php 8.4 & xdebug 3.4.1, symfony 7.2, mysql 8.4.4, rabbitmq 4, phpcpd 8.0.0, updated composer dependencies.

Author: DKravtsov

.circleci/config.yml

@@ -37,6 +37,11 @@ jobs:
           command: |
             make report-code-coverage
 
+      - run:
+          name: Checks for security vulnerability advisories for installed packages
+          command: |
+            make composer-audit
+
       - run:
           name: Check coding standard & CodeSniffer
           command: |

.env

@@ -27,12 +27,12 @@ WEB_PORT_SSL=443
 # XDEBUG_CONFIG possible values: main|osx. Use main value for Linux and Windows, osx value for MacOS.
 XDEBUG_CONFIG=main
 # Sometimes we need to use different xdebug versions, list of versions can be found here - https://pecl.php.net/package/xdebug
-XDEBUG_VERSION=3.3.2
+XDEBUG_VERSION=3.4.1
 ###< XDebug docker configuration ###
 
 ###> MySQL docker configuration. Can be overridden in: .env.local, .env.staging, .env.prod. ###
-# MySQL version, recommend values: 9.1.0|9.0.1|8.4.2|8.3.0|8.2.0|8.1.0|8.0.39
-MYSQL_VERSION=8.4.2
+# MySQL version, recommend values: 9.1.0|9.0.1|8.4.4|8.3.0|8.2.0|8.1.0|8.0.39
+MYSQL_VERSION=8.4.4
 # MySQL INNODB_USE_NATIVE_AIO possible values: 1|0. Set to 0 when AIO interface is not supported on OSX. https://dev.mysql.com/doc/refman/8.0/en/innodb-parameters.html#sysvar_innodb_use_native_aio
 INNODB_USE_NATIVE_AIO=1
 # Sometimes AWS MySQL RDS has SQL_MODE="NO_ENGINE_SUBSTITUTION" (https://github.com/awsdocs/amazon-rds-user-guide/issues/160) but MySQL default described here - https://dev.mysql.com/doc/refman/8.0/en/server-system-variables.html#sysvar_sql_mode

.env.dev

@@ -34,10 +34,12 @@ jobs:
             - name: Run test suite
               run: make phpunit
             - name: Archive coverage data for Qodana
-              uses: actions/upload-artifact@v3
+              uses: actions/upload-artifact@v4
               with:
                   name: php-coverage-data
                   path: reports/clover.xml
+            - name: Checks for security vulnerability advisories for installed packages
+              run: make composer-audit
             - name: Run coding standard
               run: make ecs
             - name: Run codeSniffer

.github/workflows/ci.yml

@@ -20,6 +20,11 @@ reports/*
 .phpunit.cache
 ###< symfony/phpunit-bridge ###
 
+###> symfony/asset-mapper ###
+/public/assets/
+/assets/vendor/
+###< symfony/asset-mapper ###
+
 ###> friendsofphp/php-cs-fixer ###
 .php-cs-fixer.cache
 .php_cs

.gitignore

@@ -31,6 +31,7 @@ build:
     - make messenger-setup-transports
     - *general_scripts
     - make phpunit
+    - make composer-audit
     - make ecs
     - make phpcs
     - make phpstan