrq4-x5hf

3.4.6

• Total issues resolved: 1
• Total pull requests resolved: 0
• Total contributors: 3

Release Notes for 4.1.4

This release removes the possibility of having parsing issues when dealing with time-fractions with more than 6 decimal places.

4.1.4

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Bug

• 711: Merge release 4.0.3 into 4.1.x thanks to @github-actions[bot]

Release Notes for 4.0.3

This release removes the possibility of having parsing issues when dealing with time-fractions with more than 6 decimal places.

4.0.3

• Total issues resolved: 1
• Total pull requests resolved: 1
• Total contributors: 2

Bug

• 710: Prevent type conversions issues when parsing time-fractions thanks to @lcobucci
• 709: Usage of json_encode() to convert time fractions to microseconds cause precision issues thanks to @sachchida1993

Release Notes for 4.1.3

This release fixes a specification compatibility issue by making sure we use floats to represent time fractions.

4.1.3

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Bug

• 707: Merge release 4.0.2 into 4.1.x thanks to @github-actions[bot]

Release Notes for 4.0.2

This release fixes a specification compatibility issue by making sure we use floats to represent time fractions.

4.0.2

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Bug

• 706: Fix usage of non JSON numeric values for time fractions (without having precision issues) thanks to @yassinrais

Release Notes for 4.1.2

This release fixes the polyfill for sodium base64 encoding.

4.1.2

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Bug

• 685: Fix SodiumBase64Polyfill fallback method reference thanks to @Slamdunk

Release Notes for 4.1.1

This release makes it possible to use the library when libsodium < 1.0.14 is installed.

4.1.1

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

Bug

• 670: Fix compatibility issues with older libsodium version (< 1.0.14) thanks to @Slamdunk

Release Notes for 3.4.5

This release fixes an issue with the compatibility layer that disallowed us to use composer's classmap-authoritative autoload.

3.4.5

• Total issues resolved: 1
• Total pull requests resolved: 1
• Total contributors: 1

Bug

• 667: Support composer classmap-authoritative option thanks to @fyrye

Release Notes for 3.4.4

This release fixes a gap on our forward compatibility layer with v4 for multiple audience support, improving the documentation to state how users can migrate their code.

3.4.4

• Total issues resolved: 0
• Total pull requests resolved: 2
• Total contributors: 2

Bug

• 656: Fix forward compatibility layer gap for audience claim thanks to @lcobucci

Documentation,Improvement

• 630: Improve deprecation for aud claims thanks to @SvenRtbg

Release Notes for 4.1.0

This release provides a new algorithm (EdDSA over Curve25519) and a claim formatted that always uses integers for date claims.

4.1.0

• Total issues resolved: 1
• Total pull requests resolved: 37
• Total contributors: 8

Improvement

• 617: Provide the UnixTimestampDates formatter thanks to @Slamdunk
• 616: Expose interface that represents unencrypted tokens thanks to @Slamdunk
• 613: Prefer ext-sodium cache-timing-safe functions thanks to @Slamdunk
• 605: Implement EdDSA Signer thanks to @Slamdunk
• 555: Add StrictValidAt constraint, deprecate ValidAt to LooseValidAt thanks to @Slamdunk
• 554: [v4.0] Add stricter ValidAt constraint thanks to @Slamdunk

Documentation

• 607: Fix typo in validating-tokens.md thanks to @hunomina
• 601: Fix letter case error thanks to @baijunyao
• 600: Fix autoload.php path error thanks to @baijunyao
• 591: Fix validation documentation thanks to @vmikhav
• 572: Update validating-tokens.md thanks to @nikafzar

CI

• 624: Ignore mutations for now thanks to @lcobucci
• 619: Improve CI configuration thanks to @t0mmy742
• 614: [CI] Lint composer.json thanks to @Slamdunk

Dependencies

• 639: Bump infection/infection from 0.20.2 to 0.21.0 thanks to @dependabot-preview[bot]
• 599: Bump dealerdirect/phpcodesniffer-composer-installer from 0.7.0 to 0.7.1 thanks to @dependabot-preview[bot]
• 598: Bump phpstan/phpstan from 0.12.58 to 0.12.59 thanks to @dependabot-preview[bot]
• 597: Bump phpunit/phpunit from 9.4.4 to 9.5.0 thanks to @dependabot-preview[bot]
• 596: Bump nikic/php-parser from 4.10.2 to 4.10.3 thanks to @dependabot-preview[bot]
• 589: Bump phpunit/phpunit from 9.4.3 to 9.4.4 thanks to @dependabot-preview[bot]
• 588: Bump symfony/process from 5.1.9 to 5.2.0 thanks to @dependabot-preview[bot]
• 587: Bump symfony/string from 5.1.9 to 5.2.0 thanks to @dependabot-preview[bot]
• 586: Bump symfony/options-resolver from 5.1.9 to 5.2.0 thanks to @dependabot-preview[bot]
• 585: Bump symfony/finder from 5.1.9 to 5.2.0 thanks to @dependabot-preview[bot]
• 584: Bump symfony/console from 5.1.9 to 5.2.0 thanks to @dependabot-preview[bot]
• 583: Bump symfony/filesystem from 5.1.9 to 5.2.0 thanks to @dependabot-preview[bot]
• 581: Bump phar-io/version from 3.0.2 to 3.0.3 thanks to @dependabot-preview[bot]
• 580: Bump symfony/console from 5.1.8 to 5.1.9 thanks to @dependabot-preview[bot]
• 579: Bump symfony/debug from 4.4.16 to 4.4.17 thanks to @dependabot-preview[bot]
• 578: Bump symfony/filesystem from 5.1.8 to 5.1.9 thanks to @dependabot-preview[bot]
• 577: Bump symfony/finder from 5.1.8 to 5.1.9 thanks to @dependabot-preview[bot]
• 576: Bump symfony/string from 5.1.8 to 5.1.9 thanks to @dependabot-preview[bot]
• 575: Bump symfony/process from 5.1.8 to 5.1.9 thanks to @dependabot-preview[bot]
• 574: Bump symfony/options-resolver from 5.1.8 to 5.1.9 thanks to @dependabot-preview[bot]
• 573: Bump phpstan/phpstan from 0.12.57 to 0.12.58 thanks to @dependabot-preview[bot]
• 571: Bump phpunit/php-code-coverage from 9.2.4 to 9.2.5 thanks to @dependabot-preview[bot]
• 570: Bump sebastian/lines-of-code from 1.0.2 to 1.0.3 thanks to @dependabot-preview[bot]
• 567: Bump phpunit/php-code-coverage from 9.2.3 to 9.2.4 thanks to @dependabot-preview[bot]

Release Notes for 4.0.1

This release fixes the validation logic of the expiration claim, making sure we're properly following the RFC.

4.0.1

• Total issues resolved: 0
• Total pull requests resolved: 2
• Total contributors: 2

Bug

• 636: Token must expire the exact time of "exp" claim thanks to @Slamdunk

Documentation

• 632: Use the correct class name for in-memory keys in documentation thanks to @lots0logs

• Total issues resolved: 0
• Total pull requests resolved: 2
• Total contributors: 2

Bug

• 635: Token must expire the exact time of "exp" claim thanks to @Slamdunk

Documentation

• 634: Fix argument name in [@param](https://github.com/param) annotation of OpenSSL#doVerify() thanks to @chalasr

• Total issues resolved: 1
• Total pull requests resolved: 1
• Total contributors: 1

Bug

• 595: Avoid conflicts with other polyfills thanks to @digibeuk

This release fixes a bug and a BC-break introduced in v3.4.0.

• Total issues resolved: 1
• Total pull requests resolved: 2
• Total contributors: 2

Bug

• 562: Fix validation of the audience claim on the new API thanks to @b-water

BC-break

• 561: Remove RegisteredClaimGiven exception in favour of deprecation message for withClaim thanks to @Spomky

This release ships several API improvements, making this lib much more extensible and easier to use. It requires PHP 7.4 and it's compatible with PHP 8.0 as well (the latest RC).

Please follow our upgrading guide to perform the necessary adjustments to your code.

• Total issues resolved: 32
• Total pull requests resolved: 196
• Total contributors: 23

BC-break

• 533: Extract interface for keys thanks to @lcobucci
• 538: Rename getters thanks to @lcobucci
• 247: Use OpenSSL to handle ECDSA signature thanks to @lcobucci
• 113: Improve token builder interface thanks to @lcobucci
• 73: Replaced Token->validate with Validator class handling token validation thanks to @dannydorfel
• 72: Token Validation API thanks to @schnittstabil
• 52: Do we really need to throw an exception when verifying the signature of an unsigned token? thanks to @lcobucci
• 51: Move to PHP 7 thanks to @lcobucci

Improvement

• 544: Only prefix file:// if doesn't exist already thanks to @Sephster
• 536: Rename key implementation thanks to @lcobucci
• 531: Use lib exceptions thanks to @lcobucci
• 526: Minor improvements on docs and performance thanks to @lcobucci
• 508: Pull JOSE encoder back thanks to @lcobucci
• 462: Fix base exception concept thanks to @lcobucci
• 454: Allow users to configure format for date registered claims thanks to @t0mmy742
• 431: PHP 8.0 compatibility thanks to @lcobucci
• 399: Move object initialisation to constructor thanks to @lcobucci
• 355: add toString method thanks to @p4veI
• 351: Validator: raise exception when no constraint is given thanks to @Slamdunk
• 325: Allow users to provide custom token builders thanks to @lcobucci
• 319: adds tests for ES512 algorithm thanks to @ffflabs
• 292: Make audience argument variadic in builder thanks to @lcobucci and @samjudge
• 287: Require PHPUnit v8.0 thanks to @lcobucci
• 286: Upgrade Infection to 0.12 thanks to @lcobucci
• 285: Upgrade PHPStan to v0.11 thanks to @lcobucci
• 281: Fix deprecation notices thanks to @lcobucci
• 277: Upgrade infection thanks to @lcobucci
• 276: ECDSA Alg improvements thanks to @Spomky
• 275: Revert "Remove assertion count manipulation" thanks to @lcobucci
• 272: Various minor improvements thanks to @lcobucci
• 271: Add leeway to ValidAt constraint thanks to @lcobucci
• 270: Remove assertion count manipulation thanks to @lcobucci
• 269: Make build more strict thanks to @lcobucci
• 264: Add validation constraints to configuration object thanks to @daniruizcamacho
• 224: Improve build tools thanks to @lcobucci
• 204: Add validation constraints to configuration object thanks to @lcobucci
• 202: Remove file level docblock from all files thanks to @lcobucci
• 201: Improve build process thanks to @lcobucci
• 200: Re-enable Humbug since we now have a RC version thanks to @lcobucci
• 199: 198: Add CS checking to build thanks to @vanbrabantf
• 198: Add PHPCS as a dev dependency thanks to @lcobucci
• 197: Switched public and final to match PSR2 thanks to @vanbrabantf
• 189: Add PHPBench as performance test tool thanks to @lcobucci
• 188: Add PHPCS configuration thanks to @lcobucci
• 187: Implement ECDSA signer that uses OpenSSL thanks to @lcobucci
• 180: Use a time provider instead on ValidAt constraint thanks to @lcobucci
• 171: Handle claims conversion thanks to @lcobucci and @henriquemoody
• 170: Enhancement: Keep packages sorted without specifying --sort-packages thanks to @localheinz
• 169: Enhancement: Add .gitattributes thanks to @localheinz
• 168: Fix: Cache dependencies installed with composer between builds thanks to @localheinz
• 167: Fix: Remove unused imports thanks to @localheinz
• 166: Add keys to config thanks to @lcobucci
• 165: Simplify registered claims usage thanks to @lcobucci
• 164: Rename builder methods thanks to @lcobucci
• 163: Fix RSA failures and add tests to it thanks to @lcobucci
• 161: Add key(s) to configuration object thanks to @lcobucci
• 160: Create none signer thanks to @lcobucci
• 159: Move string references of registered claims to constants thanks to @lcobucci
• 153: Require PHP 7.1 thanks to @lcobucci
• 146: Require PHP 7.1 thanks to @lcobucci
• 139: Use a time provider to get the current system time thanks to @lcobucci
• 131: Make sure there are no duplicated audiences while building token thanks to @lcobucci
• 130: Extract the registered claim names to constants thanks to @lcobucci
• 129: Create new validation API thanks to @lcobucci
• 122: Simplify signer API thanks to @lcobucci
• 118: Improve tests and add humbug thanks to @lcobucci
• 117: Improve the token interface thanks to @lcobucci
• 95: Removing some bad mutations thanks to @lcobucci
• 84: Using external coverage (and keeping track of just unit tests coverage). thanks to @lcobucci
• 78: Allow arrays or audience claim and issuer validation. thanks to @SamThePsychoticLeprechaun
• 74: Introducing a configuration object thanks to @lcobucci
• 49: Introduce configuration object thanks to @lcobucci
• 38: Extract Encoder and Decoder so they can be used in other libs thanks to @lcobucci
• 29: Private/public claims validation thanks to @lcobucci

