chore(deps): update all non-major dependencies

This MR contains the following updates:

Package	Type	Update	Change
api-platform/core (source)	require	minor	<2.6 -> <2.7
phpstan/phpstan	require-dev	patch	0.12.78 -> 0.12.80
vimeo/psalm	require-dev	patch	4.6.1 -> 4.6.2

---

Release Notes

api-platform/core

v2.6.2

Compare Source

• Validation: properties regex pattern is now compliant with ECMA 262 (#​4027)
• OpenApi: normalizer is now backward compatible (#​4016), fix the name converter issue changing OpenApi properties (#​4019)
• Identifiers: Break after transforming the identifier (#​3985), use the identifiers context to transform with multiple classes (#​4029)
• JsonSchema: Revert ALLOW_EXTRA_ATTRIBUTE=false as it is a BC break and will be done in 3.0 instead see #​3881 (#​4007)
• Subresource: fix ApiSubresource maxDepth option (#​3986), recursive issue in the profiler (#​4023)
• OpenApi: Allow requestBody and parameters via the openapi_context (#​4001), make openapi_context work on subresources (#​4004), sort paths (#​4013)
• Config: Allow disabling OpenAPI and Swagger UI without loosing the schema (#​3968 and #​4018), fix pagination defaults (#​4011)
• DataPersister: context propagation fix (#​3983)

v2.6.1

Compare Source

• Fix defaults when using attributes (#​3978)

v2.6.0

Compare Source

• Cache: adds a max_header_length configuration (#​2865)
• Cache: support stale-while-revalidate and stale-if-error cache control headers (#​3439)
• Config: Add an option to set global default values (#​3151)
• DTO: Add ApiPlatform\Core\DataTransformer\DataTransformerInitializerInterface to pre-hydrate inputs (#​3701)
• DTO: Improve Input/Output support (#​3231)
• Data Persisters: Add previous_data to the context passed to persisters when available (#​3752)
• Data Persister: Add a ResumableDataPersisterInterface that allows to call multiple persisters (#​3912)
• Debug: Display API Platform's version in the debug bar (#​3235)
• Docs: Make asset_package configurable (#​3764)
• Doctrine: Allow searching on multiple values on every strategies (#​3786)
• Elasticsearch: The Paginator class constructor now receives the denormalization context to support denormalizing documents using serialization groups. This change may cause potential BC breaks for existing applications as denormalization was previously done without serialization groups.
• GraphQL: BC New syntax for the filters' arguments to preserve the order: order: [{foo: 'asc'}, {bar: 'desc'}] (#​3468)
• GraphQL: BC operation is now operationName to follow the standard (#​3568)
• GraphQL: BC paginationType is now pagination_type (#​3614)
• GraphQL: Add page-based pagination (#​3175, #​3517)
• GraphQL: Allow formatting GraphQL errors based on exceptions (#​3063)
• GraphQL: Errors thrown from the GraphQL library can now be handled (#​3632, #​3643)
• GraphQL: Possibility to add a custom description for queries, mutations and subscriptions (#​3477, #​3514)
• GraphQL: Subscription support with Mercure (#​3321)
• GraphQL: Support for field name conversion (serialized name) (#​3455, #​3516)
• Hydra: Sort entries in the API entrypoint (#​3091)
• Identifiers: Add Symfony Uid support (#​3715)
• IriConverter: BC Fix double encoding in IRIs - may cause breaking change as some characters no longer encoded in output (#​3552)
• JSON-LD: Add an iri_only attribute to simplify documents structure (useful when using Vulcain) (#​3275)
• Exception: Response error codes can be specified via the ApiPlatform\Core\Exception\ErrorCodeSerializableInterface (#​2922)
• Mercure: Add a normalization_context option in mercure attribute (#​3772)
• Messenger: Add a context stamp containing contextual data (#​3157)
• Metadata: Deprecate InheritedPropertyMetadataFactory (#​3273)
• Metadata: Improve and simplify identifiers management (#​3825)
• Metadata: Support the Symfony Serializer's @Ignore annotation (#​3820)
• Metadata: Support using annotations as PHP 8 attributes (#​3869, #​3868, #​3851)
• Metadata: Throw an error when no identifier is defined (#​3871)
• Metadata: Use id as default identifier if none provided (#​3874)
• MongoDB: Mercure support (#​3290)
• MongoDB: Possibility to add execute options (aggregate command fields) for a resource, like allowDiskUse (#​3144)
• OpenAPI: Add default values of PHP properties to the documentation (#​2386)
• OpenAPI: BC Replace all characters other than [a-zA-Z0-9\.\-_] to . in definition names to be compliant with OpenAPI 3.0 (#​3669)
• OpenAPI: Refactor OpenAPI v3 support, OpenAPI v2 (aka Swagger) is deprecated (#​3407)
• Order: Support default order for a specific custom operation (#​3784)
• PATCH: Support patching deep objects (#​3847)
• Router: UrlGenerator strategy configuration via url_generation_strategy (#​3198)
• Routing: Add stateless ApiResource attribute (#​3436)
• Security: Add support for access control rule on attributes (#​3503)
• Subresources: resourceClass can now be defined as a container parameter in XML and YAML definitions
• Symfony: improved 5.x support with fewer deprecations (#​3589)
• Symfony: Allow using ItemNormalizer without Symfony SecurityBundle (#​3801)
• Symfony: Lazy load all commands (#​3798)
• Tests: adds a method to retrieve the CookieJar in the test Client getCookieJar
• Tests: Fix the registration of the test.api_platform.client service when the FrameworkBundle bundle is registered after the ApiPlatformBundle bundle (#​3928)
• Validator: Add the violation code to the violation properties (#​3857)
• Validator: Allow customizing the validation error status code. BC Status code for validation errors is now 422, use exception_to_status to fallback to 400 if needed (#​3808)
• Validator: Autoconfiguration of validation groups generator via ApiPlatform\Core\Validator\ValidationGroupsGeneratorInterface
• Validator: Deprecate using a validation groups generator service not implementing ApiPlatform\Core\Bridge\Symfony\Validator\ValidationGroupsGeneratorInterface (#​3346)
• Validator: Property validation through OpenAPI (#​33329)
• Validator: Query filters and parameters are validated (#​1723)
• ExceptionInterface now extends \Throwable (#​3217)

