Merge pull request #547 from nadezhdafilina/update-php-vite

ELSDOC-266, updated laravel, vite versions, added nategood page

Author: sboldyreva

docs/.vuepress/components/ELSTechnology.vue

@@ -1188,7 +1188,7 @@ const techData = [
       },
       {
         name: "Vite",
-        versions: "2.9.18 | 3.2.11 | 4.5.14 | 4.5.5 | 5.4.14",
+        versions: "2.9.18 | 3.2.11 | 4.5.14 | 4.5.5 | 5.4.14 | 5.4.21",
         link: "./vite/",
       },
       {
@@ -1598,9 +1598,14 @@ const techData = [
         versions: "6.11.1",
         link: "./firebase-php-jwt/",
       },
+      {
+        name: "Httpful",
+        versions: "0.3.2",
+        link: "./httpful/",
+      },
       {
         name: "Laravel",
-        versions: "5.4.36 | 5.5.50 | 5.6.40 | 5.7.29 | 5.8.38 | 8 | 10 | 11",
+        versions: "5.4.36 | 5.5.50 | 5.6.40 | 5.7.29 | 5.8.38 | 7.30.7 | 8 | 9.52.21 | 10 | 11 | 12.58.0",
         link: "./laravel/",
       },
       {

docs/.vuepress/config-client/sidebar.ts

@@ -284,6 +284,10 @@ export default {
                     path: '/els-for-libraries/firebase-php-jwt/',
                     icon: '/images/firebase.webp',
                 },
+                {
+                    path: '/els-for-libraries/httpful/',
+                    icon: '/images/php-logo.webp',
+                },
                 {
                     path: '/els-for-libraries/laravel/',
                     icon: '/images/laravel-logo.webp',

