Skip to content

Update majors and minors package versions - #2262

Open
blued-gear wants to merge 11 commits into
mainfrom
update/all-majors_and_minors
Open

blued-gear wants to merge 11 commits into
mainfrom
update/all-majors_and_minors

Conversation

@blued-gear

Copy link
Copy Markdown
Collaborator

Updates all dependencies to their latest versions (except Mercure, as the version is pinned for some reason).
Replaces #2252 #2251 #2250 #2249 #2248

Most noteworthy breaking dependency change is oauth2-server-bundle, where code-migrations were applied.
Parts of our OAuth implementation were flawed. The changes introduce a breaking API change for the creation of OAuth clients.

Do we even need gumlet/php-image-resize anymore? It is not referenced in our code as far as I could see.

@blued-gear blued-gear added the dependencies Pull requests that update a dependency file label Oct 17, 2026
@blued-gear

blued-gear commented Oct 20, 2026 •

Copy link
Copy Markdown
Collaborator Author

I want to highlight that my change to the OAuth client creation makes it diverge from other standard schemes. Often the client-creator gets the secret together with the identifier from the server. Here the creator generates it themselves. I took inspiration from PKCE.

I'm not sure myself if this is necessary. So please let me know your thoughts and if I should revert it.

After reconsidering it, I reverted that change as it creates no benefit.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant