Skip to content

Freshen up dependencies - #126

Merged
Jamesking56 merged 10 commits into
captbaritone:masterfrom
cs278:freshen-deps
Sep 30, 2026
Merged

Jamesking56 merged 10 commits into
captbaritone:masterfrom
cs278:freshen-deps

Conversation

@cs278

@cs278 cs278 commented Sep 29, 2026 •

Copy link
Copy Markdown
Contributor

This has been prompted due to a recent security advisory published in zbateson/mail-mime-parser: GHSA-36h5-qg4p-q2qf

Mail MIME parser

I have permitted all 4 major versions to give consumers the easiest upgrade route possible, each version passes the test suite. Realistically the ^1.2 || ^2.0 part of the constraint can probably be dropped in the next release.

Guzzle

Guzzle 8.x has been released, there does not appear to be any impact for this project so I've just increased the constraint to permit it.

Test matrix

  • Added PHP 8.4 and 8.5 to the test matrix for coverage of those PHP versions.
  • Expanded the matrix to test with lowest/latest dependencies for better coverage given this module now supports quite a wide array of dependency versions.
  • Testing with lowest deps has identified a whole pile of dependency issues - I've worked around these in the pipeline with some hacks.

Next steps

I suggest a release to incorporate this PR to allow consumers to upgrade zbateson/mail-mime-parser with minimal fuss. Then a follow up PR and next release which cuts out a load of baggage, drop support for:

  • Codeception 4.x
  • PHP < 8.3 - Security support for 8.2 ends in 3 months.
  • Guzzle < 7 - Not maintained for 4 years.
  • Mail MIME parser < 3 - No longer maintained by the author.

Emits fatal error:

Array and string offset access syntax with curly braces is no longer
supported...
Resolves a lot of odd failures due to incompatibilities between
Codeception and PHPUnit which are not expressed in package
constraints.
@cs278

cs278 commented Sep 29, 2026

Copy link
Copy Markdown
Contributor Author

@Jamesking56 👓 😄

@Jamesking56
Jamesking56 merged commit 241750c into captbaritone:master Sep 30, 2026
24 checks passed
@Jamesking56

Copy link
Copy Markdown
Collaborator

Thanks @cs278

@github-actions

Copy link
Copy Markdown

Released in 4.0.0.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants