Update security-flagged dependencies and require PHP 8.4 (#1564)

.github/workflows/ci.yml

@@ -12,7 +12,7 @@ jobs:
       - name: Setup PHP, with composer and extensions
         uses: shivammathur/setup-php@v2 #https://github.com/shivammathur/setup-php
         with:
-          php-version: '8.3'
+          php-version: '8.4'
           extensions: mbstring, dom, fileinfo, mysql, libxml, xml, xmlwriter, dom, tokenizer, filter, json, phar, pcre, openssl, pdo, intl, curl
 
       - name: Cache composer dependencies

composer.json

@@ -8,10 +8,10 @@
     "license": "MIT",
     "type": "project",
     "require": {
-        "php": "^8.2",
+        "php": "^8.4",
         "ext-intl": "*",
         "ext-json": "*",
-        "enshrined/svg-sanitize": "^0.21.0",
+        "enshrined/svg-sanitize": "^0.22.0",
         "graham-campbell/github": "^12.5",
         "guzzlehttp/guzzle": "^7.8",
         "laravel/framework": "^11.45",
@@ -84,6 +84,9 @@
             "kylekatarnls/update-helper": true,
             "symfony/thanks": true,
             "php-http/discovery": true
+        },
+        "platform": {
+
         }
     },
     "minimum-stability": "stable",

readme.md

@@ -34,7 +34,7 @@ Supported applications are recognized by the title of the application as entered
 [![foundationapps](https://img.shields.io/badge/dynamic/json.svg?label=Foundation%20Apps&url=https%3A%2F%2Fapps.heimdall.site%2Fstats&query=foundation_apps&colorB=3f8483&style=for-the-badge&logo=data:image/png;base64,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)](https://apps.heimdall.site/applications/foundation)
 
 ## Installing
-Apart from the Laravel 10 dependencies, namely PHP >= 8.1, Ctype PHP Extension, cURL PHP Extension, DOM PHP Extension, Fileinfo PHP Extension, Filter PHP Extension, Hash PHP Extension, Mbstring PHP Extension, OpenSSL PHP Extension, PCRE PHP Extension, PDO PHP Extension, Session PHP Extension, Tokenizer PHP Extension, XML PHP Extension, the only other thing Heimdall needs is sqlite support and zip support (php-zip).
+Apart from the Laravel 11 dependencies, namely PHP >= 8.4, Ctype PHP Extension, cURL PHP Extension, DOM PHP Extension, Fileinfo PHP Extension, Filter PHP Extension, Hash PHP Extension, Mbstring PHP Extension, OpenSSL PHP Extension, PCRE PHP Extension, PDO PHP Extension, Session PHP Extension, Tokenizer PHP Extension, XML PHP Extension, the only other thing Heimdall needs is sqlite support and zip support (php-zip).
 
 If you find you can't change the background make sure `php_fileinfo` is enabled in your php.ini. I believe `php_fileinfo` should be enabled by default, but one user came across the issue on a windows system.
 

vendor/aws/aws-sdk-php/composer.json

@@ -1,14 +1,14 @@
 {
     "name": "aws/aws-sdk-php",
-    "homepage": "http://aws.amazon.com/sdkforphp",
+    "homepage": "https://aws.amazon.com/sdk-for-php",
     "description": "AWS SDK for PHP - Use Amazon Web Services in your PHP project",
     "keywords": ["aws","amazon","sdk","s3","ec2","dynamodb","cloud","glacier"],
     "type": "library",
     "license": "Apache-2.0",
     "authors": [
         {
             "name": "Amazon Web Services",
-            "homepage": "http://aws.amazon.com"
+            "homepage": "https://aws.amazon.com"
         }
     ],
     "support": {
@@ -20,35 +20,35 @@
         "guzzlehttp/guzzle": "^7.4.5",
         "guzzlehttp/psr7": "^2.4.5",
         "guzzlehttp/promises": "^2.0",
-        "mtdowling/jmespath.php": "^2.8.0",
+        "mtdowling/jmespath.php": "^2.9.1",
         "ext-pcre": "*",
         "ext-json": "*",
         "ext-simplexml": "*",
         "aws/aws-crt-php": "^1.2.3",
-        "psr/http-message": "^2.0"
+        "psr/http-message": "^1.0 || ^2.0",
+        "symfony/filesystem": "^v5.4.45 || ^v6.4.3 || ^v7.1.0 || ^v8.0.0"
     },
     "require-dev": {
         "composer/composer" : "^2.7.8",
         "ext-openssl": "*",
         "ext-dom": "*",
-        "ext-pcntl": "*",
         "ext-sockets": "*",
-        "phpunit/phpunit": "^5.6.3 || ^8.5 || ^9.5",
+        "phpunit/phpunit": "^10.0",
         "behat/behat": "~3.0",
         "doctrine/cache": "~1.4",
         "aws/aws-php-sns-message-validator": "~1.0",
         "andrewsville/php-token-reflection": "^1.4",
         "psr/cache": "^2.0 || ^3.0",
         "psr/simple-cache": "^2.0 || ^3.0",
         "sebastian/comparator": "^1.2.3 || ^4.0 || ^5.0",
-        "symfony/filesystem": "^v6.4.0 || ^v7.1.0",
         "yoast/phpunit-polyfills": "^2.0",
-        "dms/phpunit-arraysubset-asserts": "^0.4.0"
+        "dms/phpunit-arraysubset-asserts": "^v0.5.0"
     },
     "suggest": {
         "ext-openssl": "Allows working with CloudFront private distributions and verifying received SNS messages",
         "ext-curl": "To send requests using cURL",
         "ext-sockets": "To use client-side monitoring",
+        "ext-pcntl": "To use client-side monitoring",
         "doctrine/cache": "To use the DoctrineCacheAdapter",
         "aws/aws-php-sns-message-validator": "To validate incoming SNS notifications"
     },

vendor/aws/aws-sdk-php/src/ARCRegionSwitch/ARCRegionSwitchClient.php

@@ -0,0 +1,51 @@
+<?php
+namespace Aws\ARCRegionSwitch;
+
+use Aws\AwsClient;
+
+/**
+ * This client is used to interact with the **ARC - Region switch** service.
+ * @method \Aws\Result approvePlanExecutionStep(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise approvePlanExecutionStepAsync(array $args = [])
+ * @method \Aws\Result cancelPlanExecution(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise cancelPlanExecutionAsync(array $args = [])
+ * @method \Aws\Result createPlan(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise createPlanAsync(array $args = [])
+ * @method \Aws\Result deletePlan(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise deletePlanAsync(array $args = [])
+ * @method \Aws\Result getPlan(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise getPlanAsync(array $args = [])
+ * @method \Aws\Result getPlanEvaluationStatus(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise getPlanEvaluationStatusAsync(array $args = [])
+ * @method \Aws\Result getPlanExecution(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise getPlanExecutionAsync(array $args = [])
+ * @method \Aws\Result getPlanInRegion(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise getPlanInRegionAsync(array $args = [])
+ * @method \Aws\Result listPlanExecutionEvents(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise listPlanExecutionEventsAsync(array $args = [])
+ * @method \Aws\Result listPlanExecutions(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise listPlanExecutionsAsync(array $args = [])
+ * @method \Aws\Result listPlans(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise listPlansAsync(array $args = [])
+ * @method \Aws\Result listPlansInRegion(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise listPlansInRegionAsync(array $args = [])
+ * @method \Aws\Result listRoute53HealthChecks(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise listRoute53HealthChecksAsync(array $args = [])
+ * @method \Aws\Result listRoute53HealthChecksInRegion(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise listRoute53HealthChecksInRegionAsync(array $args = [])
+ * @method \Aws\Result listTagsForResource(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise listTagsForResourceAsync(array $args = [])
+ * @method \Aws\Result startPlanExecution(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise startPlanExecutionAsync(array $args = [])
+ * @method \Aws\Result tagResource(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise tagResourceAsync(array $args = [])
+ * @method \Aws\Result untagResource(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise untagResourceAsync(array $args = [])
+ * @method \Aws\Result updatePlan(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise updatePlanAsync(array $args = [])
+ * @method \Aws\Result updatePlanExecution(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise updatePlanExecutionAsync(array $args = [])
+ * @method \Aws\Result updatePlanExecutionStep(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise updatePlanExecutionStepAsync(array $args = [])
+ */
+class ARCRegionSwitchClient extends AwsClient {}

vendor/aws/aws-sdk-php/src/ARCRegionSwitch/Exception/ARCRegionSwitchException.php

@@ -0,0 +1,9 @@
+<?php
+namespace Aws\ARCRegionSwitch\Exception;
+
+use Aws\Exception\AwsException;
+
+/**
+ * Represents an error interacting with the **ARC - Region switch** service.
+ */
+class ARCRegionSwitchException extends AwsException {}

vendor/aws/aws-sdk-php/src/AccessAnalyzer/AccessAnalyzerClient.php

@@ -21,10 +21,14 @@
  * @method \GuzzleHttp\Promise\Promise createAnalyzerAsync(array $args = [])
  * @method \Aws\Result createArchiveRule(array $args = [])
  * @method \GuzzleHttp\Promise\Promise createArchiveRuleAsync(array $args = [])
+ * @method \Aws\Result createServiceLinkedAnalyzer(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise createServiceLinkedAnalyzerAsync(array $args = [])
  * @method \Aws\Result deleteAnalyzer(array $args = [])
  * @method \GuzzleHttp\Promise\Promise deleteAnalyzerAsync(array $args = [])
  * @method \Aws\Result deleteArchiveRule(array $args = [])
  * @method \GuzzleHttp\Promise\Promise deleteArchiveRuleAsync(array $args = [])
+ * @method \Aws\Result deleteServiceLinkedAnalyzer(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise deleteServiceLinkedAnalyzerAsync(array $args = [])
  * @method \Aws\Result generateFindingRecommendation(array $args = [])
  * @method \GuzzleHttp\Promise\Promise generateFindingRecommendationAsync(array $args = [])
  * @method \Aws\Result getAccessPreview(array $args = [])

vendor/aws/aws-sdk-php/src/Account/AccountClient.php

@@ -19,6 +19,8 @@
  * @method \GuzzleHttp\Promise\Promise getAlternateContactAsync(array $args = [])
  * @method \Aws\Result getContactInformation(array $args = [])
  * @method \GuzzleHttp\Promise\Promise getContactInformationAsync(array $args = [])
+ * @method \Aws\Result getGovCloudAccountInformation(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise getGovCloudAccountInformationAsync(array $args = [])
  * @method \Aws\Result getPrimaryEmail(array $args = [])
  * @method \GuzzleHttp\Promise\Promise getPrimaryEmailAsync(array $args = [])
  * @method \Aws\Result getRegionOptStatus(array $args = [])

