Skip to content

Conversation

@jbilbo
Copy link
Member

@jbilbo jbilbo commented Jan 29, 2026

  • Upgrade PHPUnit from 4.8 to 8.5.52 to fix unsafe deserialization vulnerability (Dependabot alert)
  • Bump minimum PHP version to 7.2
  • Add type hints to all extract() methods
  • Migrate CI from Travis to GitHub Actions (testing PHP 7.2-8.3)
  • Update documentation and copyright year
  • Bump version to 1.0.0 (after 10 years, I think we're good)

Fixes unsafe deserialization in PHPT code coverage handling by upgrading
PHPUnit from 4.8 to 8.5.52. This requires bumping minimum PHP to 7.2.
Test against PHP 7.2 through 8.3.
Add ?string parameter and array return type hints to all extract()
methods. This fixes PHP 8.1+ deprecation warnings about passing null
to string functions.
Copy link

@ttr3dp ttr3dp left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🍰 LGTM!

@jbilbo jbilbo merged commit c5af5c9 into main Jan 29, 2026
14 checks passed
@jbilbo jbilbo deleted the upgrade-phpunit-github-actions branch January 29, 2026 14:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants