Add memory limit to PHPStan command and update return types for PSR-7 v2

Author: muhammetsafak

.github/workflows/static-analysis.yml

@@ -27,4 +27,4 @@ jobs:
         run: composer update --no-interaction --no-progress --prefer-dist
 
       - name: Run PHPStan
-        run: vendor/bin/phpstan analyse --no-progress
+        run: vendor/bin/phpstan analyse --no-progress --memory-limit=512M

CHANGELOG.md

@@ -41,10 +41,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **`Stream::str2resorce()` renamed** to `Stream::stringToResource()` (private). Materialised detach handle now preserves cursor position.
 - **`RequestTrait::updateHostFormUri()` renamed** to `updateHostFromUri()`.
 - **HTTP version whitelist widened** to accept `2`, `2.0`, `3`, `3.0` (alongside `1.0` and `1.1`).
-- **Native return types added for PSR-7 v2 covariance** on six methods:
+- **Native return types added for PSR-7 v2 covariance** on seven methods:
   `Stream::close(): void`, `Stream::seek(...): void`, `Stream::rewind(): void`,
   `MessageTrait::getHeader($name): array`,
-  `UploadedFile::getStream(): StreamInterface`, `UploadedFile::moveTo(...): void`.
+  `UploadedFile::getStream(): StreamInterface`, `UploadedFile::moveTo(...): void`,
+  `Uri::__toString(): string`.
+  Required by PHP 7.4 + PSR-7 v2 (`Declaration must be compatible with ...`
+  fatal at class load); PHP 8.0+ accepted the untyped signatures silently
+  but the fix is uniform across all supported PHP versions.
   No call-site change is required (the existing `@return` PHPDoc lines
   already documented these types), but subclass overrides must match the
   new signatures or stay untyped.
@@ -60,6 +64,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `UploadedFile::moveTo()` survives partial-write iterations and retries until the chunk is flushed.
 - `ServerRequest::normalizeFiles()` recurses into arbitrarily nested file input names (`file[parent][child][…]`).
 - `send_request()` (global helper) requires a URL when the first arg is a method string instead of silently sending to `null`.
+- `tests/Unit/FixtureServerTrait` exposes the loopback host through a static method instead of a trait constant, so the unit suite loads on PHP 7.4 / 8.0 / 8.1 (trait constants are a PHP 8.2+ feature).
+- `static-analysis.yml` workflow now runs PHPStan with `--memory-limit=512M`, matching the `composer phpstan` script — the default 128 MiB triggered an OOM under PHP 7.4 during local reproduction.
 
 ### Removed (in addition to breaking changes above)
 

docs/upgrade-guide.md

@@ -142,7 +142,7 @@ The `target=null` (pure in-memory string) backend used to *prepend* at position
 
 ### 15. Native return types added for PSR-7 v2 covariance
 
-Six methods gained explicit language-level return types to satisfy the tightened `psr/http-message: ^2.0` contract:
+Seven methods gained explicit language-level return types to satisfy the tightened `psr/http-message: ^2.0` contract:
 
 | Method                                       | Added return type   |
 |----------------------------------------------|---------------------|
@@ -152,9 +152,14 @@ Six methods gained explicit language-level return types to satisfy the tightened
 | `MessageTrait::getHeader($name)`             | `: array`           |
 | `UploadedFile::getStream()`                  | `: StreamInterface` |
 | `UploadedFile::moveTo($targetPath)`          | `: void`            |
+| `Uri::__toString()`                          | `: string`          |
 
 Existing PHPDoc `@return` lines already documented these types — only the runtime signature changed. **No call-site code needs to change.**
 
+> **Why this matters most on PHP 7.4 + PSR-7 v2.** PHP 7.4 enforces return-type covariance strictly: an untyped implementation does not satisfy a typed interface return, and the result is a fatal at class load:
+> *"Declaration of InitPHP\HTTP\Message\Uri::__toString() must be compatible with Psr\Http\Message\UriInterface::__toString(): string"*.
+> PHP 8.0+ accepted the older signatures silently. The fix is uniform across all supported PHP versions.
+
 If you **extended** any of these classes and **overrode** one of those methods, your override's signature must now match the new return type (or stay untyped — PHP allows that). An override declaring a different return type will fail at class load with a covariance error.
 
 ---

src/Message/Uri.php

@@ -91,7 +91,7 @@ public function __construct(string $uri = '')
      *
      * @return string
      */
-    public function __toString()
+    public function __toString(): string
     {
         return self::createUriString($this->scheme, $this->getAuthority(), $this->path, $this->query, $this->fragment);
     }