[JpMaxMan]

The v4.0.55 dependency lock reports 28 runtime security advisories. This updates the dependency lock and constraints, fixes model/write-connection TLS configuration for MySQL 8.4, and repairs an invalid Marketplace resource ordering attribute that prevents route initialization with the updated Doctrine ORM.

Validation on isolated PHP 8.3.36 / MySQL 8.4.13 rehearsal:

• Runtime Composer audit: zero vulnerability advisories; three abandoned-package notices remain.
• Laravel 12.70.2 boots and all 931 routes initialize after the mapping fix.
• 35 focused tests / 39 assertions pass (rate limiting, email-domain rules, mapping regression); PHPUnit deprecation notices and a result-cache permission warning remain.
• Synthetic RS256 sign/verify and tamper rejection pass. Four database TLS configuration scenarios pass.
• All 15 pending configuration-database migrations pass on the restored production copy; 19 executed, none pending.

Draft: shared model-database migration rehearsal and end-to-end authentication/API acceptance are still outstanding. This includes major dependency changes (JWT 7 and transitive phpseclib 4); passing the audit is not functional acceptance. No production rollout has occurred.

Tracking: https://app.clickup.com/t/86bcw9fnz

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[github-actions]

📘 OpenAPI / Swagger preview

➡️ https://OpenStackweb.github.io/summit-api/openapi/pr-662/

This page is automatically updated on each push to this PR.