Skip to content

Update humbug/box to 4.7.1 and other compiler dependencies - #6862

Merged
ondrejmirtes merged 2 commits into
2.3.xfrom
box-4.7.1
Oct 27, 2026
Merged

ondrejmirtes merged 2 commits into
2.3.xfrom
box-4.7.1

Conversation

@ondrejmirtes

@ondrejmirtes ondrejmirtes commented Oct 27, 2026 •

Copy link
Copy Markdown
Member

Two commits:

  1. Update humbug/box to 4.7.1: only humbug/box in compiler/box (4.7.0 → 4.7.1). The only change in Box's src/ that affects compilation is the Windows-only reordering of chdir()/temp-dir removal in Box::endBuffering() (Fix: Compile broken on Windows since box-project/box#1651). The rest is CI, docs, and requirement-checker updates; we compile with check-requirements: false.
  2. Update compiler dependencies: composer update in both compiler/ and compiler/box/.
    • compiler/: phpstan/phpdoc-parser 2.3.8, symfony/string 6.4.48, symfony polyfills/contracts, plus dev tooling (doctrine/instantiator 2.0.0, myclabs/deep-copy, theseer/tokenizer, sebastian/recursion-context).
    • compiler/box/: jetbrains/phpstorm-stubs dev-master 517b9ad → 912ae72, amphp/, composer/pcre 3.4.0, composer/semver 3.5.2, justinrainbow/json-schema 6.14.0, league/uri 7.9.0, symfony/ 7.4.21, symfony polyfills 1.43.0, and others.

Compiler PHPUnit and PHPStan (-l 8 src tests) pass with the new lock.

PHAR comparison

Built the checksum PHAR the same way phar.yml does (autoloader-suffix PHPStanChecksum, PHAR_CHECKSUM=1, box compile --no-parallel --sort-compiled-files, then resign.php), from the same checkout path each time:

Build md5
Base (Box 4.7.0) f6252732114de5030426f04a048fe407
Base again (control) f6252732114de5030426f04a048fe407
Box 4.7.1 only f6252732114de5030426f04a048fe407
Box 4.7.1 + all compiler dependency updates f6252732114de5030426f04a048fe407

The PHAR is byte-for-byte identical across all of them, including after the phpstorm-stubs update that php-scoper uses for symbol exclusion.

@ondrejmirtes ondrejmirtes changed the title Update humbug/box to 4.7.1 Update humbug/box to 4.7.1 and other compiler dependencies Oct 27, 2026
@ondrejmirtes
ondrejmirtes merged commit 0e28919 into 2.3.x Oct 27, 2026
101 checks passed
@ondrejmirtes
ondrejmirtes deleted the box-4.7.1 branch October 27, 2026 10:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant