Replace StyleCI to PHP CS Fixer + Make ext-openssl optional + Fix Mac

.github/workflows/build.yml

@@ -22,6 +22,9 @@ on:
 
 name: build
 
+permissions:
+  contents: read
+
 jobs:
   phpunit:
     uses: yiisoft/actions/.github/workflows/phpunit.yml@master
@@ -33,3 +36,34 @@ jobs:
       php: >-
         ['8.2', '8.3', '8.4', '8.5']
       extensions: sodium, openssl
+
+  phpunit-without-openssl:
+    name: PHP 8.2 without openssl
+    runs-on: windows-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Install PHP with extensions
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.2'
+
+      - name: Install Composer dependencies
+        uses: ramsey/composer-install@65e4f84970763564f46a70b8a54b90d033b3bdda # 4.0.0
+
+      - name: Prepare PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.2'
+          coverage: xdebug
+          extensions: :openssl
+
+      - name: Run tests with PHPUnit with code coverage
+        run: vendor/bin/phpunit --coverage-clover=coverage.xml
+
+      - name: Upload coverage to Codecov
+        uses: codecov/codecov-action@v4
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          files: ./coverage.xml

.github/workflows/rector-cs.yml

@@ -0,0 +1,24 @@
+name: Rector + PHP CS Fixer
+
+on:
+  pull_request:
+    paths:
+      - 'src/**'
+      - 'tests/**'
+      - '.github/workflows/rector-cs.yml'
+      - 'composer.json'
+      - 'rector.php'
+      - '.php-cs-fixer.dist.php'
+
+permissions:
+  contents: write
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  rector:
+    uses: yiisoft/actions/.github/workflows/rector-cs.yml@master
+    with:
+      php: '8.2'

.gitignore

@@ -27,3 +27,7 @@ composer.phar
 /phpunit.phar
 /phpunit.xml
 /.phpunit.cache
+
+# PHP CS Fixer
+/.php-cs-fixer.cache
+/.php-cs-fixer.php

.php-cs-fixer.dist.php

@@ -0,0 +1,21 @@
+<?php
+
+declare(strict_types=1);
+
+use PhpCsFixer\Finder;
+use PhpCsFixer\Runner\Parallel\ParallelConfigFactory;
+use Yiisoft\CodeStyle\ConfigBuilder;
+
+$finder = (new Finder())->in([
+    __DIR__ . '/src',
+    __DIR__ . '/tests',
+])->notPath('MockHelper.php');
+
+return ConfigBuilder::build()
+    ->setRiskyAllowed(true)
+    ->setParallelConfig(ParallelConfigFactory::detect())
+    ->setRules([
+        '@Yiisoft/Core' => true,
+        '@Yiisoft/Core:risky' => true,
+    ])
+    ->setFinder($finder);

CHANGELOG.md

@@ -5,6 +5,9 @@
 - Bug #72: Fix possibly null offset in `PasswordHasher` (@olegbaturin)
 - Chg #75: Bump minimal required PHP version to 8.2 (@vjik)
 - Enh #75: Mark `Mac` class as readonly (@vjik)
+- Enh #76: Explicitly import classes, functions and constants in "use" section (@vjik)
+- Enh #76: Make `ext-openssl` optional, it is required only for `Crypt` class (@vjik)
+- Bug #76: Use `ValueError` catching instead of `hash_hmac()` return value check in `Mac` (@vjik)
 
 ## 1.2.0 November 25, 2025
 

composer-require-checker.json

@@ -1,5 +1,11 @@
 {
-    "symbol-whitelist": [
-        "random_bytes"
+    "php-core-extensions" : [
+        "Core",
+        "hash",
+        "Reflection",
+        "SPL",
+        "random",
+        "standard",
+        "openssl"
     ]
 }

composer.json

@@ -36,15 +36,19 @@
     "require": {
         "php": "8.2 - 8.5",
         "ext-hash": "*",
-        "ext-openssl": "*",
         "yiisoft/strings": "^2.0"
     },
+    "suggest": {
+        "ext-openssl": "Required to use Crypt class"
+    },
     "require-dev": {
         "bamarni/composer-bin-plugin": "^1.9.1",
+        "friendsofphp/php-cs-fixer": "^3.95.10",
         "maglnet/composer-require-checker": "^4.17.0",
         "phpunit/phpunit": "^11.5.55",
         "rector/rector": "^2.4.6",
-        "spatie/phpunit-watcher": "^1.24.4"
+        "spatie/phpunit-watcher": "^1.24.4",
+        "yiisoft/code-style": "^1.0.0"
     },
     "autoload": {
         "psr-4": {
@@ -67,7 +71,8 @@
         "test": "phpunit --display-deprecations",
         "test-watch": "phpunit-watcher watch",
         "psalm": "psalm",
-        "rector": "rector"
+        "rector": "rector",
+        "cs-fix": "php-cs-fixer fix"
     },
     "config": {
         "sort-packages": true,

src/AuthenticationException.php

@@ -4,7 +4,9 @@
 
 namespace Yiisoft\Security;
 
-final class AuthenticationException extends \RuntimeException
+use RuntimeException;
+
+final class AuthenticationException extends RuntimeException
 {
     public function __construct()
     {