So long make:auth, Hello better security with tests...
Howdy Makers,
One of the most notable changes to this release is the deprecation of make:auth. Almost a year ago, we introduced make:security:form-login in v1.49.0 and in this release we're introducing make:security:custom to speed up making custom security authenticators. These two commands fill the gap that make:auth would leave otherwise.
Along with a handful of other features, make:entity no longer adds any of the @method annotations to the entity class and if you're adding a relation to an entity with the same name as the "parent" entity - maker will help differentiate the two classes in the CLI output.
Aside from fixing the code generated by make:serializer:encoder to match the interface signatures it uses, we've also introduced another new feature:
Experimental
We've added the ability to generate tests that should work out of the box for:
make:crud
make:registration
make:reset-password
make:security:form-login
To generate these tests, you can either answer y || yes when the maker asks you "Do you want to generate PHPUnit tests?" Or simply pass --with-tests when calling the command. Review the generated test, customize it to your needs, and finally run php bin/phpunit. More tests for more makers are soon to follow!
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the minor group in /backend with 6 updates:
2.20.3
2.21.0
4.25.2
4.26.1
1.3.65
1.3.69
1.3.9
1.3.12
11.1.2
11.1.3
1.58.0
1.59.0
Updates
lexik/jwt-authentication-bundle
from 2.20.3 to 2.21.0Changelog
Sourced from lexik/jwt-authentication-bundle's changelog.
Commits
d57159d
Update CHANGELOG for v2.21.0ed77442
feature #1218 Invalidate a JWT token - Adding the jti claim by the JWTManager...069b7bb
Invalidate a JWT token - Adding the jti claim by the JWTManager class instead...3785c0f
feature #1170 feat: Invalidate a JWT token (ldaspt)bb8aa6d
feat: Invalidate a JWT token3d7359d
Rectorc3f89d5
Fix CS60770f1
Fix CI 2.xd737b37
feature #1207 Web-Token Framework simplified (Spomky)993168e
Web-Token Framework simplifiedUpdates
nelmio/api-doc-bundle
from 4.25.2 to 4.26.1Release notes
Sourced from nelmio/api-doc-bundle's releases.
Changelog
Sourced from nelmio/api-doc-bundle's changelog.
... (truncated)
Commits
2af8c5d
fix: Unknown Constraint class when not using symfony/validator (#2276)2d0f12d
fix: Generate operationids properly (#2266)5669b8f
feat: Add ability to configure UI through configuration (#2251)38682dd
refactor: PHPStan bump to level 6 (#2259)4b40eec
Improve composer.json (#2260)29e90a2
Update CONTRIBUTING guide (#2261)a585e50
remove phpunit 8.5, add phpunit 10.5 (#2258)db14c1a
[CI] Install friendsofsymfony/rest-bundle with Symfony 7 (#2257)43519f4
[CI] Install friendsofsymfony/rest-bundle with Symfony 7 (#2257)Updates
phpstan/phpstan-doctrine
from 1.3.65 to 1.3.69Release notes
Sourced from phpstan/phpstan-doctrine's releases.
Commits
ac56740
Revert "Add __benevolent return types to doctrine Result stub"1e59c4e
Add __benevolent return types to doctrine Result stub664e380
Fix compatibility with DBAL 445aa443
Enforce literal string for connection execute methodsUpdates
phpstan/phpstan-symfony
from 1.3.9 to 1.3.12Release notes
Sourced from phpstan/phpstan-symfony's releases.
Commits
f4b9407
Synchronize stub with symfony3fbf634
Synchronize stub with symfony99848d8
Add stub for Compound::getConstraints()Updates
phpunit/phpunit
from 11.1.2 to 11.1.3Release notes
Sourced from phpunit/phpunit's releases.
Changelog
Sourced from phpunit/phpunit's changelog.
Commits
d475be0
Prepare releaseeeb58ad
Merge branch '10.5' into 11.1547d314
Prepare release5fc31bd
Merge branch '10.5' into 11.16da42ed
Make this test work on Windowsd02eef1
Merge branch '10.5' into 11.1371fc2c
Update ChangeLog77dc808
Use JUnit XML logfile as expectation instead of test runner outputc722fb2
Do not crash when test run in child process ends unexpectedly and `--log-juni...b2b3555
Add--log-junit
to testUpdates
symfony/maker-bundle
from 1.58.0 to 1.59.0Release notes
Sourced from symfony/maker-bundle's releases.
Changelog
Sourced from symfony/maker-bundle's changelog.
Commits
1f02b59
minor #1526 [release] v1.59.003b5a9f
feature #1523 [make:auth] deprecated command03592b9
feature #1515 [make:security:form-login] add ability to generate tests48846de
feature 1520 [make:entity] Simplify repository PHPDoc removes method annotationsff1c8c5
bug #1525 [make:serializer:encoder] fix interface signature mismatch in templ...ed3465b
feature #1522 [make:security:custom] create a custom authenticatore7ea13d
feature #1497 [make:*] add ability to generate tests48d317e
feature #1521 [make:reset-password] improve types for static analysis in user...d711796
feature #1519 [make:registration] use "User" type in EmailVerifiere209117
feature #1518 [make:registration] addbool
type to User::isVerifiedDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show