Documentation

• 534: Final preparations for 4.0.0-beta1 thanks to @lcobucci
• 326: Create documentation thanks to @lcobucci
• 94: Add information about how to extend the library thanks to @lcobucci
• 242: Fix travis link in readme thanks to @BackEndTea
• 221: Make it super obvious that the stable docs are at at 3.2 branch. thanks to @frankdejonge
• 218: Update license year thanks to @m1guelpf
• 208: Add information about Auth0's support thanks to @lcobucci
• 184: Fix README.md link to issue #37 thanks to @ricardoseriani
• 125: Documentation is incorrect / refers to changes not yet in dev-master thanks to @gramorris
• 87: Update required PHP version thanks to @Nyholm

Bug

• 121: Just try to send the report when it exists thanks to @lcobucci
• 111: Update to latest manter/ecc thanks to @lcobucci and @craigcarnell

CI

• 461: Add makefile thanks to @lcobucci
• 429: Migrate to GH actions thanks to @lcobucci
• 337: Add more files to .gitattributes thanks to @reedy

Dependencies

• 535: Bump infection/infection from 0.20.1 to 0.20.2 thanks to @dependabot-preview[bot]
• 532: Bump phpstan/phpstan from 0.12.55 to 0.12.56 thanks to @dependabot-preview[bot]
• 530: Bump phpstan/phpstan from 0.12.54 to 0.12.55 thanks to @dependabot-preview[bot]
• 529: Bump myclabs/deep-copy from 1.10.1 to 1.10.2 thanks to @dependabot-preview[bot]
• 528: Bump composer/xdebug-handler from 1.4.4 to 1.4.5 thanks to @dependabot-preview[bot]
• 527: Bump seld/jsonlint from 1.8.2 to 1.8.3 thanks to @dependabot-preview[bot]
• 523: Bump doctrine/instantiator from 1.3.1 to 1.4.0 thanks to @dependabot-preview[bot]
• 522: Bump phpunit/phpunit from 9.4.2 to 9.4.3 thanks to @dependabot-preview[bot]
• 509: Bump phpstan/phpstan from 0.12.53 to 0.12.54 thanks to @dependabot-preview[bot]
• 507: Bump infection/infection from 0.20.0 to 0.20.1 thanks to @dependabot-preview[bot]
• 506: Bump infection/infection from 0.19.2 to 0.20.0 thanks to @dependabot-preview[bot] and @lcobucci
• 505: Bump phpstan/phpstan from 0.12.52 to 0.12.53 thanks to @dependabot-preview[bot]
• 504: Bump phpunit/php-code-coverage from 9.2.2 to 9.2.3 thanks to @dependabot-preview[bot]
• 503: Bump infection/infection from 0.19.1 to 0.19.2 thanks to @dependabot-preview[bot]
• 500: Bump symfony/debug from 4.4.15 to 4.4.16 thanks to @dependabot-preview[bot]
• 499: Bump symfony/options-resolver from 5.1.7 to 5.1.8 thanks to @dependabot-preview[bot]
• 497: Bump infection/infection from 0.19.0 to 0.19.1 thanks to @dependabot-preview[bot]
• 496: Bump phpunit/php-code-coverage from 9.2.1 to 9.2.2 thanks to @dependabot-preview[bot]
• 493: Bump symfony/filesystem from 5.1.7 to 5.1.8 thanks to @dependabot-preview[bot]
• 492: Bump doctrine/annotations from 1.11.0 to 1.11.1 thanks to @dependabot-preview[bot] and @lcobucci
• 491: Bump infection/infection from 0.18.2 to 0.19.0 thanks to @dependabot-preview[bot] and @lcobucci
• 490: Bump phpunit/php-code-coverage from 9.2.0 to 9.2.1 thanks to @dependabot-preview[bot]
• 489: Bump sebastian/comparator from 4.0.5 to 4.0.6 thanks to @dependabot-preview[bot]
• 488: Bump sebastian/global-state from 5.0.1 to 5.0.2 thanks to @dependabot-preview[bot]
• 487: Bump phpunit/php-timer from 5.0.2 to 5.0.3 thanks to @dependabot-preview[bot]
• 486: Bump sebastian/type from 2.3.0 to 2.3.1 thanks to @dependabot-preview[bot]
• 485: Bump sebastian/object-enumerator from 4.0.3 to 4.0.4 thanks to @dependabot-preview[bot]
• 484: Bump sebastian/diff from 4.0.3 to 4.0.4 thanks to @dependabot-preview[bot]
• 483: Bump sebastian/code-unit from 1.0.7 to 1.0.8 thanks to @dependabot-preview[bot]
• 482: Bump sanmai/pipeline from 5.0.1 to 5.1.0 thanks to @dependabot-preview[bot]
• 481: Bump phpunit/php-text-template from 2.0.3 to 2.0.4 thanks to @dependabot-preview[bot]
• 480: Bump doctrine/coding-standard from 8.1.0 to 8.2.0 thanks to @dependabot-preview[bot]
• 479: Bump phpstan/phpstan from 0.12.50 to 0.12.52 thanks to @dependabot-preview[bot] and @lcobucci
• 478: Bump symfony/polyfill-mbstring from 1.18.1 to 1.20.0 thanks to @dependabot-preview[bot]
• 477: Bump symfony/polyfill-php73 from 1.18.1 to 1.20.0 thanks to @dependabot-preview[bot]
• 475: Bump symfony/polyfill-intl-grapheme from 1.18.1 to 1.20.0 thanks to @dependabot-preview[bot]
• 476: Bump symfony/polyfill-ctype from 1.18.1 to 1.20.0 thanks to @dependabot-preview[bot]
• 474: Bump symfony/polyfill-php80 from 1.19.0 to 1.20.0 thanks to @dependabot-preview[bot]
• 473: Bump symfony/polyfill-intl-normalizer from 1.19.0 to 1.20.0 thanks to @dependabot-preview[bot]
• 472: Bump doctrine/annotations from 1.10.4 to 1.11.0 thanks to @dependabot-preview[bot] and @lcobucci
• 471: Bump composer/xdebug-handler from 1.4.3 to 1.4.4 thanks to @dependabot-preview[bot]
• 469: Bump squizlabs/php_codesniffer from 3.5.6 to 3.5.8 thanks to @dependabot-preview[bot]
• 464: Bump symfony/polyfill-php80 from 1.18.1 to 1.19.0 thanks to @dependabot-preview[bot]
• 463: Bump symfony/polyfill-intl-normalizer from 1.18.1 to 1.19.0 thanks to @dependabot-preview[bot]
• 460: Bump thecodingmachine/safe from 1.3.1 to 1.3.2 thanks to @dependabot-preview[bot]
• 459: Bump infection/infection from 0.17.3 to 0.18.2 thanks to @dependabot-preview[bot]
• 458: Bump phpunit/phpunit from 9.4.1 to 9.4.2 thanks to @dependabot-preview[bot]
• 457: Bump phpstan/phpstan from 0.12.49 to 0.12.50 thanks to @dependabot-preview[bot]
• 455: Bump lstrojny/functional-php from 1.14.0 to 1.14.1 thanks to @dependabot-preview[bot]
• 453: Bump phpstan/phpstan from 0.12.48 to 0.12.49 thanks to @dependabot-preview[bot]
• 451: Bump phpunit/phpunit from 9.4.0 to 9.4.1 thanks to @dependabot-preview[bot]
• 450: Bump thecodingmachine/safe from 1.3 to 1.3.1 thanks to @dependabot-preview[bot]
• 449: Bump thecodingmachine/safe from 1.2.1 to 1.3 thanks to @dependabot-preview[bot]
• 448: Bump sebastian/type from 2.2.2 to 2.3.0 thanks to @dependabot-preview[bot]
• 447: Bump slevomat/coding-standard from 6.4.0 to 6.4.1 thanks to @dependabot-preview[bot]
• 446: Bump symfony/filesystem from 5.1.6 to 5.1.7 thanks to @dependabot-preview[bot]
• 445: Bump symfony/options-resolver from 5.1.6 to 5.1.7 thanks to @dependabot-preview[bot]
• 444: Bump symfony/process from 5.1.6 to 5.1.7 thanks to @dependabot-preview[bot]
• 442: Bump symfony/debug from 4.4.14 to 4.4.15 thanks to @dependabot-preview[bot]
• 441: Bump symfony/finder from 5.1.6 to 5.1.7 thanks to @dependabot-preview[bot]
• 440: Bump symfony/console from 5.1.6 to 5.1.7 thanks to @dependabot-preview[bot]
• 439: Bump phpunit/phpunit from 9.3.11 to 9.4.0 thanks to @dependabot-preview[bot]
• 438: Bump phpstan/phpstan from 0.12.47 to 0.12.48 thanks to @dependabot-preview[bot]
• 437: Bump sebastian/comparator from 4.0.4 to 4.0.5 thanks to @dependabot-preview[bot]
• 436: Bump phpstan/phpstan from 0.12.45 to 0.12.47 thanks to @dependabot-preview[bot]
• 435: Bump phpspec/prophecy from 1.12.0 to 1.12.1 thanks to @dependabot-preview[bot]
• 434: Bump symfony/finder from 5.1.5 to 5.1.6 thanks to @dependabot-preview[bot]
• 430: Bump phpunit/php-invoker from 3.1.0 to 3.1.1 thanks to @dependabot-preview[bot]
• 428: Bump phpstan/phpstan from 0.12.43 to 0.12.45 thanks to @dependabot-preview[bot]
• 427: Bump symfony/process from 5.1.5 to 5.1.6 thanks to @dependabot-preview[bot]
• 426: Bump symfony/filesystem from 5.1.5 to 5.1.6 thanks to @dependabot-preview[bot]
• 425: Bump symfony/console from 5.1.5 to 5.1.6 thanks to @dependabot-preview[bot]
• 423: Bump symfony/debug from 4.4.13 to 4.4.14 thanks to @dependabot-preview[bot]
• 421: Bump symfony/options-resolver from 5.1.5 to 5.1.6 thanks to @dependabot-preview[bot]
• 420: Bump nikic/php-parser from 4.10.0 to 4.10.2 thanks to @dependabot-preview[bot]
• 419: Bump thecodingmachine/safe from 1.2.0 to 1.2.1 thanks to @dependabot-preview[bot]
• 417: Bump phpunit/phpunit from 9.3.10 to 9.3.11 thanks to @dependabot-preview[bot]
• 414: Bump phpstan/phpstan from 0.12.42 to 0.12.43 thanks to @dependabot-preview[bot]
• 413: Bump phpunit/php-code-coverage from 9.1.9 to 9.1.11 thanks to @dependabot-preview[bot]
• 412: Bump nikic/php-parser from 4.9.1 to 4.10.0 thanks to @dependabot-preview[bot]
• 409: Bump phpdocumentor/reflection-docblock from 5.2.1 to 5.2.2 thanks to @dependabot-preview[bot]
• 408: Bump phpdocumentor/type-resolver from 1.3.0 to 1.4.0 thanks to @dependabot-preview[bot]
• 407: Bump phpunit/php-code-coverage from 9.1.8 to 9.1.9 thanks to @dependabot-preview[bot]
• 406: Bump phpunit/phpunit from 9.3.9 to 9.3.10 thanks to @dependabot-preview[bot]
• 405: Bump phpunit/phpunit from 9.3.8 to 9.3.9 thanks to @dependabot-preview[bot]
• 404: Bump symfony/deprecation-contracts from 2.1.3 to 2.2.0 thanks to @dependabot-preview[bot]
• 402: Bump symfony/service-contracts from 2.1.3 to 2.2.0 thanks to @dependabot-preview[bot]
• 401: Bump lcobucci/coding-standard from 6.0.0 to 6.0.1 thanks to @dependabot-preview[bot]
• 400: Bump ondram/ci-detector from 3.5.0 to 3.5.1 thanks to @dependabot-preview[bot]
• 398: Bump thecodingmachine/safe from 1.1.3 to 1.2.0 thanks to @dependabot-preview[bot]
• 397: Bump phpunit/php-code-coverage from 9.1.4 to 9.1.7 thanks to @dependabot-preview[bot]