phpstan/phpstan

v0.12.80

Compare Source

Improvements

• Nested generic type bounds (phpstan/phpstan-src@e671cc0), #​2928, #​3922
  • You can now use for example @template T + @template U of Query<T>.
  • Useful example: https://phpstan.org/r/29546058-556e-4e76-bccc-f053079e5711
• Narrow down type T of RecursiveIteratorIterator (phpstan/phpstan-src@d28b61b), #​3425
• Performance improvement: memoize expensive calls to PHPDocs (#​458), thanks @​pyguerder!
• More SPL iterator stubs (phpstan/phpstan-src@0315dfa)
• Unified iterator parameter names across PHP versions (phpstan/phpstan-src@72b02a6)

Bugfixes

• Fix accepting BenevolentUnionType as part of GenericObjectType (phpstan/phpstan-src@d29d098), #​4605
• Fix inline @var priority with prefixed PHPDoc tags (phpstan/phpstan-src@3186fff), #​4606

Function signature fixes

• Updated function signatures of zip_read (#​461), thanks @​spud!

v0.12.79

Compare Source

Improvements

• Support for union type as @template type bound (phpstan/phpstan-src@ac7b49e), #​3769
• Support int and string as @template type bound (phpstan/phpstan-src@768bfab)
• Type-specifying extension for ReflectionClass::isSubclassOf() (phpstan/phpstan-src@d3b5d60), #​4577
• Update BetterReflection to version that uses PHPStan namespace instead of random prefixed one (phpstan/phpstan-src@06ef13e). See rectorphp/rector#​5665
• Update PhpStorm stubs (phpstan/phpstan-src@5aa8a55)
• Add PhpPropertyReflection::getNativeReflection() (phpstan/phpstan-src@5fad625)

Bleeding edge

• Type inference of new $string leads to object, not mixed (phpstan/phpstan-src@78a9f05)

If you want to see the shape of things to come and adopt bleeding edge features early, you can include this config file in your project's phpstan.neon:

includes:
	- vendor/phpstan/phpstan/conf/bleedingEdge.neon

Of course, there are no backwards compatibility guarantees when you include this file. The behaviour and reported errors can change in minor versions with this file included.

Bugfixes

• Fix GenericObjectType::isSuperTypeOf() for covariant template types (phpstan/phpstan-src@3f6de01)
• Fix method_exists() after new $class (phpstan/phpstan-src@70756b0), #​4579
• Fix --debug message (#​455), thanks @​alamirault!
• Keep iterable key type and value type when subtracting from iterable (phpstan/phpstan-src@c1f7aaf), #​4498
• Type description verbosity - be more verbose when invariant template type is involved (phpstan/phpstan-src@d97ddee)
• Fixed inferring return type coming from array_map (phpstan/phpstan-src@ea7e0ac), #​4587
• TemplateTypeCheck - look for nested unsupported types (phpstan/phpstan-src@756af18)

vimeo/psalm

v4.6.2

Compare Source

• @​weirdan fixed a notice (#​5255)
• @​spyric fixed line references in the CodeClimate output (#​5262)
• @​elnoro limited incidence of the UnresolvableInclude after an is_file check
• @​orklah improved the error message when new PHP syntax cannot be understood when analysing older PHP code (#​5268)
• @​orklah improved the signature map for session_id (#​5272)
• $unknown_object::someMethod() calls are no longer prohibited (#​5257)
• more static returns are interpreted as self in the case of final classes/methods (#​5244)
• fixed interpretation of parent::foo() inside traits (#​5264)
• fix reconciliation of classes with interfaces (#​5236)
• @​boesing fixed an unnecessary ConfigException (#​5280)
• fix an issue when properties aren't being memoised after calls (#​5231)
• improve handling of get_class($templated_var) (#​5279)
• expand out templated params that cannot be inferred in new calls (#​5229)

Internals

• @​joehoyle, @​Nyholm and @​elnoro improved the documentation
• @​weirdan and added a general error handler in (#​5260) that converts notices/warnings to exceptions

---

Renovate configuration

Schedule: "before 3am on Monday" (UTC).

Automerge: Disabled by config. Please merge this manually once you are satisfied.

️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.

composer.json

@@ -3,9 +3,9 @@
     "license": "AGPL-3.0-or-later",
     "require": {
         "php": "^7.3",
-        "api-platform/core": "<2.6",
-        "dbp/api-core-bundle": "dev-main",
-        "dbp/api-starter-bundle": "dev-main",
+        "api-platform/core": "<2.7",
+        "dbp/api-core-bundle": "@dev",
+        "dbp/api-starter-bundle": "@dev",
         "symfony/apache-pack": "^1.0",
         "symfony/console": "^4.4",
         "symfony/dotenv": "^4.4",