Update openid-connect-bundle to 5.0 and Symfony to 8.1 - #85
Merged
Conversation
- Bump itk-dev/openid-connect-bundle to ^5.0 (pulls itk-dev/openid-connect 5.0) - Migrate AzureOIDCAuthenticator to the new OIDC exception marker interface OpenIdConnectExceptionInterface (5.0 BC: concrete exceptions no longer extend ItkOpenIdConnectException) - Update Symfony to 8.1 (Flex pin 8.1.*, asset-mapper ~8.1.0) - Regenerate config/reference.php for Symfony 8.1 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
API Specification - Non-breaking changesAPI Changelog 1.0.0 vs. 1.0.0No changes detected |
- composer-audit: pass --locked so the audit runs against the committed lock file (CI container has no installed vendor/) - Regenerate public/api-spec-v1.yaml for Symfony YAML 8.1 dumper formatting - Move the 1.11.1 hotfix entry (#84) into a ## [1.11.1] section so the [1.11.1] link reference is used (fixes markdownlint MD053) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
turegjorup
added a commit
that referenced
this pull request
Jun 2, 2026
Brings openid-connect-bundle 5.0 and Symfony 8.1 upgrade (#85). # Conflicts: # CHANGELOG.md
turegjorup
added a commit
that referenced
this pull request
Jun 2, 2026
Port of #85 onto main (regenerated lock/api-spec on main's baseline, which does not include the unreleased asset-mapper migration). - Bump itk-dev/openid-connect-bundle to ^5.0 (pulls itk-dev/openid-connect 5.0) - Migrate AzureOIDCAuthenticator to OpenIdConnectExceptionInterface (5.0 BC) - Update Symfony to 8.1 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Updates
itk-dev/openid-connect-bundleto 5.0 and Symfony to 8.1.itk-dev/openid-connect-bundleto^5.0(pullsitk-dev/openid-connect5.0.0).AzureOIDCAuthenticatorto the new OIDC exception marker interface.extra.symfony.require8.0.* → 8.1.*andsymfony/asset-mapper~8.0.0 → ~8.1.0(every othersymfony/*was already^8.0).config/reference.phpfor Symfony 8.1 (auto-generated config-reference helper).Why / BC
openid-connect-bundle 5.0 reworks the exception hierarchy onto marker interfaces. Upstream
itk-dev/openid-connect5.0 makesItkOpenIdConnectExceptiona deprecated abstract that concrete exceptions no longer extend — so the previouscatch (ItkOpenIdConnectException|InvalidProviderException $exception)would have silently stopped catching auth failures.The upstream marker
OpenIdConnectExceptionInterfacecovers failures from both the library and the bundle (the bundle'sOpenIdConnectBundleExceptionInterfaceextends it), mirroring how the bundle migrated its own authenticator.Verification (local, all green on Symfony 8.1 + bundle 5.0.0)
composer validate --strict✅ ·composer audit✅ no advisoriescomposer outdated --direct✅ all up to dateDeploy note
The post-update
cache:clearcan fail on a stale 8.0 compiled cache (VarExporter\Internal\Hydratornot found, class moved in 8.1). Ensurevar/cache/*is clean on deploy.🤖 Generated with Claude Code