vendor/aws/aws-sdk-php/src/Acm/AcmClient.php

@@ -8,22 +8,54 @@
  *
  * @method \Aws\Result addTagsToCertificate(array $args = [])
  * @method \GuzzleHttp\Promise\Promise addTagsToCertificateAsync(array $args = [])
+ * @method \Aws\Result createAcmeDomainValidation(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise createAcmeDomainValidationAsync(array $args = [])
+ * @method \Aws\Result createAcmeEndpoint(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise createAcmeEndpointAsync(array $args = [])
+ * @method \Aws\Result createAcmeExternalAccountBinding(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise createAcmeExternalAccountBindingAsync(array $args = [])
+ * @method \Aws\Result deleteAcmeDomainValidation(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise deleteAcmeDomainValidationAsync(array $args = [])
+ * @method \Aws\Result deleteAcmeEndpoint(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise deleteAcmeEndpointAsync(array $args = [])
+ * @method \Aws\Result deleteAcmeExternalAccountBinding(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise deleteAcmeExternalAccountBindingAsync(array $args = [])
  * @method \Aws\Result deleteCertificate(array $args = [])
  * @method \GuzzleHttp\Promise\Promise deleteCertificateAsync(array $args = [])
+ * @method \Aws\Result describeAcmeAccount(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise describeAcmeAccountAsync(array $args = [])
+ * @method \Aws\Result describeAcmeDomainValidation(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise describeAcmeDomainValidationAsync(array $args = [])
+ * @method \Aws\Result describeAcmeEndpoint(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise describeAcmeEndpointAsync(array $args = [])
+ * @method \Aws\Result describeAcmeExternalAccountBinding(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise describeAcmeExternalAccountBindingAsync(array $args = [])
  * @method \Aws\Result describeCertificate(array $args = [])
  * @method \GuzzleHttp\Promise\Promise describeCertificateAsync(array $args = [])
  * @method \Aws\Result exportCertificate(array $args = [])
  * @method \GuzzleHttp\Promise\Promise exportCertificateAsync(array $args = [])
  * @method \Aws\Result getAccountConfiguration(array $args = [])
  * @method \GuzzleHttp\Promise\Promise getAccountConfigurationAsync(array $args = [])
+ * @method \Aws\Result getAcmeExternalAccountBindingCredentials(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise getAcmeExternalAccountBindingCredentialsAsync(array $args = [])
  * @method \Aws\Result getCertificate(array $args = [])
  * @method \GuzzleHttp\Promise\Promise getCertificateAsync(array $args = [])
  * @method \Aws\Result importCertificate(array $args = [])
  * @method \GuzzleHttp\Promise\Promise importCertificateAsync(array $args = [])
+ * @method \Aws\Result listAcmeAccounts(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise listAcmeAccountsAsync(array $args = [])
+ * @method \Aws\Result listAcmeDomainValidations(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise listAcmeDomainValidationsAsync(array $args = [])
+ * @method \Aws\Result listAcmeEndpoints(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise listAcmeEndpointsAsync(array $args = [])
+ * @method \Aws\Result listAcmeExternalAccountBindings(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise listAcmeExternalAccountBindingsAsync(array $args = [])
  * @method \Aws\Result listCertificates(array $args = [])
  * @method \GuzzleHttp\Promise\Promise listCertificatesAsync(array $args = [])
  * @method \Aws\Result listTagsForCertificate(array $args = [])
  * @method \GuzzleHttp\Promise\Promise listTagsForCertificateAsync(array $args = [])
+ * @method \Aws\Result listTagsForResource(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise listTagsForResourceAsync(array $args = [])
  * @method \Aws\Result putAccountConfiguration(array $args = [])
  * @method \GuzzleHttp\Promise\Promise putAccountConfigurationAsync(array $args = [])
  * @method \Aws\Result removeTagsFromCertificate(array $args = [])
@@ -34,8 +66,22 @@
  * @method \GuzzleHttp\Promise\Promise requestCertificateAsync(array $args = [])
  * @method \Aws\Result resendValidationEmail(array $args = [])
  * @method \GuzzleHttp\Promise\Promise resendValidationEmailAsync(array $args = [])
+ * @method \Aws\Result revokeAcmeAccount(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise revokeAcmeAccountAsync(array $args = [])
+ * @method \Aws\Result revokeAcmeExternalAccountBinding(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise revokeAcmeExternalAccountBindingAsync(array $args = [])
  * @method \Aws\Result revokeCertificate(array $args = [])
  * @method \GuzzleHttp\Promise\Promise revokeCertificateAsync(array $args = [])
+ * @method \Aws\Result searchCertificates(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise searchCertificatesAsync(array $args = [])
+ * @method \Aws\Result tagResource(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise tagResourceAsync(array $args = [])
+ * @method \Aws\Result untagResource(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise untagResourceAsync(array $args = [])
+ * @method \Aws\Result updateAcmeDomainValidation(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise updateAcmeDomainValidationAsync(array $args = [])
+ * @method \Aws\Result updateAcmeEndpoint(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise updateAcmeEndpointAsync(array $args = [])
  * @method \Aws\Result updateCertificateOptions(array $args = [])
  * @method \GuzzleHttp\Promise\Promise updateCertificateOptionsAsync(array $args = [])
  */

vendor/aws/aws-sdk-php/src/AmplifyBackend/AmplifyBackendClient.php

@@ -43,8 +43,8 @@
  * @method \GuzzleHttp\Promise\Promise getBackendJobAsync(array $args = [])
  * @method \Aws\Result getBackendStorage(array $args = [])
  * @method \GuzzleHttp\Promise\Promise getBackendStorageAsync(array $args = [])
- * @method \Aws\Result getToken(array $args = [])
- * @method \GuzzleHttp\Promise\Promise getTokenAsync(array $args = [])
+ * @method \Aws\Result getChallengeToken(array $args = [])
+ * @method \GuzzleHttp\Promise\Promise getChallengeTokenAsync(array $args = [])
  * @method \Aws\Result importBackendAuth(array $args = [])
  * @method \GuzzleHttp\Promise\Promise importBackendAuthAsync(array $args = [])
  * @method \Aws\Result importBackendStorage(array $args = [])