Skip to content

Fix!: drop PHP 7.4–8.1 support to address insecure dependencies#1769

Merged
ramsessanchez merged 1 commit intomainfrom
fix/drop-php-7.4-8.1-support
Apr 9, 2026
Merged

Fix!: drop PHP 7.4–8.1 support to address insecure dependencies#1769
ramsessanchez merged 1 commit intomainfrom
fix/drop-php-7.4-8.1-support

Conversation

@ramsessanchez
Copy link
Copy Markdown
Contributor

@ramsessanchez ramsessanchez commented Apr 9, 2026

PHP 7.4, 8.0, and 8.1 are all end-of-life and block upgrading dependencies with known security vulnerabilities. This raises the minimum supported PHP version to 8.2.

Changes

  • composer.json

    • PHP constraint: ^8.0 || ^7.4\ → ^8.2\
    • PHPUnit: ^8.0 || ^9.0\ → ^10.0 || ^11.0\ (PHPUnit 8/9 do not support PHP 8.2+)
    • PHPStan: drop ^0.12.90, require ^1.0.0\ only
  • *.github/workflows/pr-validation.yml*

    • CI matrix updated to ['8.2', '8.3', '8.4', '8.5']\
  • *\phpunit.xml*

    • Replaced deprecated <filter>/\ (PHPUnit 8/9) with <source>/\ (PHPUnit 10+)

Mirrors microsoftgraph/msgraph-beta-sdk-php#448

Microsoft Reviewers: Open in CodeFlow

PHP 7.4, 8.0, and 8.1 are all end-of-life and block upgrading
dependencies with known security vulnerabilities. This raises the
minimum supported PHP version to 8.2.

Changes:
- composer.json: PHP ^8.2, PHPUnit ^10.0||^11.0, PHPStan ^1.0.0
- CI matrix: ['8.2', '8.3', '8.4', '8.5']
- phpunit.xml: replace deprecated filter/whitelist with source/include

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@ramsessanchez ramsessanchez requested a review from a team as a code owner April 9, 2026 19:07
@ramsessanchez ramsessanchez merged commit 72cdf08 into main Apr 9, 2026
9 checks passed
@ramsessanchez ramsessanchez deleted the fix/drop-php-7.4-8.1-support branch April 9, 2026 19:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants