Release v2.2.0: PHP 8.2+ and Symfony spec alignment.

Raise minimum PHP to 8.2, drop Symfony 6 from composer constraints, align CI matrix with 7.4/8.0/8.1, update docs and fix GenerateSecretKeyCommandTest for MysqlAes messages.
EOF
)"
git tag -a v2.2.0 -m "$(cat <<'EOF'
Release v2.2.0
- PHP 8.2+ required; symfony/* ^7.0 || ^8.0
- CI: Symfony 7.4, 8.0, 8.1 on PHP 8.2–8.5
- Docs: README, INSTALLATION, UPGRADING, CHANGELOG, RELEASE
- Fix: GenerateSecretKeyCommandTest MysqlAes messages
See docs/UPGRADING.md#upgrading-to-220

Author: HecFranco

.github/workflows/ci.yml

@@ -1,4 +1,4 @@
-# CI: tests on PHP 8.1–8.5 × Symfony 7.0, 8.0 (exclusions for incompatible pairs). Requires ext-sodium.
+# CI: tests on PHP 8.2–8.5 × Symfony 7.4, 8.0, 8.1 (exclusions for incompatible pairs). Requires ext-sodium.
 # Coverage with PCOV; release updated via release.yml on tag push.
 name: CI
 
@@ -16,17 +16,17 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        php: ['8.1', '8.2', '8.3', '8.4', '8.5']
-        symfony: ['7.0', '8.0']
+        php: ['8.2', '8.3', '8.4', '8.5']
+        symfony: ['7.4', '8.0', '8.1']
         exclude:
-          - php: '8.1'
-            symfony: '7.0'
-          - php: '8.1'
-            symfony: '8.0'
           - php: '8.2'
             symfony: '8.0'
+          - php: '8.2'
+            symfony: '8.1'
           - php: '8.3'
             symfony: '8.0'
+          - php: '8.3'
+            symfony: '8.1'
 
     steps:
       - name: Checkout code
@@ -71,8 +71,8 @@ jobs:
           fi
           echo "✅ All tests passed successfully"
 
-      - name: Run tests with coverage (PHP 8.2 + Symfony 7.0 only)
-        if: matrix.php == '8.2' && matrix.symfony == '7.0'
+      - name: Run tests with coverage (PHP 8.2 + Symfony 7.4 only)
+        if: matrix.php == '8.2' && matrix.symfony == '7.4'
         run: |
           echo "📊 Generating coverage report..."
           composer test-coverage
@@ -165,9 +165,9 @@ jobs:
           coverage: pcov
           tools: composer:v2
 
-      - name: Install dependencies (Symfony 7.0)
+      - name: Install dependencies (Symfony 7.4)
         run: |
-          composer require symfony/config:^7.0 symfony/dependency-injection:^7.0 symfony/http-kernel:^7.0 symfony/property-access:^7.0 symfony/yaml:^7.0 symfony/var-exporter:^7.4 --no-interaction --no-update
+          composer require symfony/config:^7.4 symfony/dependency-injection:^7.4 symfony/http-kernel:^7.4 symfony/property-access:^7.4 symfony/yaml:^7.4 symfony/var-exporter:^7.4 --no-interaction --no-update
           composer update symfony/* --with-all-dependencies --no-interaction --prefer-dist --no-progress
 
       - name: Run tests with coverage

Makefile

@@ -118,3 +118,7 @@ clean:
 	rm -f coverage.xml
 	rm -f coverage-php.txt
 	rm -f .php-cs-fixer.cache
+
+# REQ-MAKE-008: update-deps (REQ-MAKE-008)
+BUNDLE_ROOT := $(abspath $(dir $(lastword $(MAKEFILE_LIST))))
+include $(BUNDLE_ROOT)/../.scripts/Makefile.update-deps.mk

README.md

@@ -1,8 +1,8 @@
 # Doctrine Encrypt Bundle
 
-[![CI](https://github.com/nowo-tech/DoctrineEncryptBundle/actions/workflows/ci.yml/badge.svg)](https://github.com/nowo-tech/DoctrineEncryptBundle/actions/workflows/ci.yml) [![Packagist Version](https://img.shields.io/packagist/v/nowo-tech/doctrine-encrypt-bundle.svg?style=flat)](https://packagist.org/packages/nowo-tech/doctrine-encrypt-bundle) [![Packagist Downloads](https://img.shields.io/packagist/dt/nowo-tech/doctrine-encrypt-bundle.svg)](https://packagist.org/packages/nowo-tech/doctrine-encrypt-bundle) [![License](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE) [![PHP](https://img.shields.io/badge/PHP-8.1%2B-777BB4?logo=php)](https://php.net) [![Symfony](https://img.shields.io/badge/Symfony-7%20%7C%208-000000?logo=symfony)](https://symfony.com) [![GitHub stars](https://img.shields.io/github/stars/nowo-tech/doctrine-encrypt-bundle.svg?style=social&label=Star)](https://github.com/nowo-tech/DoctrineEncryptBundle) [![Coverage](https://img.shields.io/badge/Coverage-100%25-brightgreen)](#tests-and-coverage)
+[![CI](https://github.com/nowo-tech/DoctrineEncryptBundle/actions/workflows/ci.yml/badge.svg)](https://github.com/nowo-tech/DoctrineEncryptBundle/actions/workflows/ci.yml) [![Packagist Version](https://img.shields.io/packagist/v/nowo-tech/doctrine-encrypt-bundle.svg?style=flat)](https://packagist.org/packages/nowo-tech/doctrine-encrypt-bundle) [![Packagist Downloads](https://img.shields.io/packagist/dt/nowo-tech/doctrine-encrypt-bundle.svg)](https://packagist.org/packages/nowo-tech/doctrine-encrypt-bundle) [![License](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE) [![PHP](https://img.shields.io/badge/PHP-8.2%2B-777BB4?logo=php)](https://php.net) [![Symfony](https://img.shields.io/badge/Symfony-7.4%20%7C%208.0%20%7C%208.1%2B-000000?logo=symfony)](https://symfony.com)
 
-**Symfony bundle to encrypt Doctrine entity fields at rest** using [Halite](https://github.com/paragonie/halite) or [Defuse](https://github.com/defuse/php-encryption)—audited libraries, no custom crypto. For **Symfony 7 and 8** · PHP 8.1+. Suits **GDPR** and compliance (e.g. Art. 32); supports key rotation and [Nowo\AnonymizedBundle](https://github.com/nowo-tech/AnonymizedBundle) for anonymization and erasure.
+**Symfony bundle to encrypt Doctrine entity fields at rest** using [Halite](https://github.com/paragonie/halite) or [Defuse](https://github.com/defuse/php-encryption)—audited libraries, no custom crypto. For **Symfony 7.4+ and 8** · PHP 8.2+. Suits **GDPR** and compliance (e.g. Art. 32); supports key rotation and [Nowo\AnonymizedBundle](https://github.com/nowo-tech/AnonymizedBundle) for anonymization and erasure.
 
 > ⭐ **Found this useful?** [Install from Packagist](https://packagist.org/packages/nowo-tech/doctrine-encrypt-bundle) · Give it a **star** on [GitHub](https://github.com/nowo-tech/DoctrineEncryptBundle) so more developers can find it.
 
@@ -36,7 +36,7 @@ Looking for **Doctrine encryption**, **encrypt entity fields**, **Halite Symfony
 - ✅ Console commands: status, generate secret key, encrypt/decrypt database, **rotate keys** (backup, decrypt, change keys, re-encrypt with confirmations)
 - ✅ **Key rotation** — one command or manual steps; combinable with [Nowo\AnonymizedBundle](https://github.com/nowo-tech/AnonymizedBundle) for GDPR-compliant anonymization and erasure
 - ✅ **Symfony Flex** recipe (register bundle + config; see [docs/INSTALLATION.md](docs/INSTALLATION.md))
-- ✅ Compatible with **Symfony 7 and 8** and **Doctrine ORM 2.x and 3.x**
+- ✅ Compatible with **Symfony 7.4+ and 8** and **Doctrine ORM 2.x and 3.x**
 - ✅ Compatible with **FrankenPHP** (HTTP runtime and optional **worker** mode; demos default to **`APP_ENV=dev`** with **Caddyfile.dev**, i.e. no PHP worker — see [docs/DEMO-FRANKENPHP.md](docs/DEMO-FRANKENPHP.md) and [Installation → FrankenPHP](docs/INSTALLATION.md#frankenphp-runtime-and-worker-mode))
 
 ## Installation
@@ -165,13 +165,13 @@ Values are encrypted on persist/update and decrypted on load. For **programmatic
 
 ## Requirements
 
-- PHP >= 8.1
-- **Symfony 7 or 8** (^7.0 \|\| ^8.0). Current releases of this package require Symfony 7 or 8 (see `composer.json`).
+- PHP >= 8.2
+- **Symfony 7.4+ or 8** (^7.0 \|\| ^8.0; tested on **7.4**, **8.0**, **8.1**). See `composer.json`.
 - Doctrine ORM ^2.15 \|\| ^3.0
 - paragonie/halite (included); for Defuse: `defuse/php-encryption ^2.1`
 - ext-sodium recommended for Halite (or sodium_compat)
 
-See [docs/INSTALLATION.md](docs/INSTALLATION.md#requirements) and [docs/UPGRADING.md](docs/UPGRADING.md) for compatibility notes.
+See [docs/INSTALLATION.md](docs/INSTALLATION.md#requirements) and [docs/UPGRADING.md](docs/UPGRADING.md#upgrading-to-220) for compatibility notes.
 
 ## Demo
 

composer.json

@@ -40,16 +40,16 @@
     }
   ],
   "require": {
-    "php": ">=8.1 <8.6",
+    "php": ">=8.2 <8.6",
     "doctrine/orm": "^2.15 || ^3.0",
     "paragonie/halite": "^5.1",
     "paragonie/sodium_compat": "^1.20 || ^2.0",
-    "symfony/config": "^6.0 || ^7.0 || ^8.0",
-    "symfony/dependency-injection": "^6.0 || ^7.0 || ^8.0",
-    "symfony/http-kernel": "^6.0 || ^7.0 || ^8.0",
-    "symfony/property-access": "^6.0 || ^7.0 || ^8.0",
-    "symfony/var-exporter": "^6.0 || ^7.0 || ^8.0",
-    "symfony/yaml": "^6.0 || ^7.0 || ^8.0",
+    "symfony/config": "^7.0 || ^8.0",
+    "symfony/dependency-injection": "^7.0 || ^8.0",
+    "symfony/http-kernel": "^7.0 || ^8.0",
+    "symfony/property-access": "^7.0 || ^8.0",
+    "symfony/var-exporter": "^7.0 || ^8.0",
+    "symfony/yaml": "^7.0 || ^8.0",
     "twig/twig": "^3.2"
   },
   "require-dev": {
@@ -61,7 +61,7 @@
     "phpstan/phpstan-symfony": "^2.0",
     "phpunit/phpunit": "^10.0 || ^11.0",
     "rector/rector": "^2.0",
-    "symfony/cache": "^6.0 || ^7.0 || ^8.0"
+    "symfony/cache": "^7.0 || ^8.0"
   },
   "suggest": {
     "defuse/php-encryption": "Alternative to Halite for encryption",

composer.lock

@@ -104,3 +104,7 @@ release-verify:
 		echo "✅ $$demo OK (HTTP $$code)"; \
 	done
 	@echo "✅ All demos passed release-verify."
+
+# REQ-MAKE-008: update-deps-all (REQ-MAKE-008)
+BUNDLE_ROOT := $(abspath $(dir $(lastword $(MAKEFILE_LIST)))/..)
+include $(abspath $(dir $(lastword $(MAKEFILE_LIST)))/../../.scripts/Makefile.demo-aggregate-update-deps.mk

demo/Makefile

@@ -151,3 +151,6 @@ test: ensure-up
 
 test-coverage: ensure-up
 	$(COMPOSE) exec -e APP_ENV=test $(SERVICE_PHP) composer test-coverage 2>/dev/null || $(COMPOSE) exec $(SERVICE_PHP) composer test
+
+# REQ-MAKE-008: update-deps (REQ-MAKE-008)
+include $(abspath $(dir $(lastword $(MAKEFILE_LIST)))/../../../.scripts/Makefile.demo-update-deps.mk