fix(security): require patched symfony/validator for CVE-2024-50343

- Raise constraint to ^5.4.43 || ^6.4.11 || ^7.1.4 || ^8.0 (GHSA-g3rh-rrhp-jhh9)
- CI: prefer-lowest on Symfony 5.4; PHP 8.3 matrix uses Symfony 7.1 (7.0.x was affected)
- ZipCode constraint: apply options when Constraint no longer merges them (Symfony 8+)

Made-with: Cursor

Author: barbieswimcrew

.github/workflows/ci.yaml

@@ -14,7 +14,7 @@ jobs:
         include:
           - php: '8.0'
             stability: prefer-lowest
-            symfony-version: 4.4
+            symfony-version: 5.4
           - php: '8.0'
             symfony-version: 5.4
           - php: '8.1'
@@ -24,7 +24,7 @@ jobs:
           - php: '8.2'
             symfony-version: 6.4
           - php: '8.3'
-            symfony-version: 7.0
+            symfony-version: 7.1
 
     name: PHP ${{ matrix.php }} - ${{ matrix.stability }} tests
     steps:

src/ZipCodeValidator/Constraints/ZipCode.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace ZipCodeValidator\Constraints;
 
 use Attribute;
@@ -30,9 +32,8 @@ public function __construct(
         ?bool $strict = null,
         ?bool $caseSensitiveCheck = null,
         ?string $message = null
-    )
-    {
-        if (is_string($options)) {
+    ) {
+        if (\is_string($options)) {
             if (null !== $iso) {
                 throw new InvalidOptionsException(
                     'Cannot pass both positional string $options and named "iso". Use one style.',
@@ -43,7 +44,7 @@ public function __construct(
             $options = ['iso' => $options];
         } elseif (null === $options) {
             $options = [];
-        } elseif (!is_array($options)) {
+        } elseif (!\is_array($options)) {
             throw new InvalidOptionsException(sprintf('The options "%s" do not exist in constraint "%s".', 'options', __CLASS__), ['options']);
         }
 
@@ -57,7 +58,7 @@ public function __construct(
             'payload' => $payload,
         ];
 
-        $invalidOptions = array_values(array_filter(array_keys($options), fn ($option) => !in_array($option, array_keys($resolvedOptions), true)));
+        $invalidOptions = array_values(array_filter(array_keys($options), fn ($option) => !\in_array($option, array_keys($resolvedOptions), true)));
         if ([] !== $invalidOptions) {
             throw new InvalidOptionsException(
                 sprintf('The options "%s" do not exist in constraint "%s".', implode('", "', $invalidOptions), __CLASS__),
@@ -66,7 +67,7 @@ public function __construct(
         }
 
         foreach ($resolvedOptions as $option => $resolvedValue) {
-            if (null !== $resolvedValue || !array_key_exists($option, $options)) {
+            if (null !== $resolvedValue || !\array_key_exists($option, $options)) {
                 continue;
             }
 
@@ -81,7 +82,7 @@ public function __construct(
             if (null === $resolvedValue) {
                 continue;
             }
-            
+
             $this->{$option} = $resolvedValue;
         }