• 396: Bump symfony/filesystem from 5.1.4 to 5.1.5 thanks to @dependabot-preview[bot]
• 395: Bump symfony/options-resolver from 5.1.4 to 5.1.5 thanks to @dependabot-preview[bot]
• 394: Bump phpstan/phpstan from 0.12.40 to 0.12.42 thanks to @dependabot-preview[bot]
• 393: Bump symfony/console from 5.1.4 to 5.1.5 thanks to @dependabot-preview[bot]
• 392: Bump symfony/finder from 5.1.3 to 5.1.5 thanks to @dependabot-preview[bot] and @lcobucci
• 391: Bump symfony/process from 5.1.3 to 5.1.5 thanks to @dependabot-preview[bot]
• 390: Bump symfony/string from 5.1.4 to 5.1.5 thanks to @dependabot-preview[bot]
• 389: Bump symfony/debug from 4.4.11 to 4.4.13 thanks to @dependabot-preview[bot]
• 388: Bump symfony/filesystem from 5.1.3 to 5.1.4 thanks to @dependabot-preview[bot]
• 387: Bump symfony/console from 5.1.3 to 5.1.4 thanks to @dependabot-preview[bot] and @lcobucci
• 384: Bump symfony/options-resolver from 5.1.3 to 5.1.4 thanks to @dependabot-preview[bot]
• 382: Bump slevomat/coding-standard from 6.3.11 to 6.4.0 thanks to @dependabot-preview[bot]
• 379: Bump infection/abstract-testframework-adapter from 0.3.0 to 0.3.1 thanks to @dependabot-preview[bot]
• 378: Bump nikic/php-parser from 4.9.0 to 4.9.1 thanks to @dependabot-preview[bot]
• 377: Bump phpstan/phpstan-strict-rules from 0.12.4 to 0.12.5 thanks to @dependabot-preview[bot]
• 376: Bump phpstan/extension-installer from 1.0.4 to 1.0.5 thanks to @dependabot-preview[bot]
• 373: Bump sanmai/pipeline from 5.0 to 5.0.1 thanks to @dependabot-preview[bot]
• 363: Update phpunit/phpunit requirement from ^9.2 to ^9.3 thanks to @dependabot-preview[bot]
• 361: Upgrade lcobucci/coding-standard to v5.0 thanks to @lcobucci
• 360: Update phpunit/phpunit requirement from ^9.1 to ^9.2 thanks to @dependabot-preview[bot]
• 359: Upgrade dependencies thanks to @lcobucci
• 352: Update phpunit/phpunit requirement from ^9.0 to ^9.1 thanks to @dependabot-preview[bot]
• 350: Update infection/infection requirement from ^0.15 to ^0.16 thanks to @dependabot-preview[bot]
• 347: Update phpunit/phpunit requirement from ^8.5 to ^9.0 thanks to @dependabot-preview[bot] and @lcobucci
• 345: Update phpunit/php-invoker requirement from ^2.0 to ^3.0 thanks to @dependabot-preview[bot]
• 343: Update phpmd/phpmd requirement from ^2.7 to ^2.8 thanks to @dependabot-preview[bot] and @lcobucci
• 342: Update phpunit/phpunit requirement from ^8.4 to ^8.5 thanks to @dependabot-preview[bot]
• 340: Update infection/infection requirement from ^0.14 to ^0.15 thanks to @dependabot-preview[bot]
• 328: Upgrade coding standards thanks to @lcobucci
• 324: Require latest PHP version thanks to @lcobucci
• 323: Upgrade InfectionPHP thanks to @lcobucci
• 321: Update squizlabs/php_codesniffer requirement from ^3.4 to ^3.5 thanks to @dependabot-preview[bot]
• 318: Update lcobucci/jose-parsing requirement from ~2.1 to ~2.2 thanks to @dependabot-preview[bot]
• 541: Bump beberlei/assert from 3.2.7 to 3.3.0 thanks to @dependabot-preview[bot]
• 540: Bump phpstan/phpstan from 0.12.56 to 0.12.57 thanks to @dependabot-preview[bot]