docs/els-for-libraries/httpful/README.md

@@ -0,0 +1,156 @@
+# Httpful
+
+Endless Lifecycle Support (ELS) for Httpful from TuxCare provides security fixes for Httpful library versions that have reached their end-of-life. This allows you to continue running your applications without vulnerability concerns, even after official support has ended.
+
+## Supported Versions
+
+* **Httpful** 0.3.2
+
+Other versions upon request.
+
+## Installation
+
+<ELSPrerequisites>
+
+* Nexus repository access credentials (username and password) — contact [sales@tuxcare.com](mailto:sales@tuxcare.com)
+* To browse available artifacts, visit TuxCare [Nexus](https://nexus.repo.tuxcare.com/#browse/browse:els_php) and click Sign in in the top right corner. You may need to refresh the page after logging in.
+
+</ELSPrerequisites>
+
+<ELSSteps>
+
+1. Locate the `auth.json` file
+
+   Composer reads credentials from a per-user `auth.json`. Create or edit the file at:
+
+   * **Linux/macOS**:
+     
+     ```
+     ~/.composer/auth.json
+     ```
+
+   * **Windows**:
+   
+     ```
+     %APPDATA%\Composer\auth.json
+     ```
+
+2. Add your TuxCare credentials
+
+   Use either the Composer CLI or edit `auth.json` directly to add credentials for `nexus.repo.tuxcare.com`:
+
+   <CodeTabs :tabs="[
+     { title: 'Composer CLI', content: `composer config --global --auth http-basic.nexus.repo.tuxcare.com USERNAME PASSWORD` },
+     { title: 'auth.json', content: authjson }
+   ]" />
+
+   Replace `USERNAME` and `PASSWORD` with the credentials provided by TuxCare.
+
+3. Register the TuxCare repository
+
+   Add the `els_php` Composer repository either via CLI or by editing `composer.json`:
+
+   <CodeTabs :tabs="[
+     { title: 'Composer CLI', content: cli },
+     { title: 'composer.json', content: composerjson }
+   ]" />
+
+4. Install Httpful
+
+   Install the TuxCare-maintained Httpful release that matches your project:
+
+   <CodeTabs :tabs="[
+     { title: 'Composer CLI', content: `composer require nategood/httpful:0.3.2-p1+tuxcare` },
+     { title: 'composer.json', content: httpfuljson }
+   ]" />
+
+   **Check the exact version listed in your TuxCare Nexus account to ensure you receive the most recent patched release.**
+
+   :::tip
+
+   If you edited `composer.json` manually, run `composer update` to install the package:
+   
+   ```
+   composer update
+   ```
+   
+   Composer will resolve dependencies against the TuxCare repository and install the patched releases.
+
+   :::
+
+</ELSSteps>
+
+### Composer Repository Configuration
+
+If you encounter dependency resolution errors like:
+
+`packages from higher priority repository do not match your constraint`
+
+it usually means your project requires a package version that is not yet available in the TuxCare repository.
+
+**Solution**: Update your `composer.json` to set the TuxCare repository as non-canonical:
+
+```
+{
+    "repositories": [
+        {
+            "type": "composer",
+            "url": "https://nexus.repo.tuxcare.com/repository/els_php/",
+            "canonical": false
+        }
+    ]
+}
+```
+
+This allows Composer to fall back to Packagist for packages not available in the TuxCare repository, while still preferring TuxCare patches when available.
+
+## What's Next?
+
+<WhatsNext hide-title>
+
+* ![](/images/eye.webp) [CVE Tracker](https://tuxcare.com/cve-tracker/) — Track vulnerability fixes and updates
+* ![](/images/bolt.webp) [Available fixes](https://tuxcare.com/cve-tracker/fixes) — Released fixes
+* ![](/images/box.webp) [Supported components](https://tuxcare.com/cve-tracker/products) — Components covered by ELS
+* ![](/images/shield-alert.webp) [VEX feed](https://security.tuxcare.com/vex/cyclonedx/els_lang_php/) — Vulnerability Exploitability eXchange feed
+* ![](/images/wrench.webp) [Managing the ELS repository](/els-for-libraries/managing-els-repository/) — Upgrade to a newer version
+
+</WhatsNext>
+
+<script setup>
+
+const authjson =
+`{
+  "http-basic": {
+    "nexus.repo.tuxcare.com": {
+      "username": "USERNAME",
+      "password": "PASSWORD"
+    }
+  }
+}`
+
+const composerjson =
+`{
+    "repositories": [
+        {
+        "type": "composer",
+        "url": "https://nexus.repo.tuxcare.com/repository/els_php/",
+        "options": {
+            "http": {
+            "verify": true
+            }
+        }
+        }
+    ]
+}`
+
+const cli =
+`composer config repositories.tuxcare '{"type":"composer","url":"https://nexus.repo.tuxcare.com/repository/els_php/","options":{"http":{"verify":true}}}' --json`
+
+const httpfuljson =
+`{
+    "require": {
+        "nategood/httpful": "0.3.2-p1+tuxcare"
+    }
+}`
+
+</script>

docs/els-for-libraries/laravel/README.md

@@ -4,7 +4,7 @@ Endless Lifecycle Support (ELS) for Laravel from TuxCare provides security fixes
 
 ## Supported Versions
 
-* **Laravel** 5.4.36, 5.5.50, 5.6.40, 5.7.29, 5.8.38, 8, 10, 11
+* **Laravel** 5.4.36, 5.5.50, 5.6.40, 5.7.29, 5.8.38, 7.30.7, 8, 9.52.21, 10, 11, 12.58.0
 * **Illuminate View** 5.4.36
 * **Illuminate Database** 5.4.36
 

docs/els-for-libraries/vite/README.md

@@ -4,7 +4,7 @@ Endless Lifecycle Support (ELS) for Vite from TuxCare provides security fixes fo
 
 ## Supported Vite Versions
 
-* Vite 2.9.18, 3.2.11, 4.5.14, 4.5.5, 5.4.14
+* Vite 2.9.18, 3.2.11, 4.5.14, 4.5.5, 5.4.14, 5.4.21
 
 ## Installation