Purger les 26 alertes Dependabot et ouvrir l'app exemple à Symfony 8

.github/workflows/ci.yml

@@ -138,19 +138,32 @@ jobs:
             fail-fast: false
             matrix:
                 php-version: ['8.2', '8.3', '8.4', '8.5']
+                symfony: ['7.4.*', '8.0.*']
+                # Symfony 8 exige PHP 8.4+ : pas d'entrée 8.0 sous 8.4.
+                exclude:
+                    - php-version: '8.2'
+                      symfony: '8.0.*'
+                    - php-version: '8.3'
+                      symfony: '8.0.*'
+        env:
+            SYMFONY_REQUIRE: ${{ matrix.symfony }}
         steps:
             - uses: actions/checkout@v4
 
             - name: Setup PHP
               uses: shivammathur/setup-php@v2
               with:
                   php-version: ${{ matrix.php-version }}
-                  extensions: mbstring, sqlite3, pdo_sqlite
+                  # ext-grpc : le pont Temporal l'exige en dur, et le leg 8.0 résout (composer update)
+                  # au lieu d'installer depuis le lock — la contrainte plateforme y est donc vérifiée.
+                  extensions: mbstring, sqlite3, pdo_sqlite, grpc
                   coverage: none
 
-            - name: Composer install (symfony/)
+            # 7.4 : install, pour que le composer.lock versionné reste exercé (et scanné par Dependabot).
+            # 8.0 : update, SYMFONY_REQUIRE n'agissant qu'à la résolution, hors lock.
+            - name: Composer (symfony/, Symfony ${{ matrix.symfony }})
               working-directory: symfony
-              run: composer install --no-interaction --prefer-dist --no-progress
+              run: composer ${{ matrix.symfony == '7.4.*' && 'install' || 'update' }} --no-interaction --prefer-dist --no-progress
 
             - name: PHPUnit (symfony/)
               working-directory: symfony

symfony/composer.json

@@ -30,17 +30,18 @@
         "php": ">=8.2",
         "ext-ctype": "*",
         "ext-iconv": "*",
-        "doctrine/doctrine-bundle": ">=2.18.2",
+        "doctrine/doctrine-bundle": ">=2.19.0",
+        "gplanchat/durable": "@dev",
         "gplanchat/durable-bridge-temporal": "@dev",
         "gplanchat/durable-bundle": "@dev",
-        "symfony/console": "7.4.*",
-        "symfony/doctrine-messenger": "7.4.*",
-        "symfony/dotenv": "7.4.*",
-        "symfony/flex": "^2.10",
-        "symfony/framework-bundle": "7.4.*",
-        "symfony/runtime": "7.4.*",
-        "symfony/uid": "7.4.*",
-        "symfony/yaml": "7.4.*"
+        "symfony/console": "^7.4.17 || ^8.0",
+        "symfony/doctrine-messenger": "^7.4.15 || ^8.0",
+        "symfony/dotenv": "^7.4.15 || ^8.0",
+        "symfony/flex": "^2.11",
+        "symfony/framework-bundle": "^7.4.17 || ^8.0",
+        "symfony/runtime": "^7.4.14 || ^8.0",
+        "symfony/uid": "^7.4.17 || ^8.0",
+        "symfony/yaml": "^7.4.17 || ^8.0"
     },
     "config": {
         "allow-plugins": {
@@ -62,10 +63,10 @@
         }
     },
     "require-dev": {
-        "phpunit/phpunit": "^11.5.55",
-        "symfony/browser-kit": "7.4.*",
-        "symfony/twig-bundle": "7.4.*",
-        "symfony/web-profiler-bundle": "7.4.*"
+        "phpunit/phpunit": "^11.5.56",
+        "symfony/browser-kit": "^7.4.17 || ^8.0",
+        "symfony/twig-bundle": "^7.4.15 || ^8.0",
+        "symfony/web-profiler-bundle": "^7.4.17 || ^8.0"
     },
     "replace": {
         "symfony/polyfill-ctype": "*",