maintenance : updated dependencies for security and PHP constraints (#50

)

* maintenance : updated dependencies for security and PHP constraints

This is mostly a cleaning of the composer file.

## Security update

guzzlehttp/guzzle upgrade to 6.5 or 7.4 : https://devhub.checkmarx.com/cve-details/CVE-2022-31090/
symfony/http-kernel upgrade to : https://devhub.checkmarx.com/cve-details/CVE-2022-24894/

## Incompatibility

minishlink/web-push: Version 4 and 5 are not possible due to PHP version constraints.
	* https://github.com/web-push-libs/web-push-php/blob/v4.0.2/composer.json
	* https://github.com/web-push-libs/web-push-php/blob/v5.2.5/composer.json
phpunit/phpunit: versions 5 to 7 are not posible due to PHP version constraints.

* minor : bump packages

.github/workflows/ci.yml

@@ -5,14 +5,14 @@ on:
 
 env:
   COMPOSER_FLAGS: "--prefer-stable"
-  
+
 jobs:
   ci_job:
     runs-on: ${{ matrix.operating-system }}
     strategy:
       matrix:
         operating-system: ['ubuntu-latest']
-        php-versions: ['8.1', '8.2']
+        php-versions: ['8.1', '8.2', '8.3']
 
     steps:
       - name: Checkout
@@ -29,3 +29,9 @@ jobs:
 
       - name: Process the tests
         run: vendor/bin/phpunit
+
+# Too much conflict with PHPUnit and old low package versions
+#      - name: Tests with lowest posible packages
+#        run: |
+#          composer update $COMPOSER_FLAGS --no-interaction --prefer-dist --prefer-lowest --no-progress --ansi
+#          vendor/bin/phpunit

composer.json

@@ -15,15 +15,15 @@
         "ext-json": "*",
         "ext-mbstring": "*",
         "ext-openssl": "*",
-        "guzzlehttp/guzzle": "~6.0|~7.0",
-        "minishlink/web-push": "~4.0|~5.0|~6.0|~7.0",
-        "symfony/http-kernel": "~3.0|~4.0|~5.0|~6.0"
+        "guzzlehttp/guzzle": "^6.5.8|^7.4",
+        "minishlink/web-push": "~6.0|~7.0|~8.0",
+        "symfony/http-kernel": "^4.4.50|^5.4.20|^6.0"
     },
     "require-dev": {
         "bentools/doctrine-static": "1.0.x-dev",
         "doctrine/dbal": "~2.5 <=2.9",
         "nyholm/symfony-bundle-test": "~1.8",
-        "phpunit/phpunit": "~5.0|~6.0|~7.0|~8.0|~9.0",
+        "phpunit/phpunit": "^8.5.38|~9.0",
         "symfony/config": "~4.0|~5.0|~6.0",
         "symfony/dependency-injection": "~3.0|~4.0|~5.0|~6.0",
         "symfony/framework-bundle": "~3.0|~4.0|~5.0|~6.0",
@@ -32,7 +32,8 @@
         "symfony/security": "~3.0|~4.0|~5.0|~6.0",
         "symfony/var-dumper": "~3.0|~4.0|~5.0|~6.0",
         "symfony/yaml": "~3.0|~4.0|~5.0|~6.0",
-        "twig/twig": "~1.0|~2.0"
+        "twig/twig": "~1.0|~2.0",
+        "web-token/jwt-util-ecc": ">=2.1"
     },
     "autoload": {
         "psr-4": {
@@ -149,4 +150,4 @@
         "chrome",
         "firefox"
     ]
-}
+}

src/Command/WebPushGenerateKeysCommand.php

@@ -3,12 +3,14 @@
 namespace BenTools\WebPushBundle\Command;
 
 use Minishlink\WebPush\VAPID;
+use Symfony\Component\Console\Attribute\AsCommand;
 use Symfony\Component\Console\Command\Command;
 use Symfony\Component\Console\Input\InputInterface;
 use Symfony\Component\Console\Output\OutputInterface;
 use Symfony\Component\Console\Style\SymfonyStyle;
 use Symfony\Component\HttpKernel\Kernel;
 
+#[AsCommand('webpush:generate:keys')]
 final class WebPushGenerateKeysCommand extends Command
 {
     protected static $defaultName = 'webpush:generate:keys';