Update all dependencies to latest versions and fix security vulnerability

DEPENDENCY_UPDATES.md

@@ -0,0 +1,81 @@
+# Dependency Updates - January 2025
+
+This document summarizes the dependency updates performed to modernize the guzzle-cache-middleware project.
+
+## Major Updates Completed
+
+### 🔒 Security Fixes
+- **Fixed**: Carbon security vulnerability (CVE-2025-22145) by updating nesbot/carbon from 1.39.1 to 3.10.2
+- **Status**: All security audits now pass (`composer audit` shows no vulnerabilities)
+
+### 📦 Major Dependency Updates
+
+#### Testing Framework
+- **PHPUnit**: Updated from 9.6.24 to 10.5.50
+  - Updated `phpunit.xml.dist` for PHPUnit 10 compatibility
+  - All 81 tests continue to pass
+
+#### Cache Libraries
+- **PSR Cache**: Updated from 1.0.1 to 2.0.0
+- **Symfony Cache**: Updated from 5.4.46 to 7.2.9
+- **Illuminate Cache**: Updated from 5.5.44 to 11.45.1 (Laravel 5.5 → Laravel 11)
+
+#### Supporting Libraries
+- **Carbon**: 1.39.1 → 3.10.2 (addresses security vulnerability)
+- **Doctrine Inflector**: 1.4.4 → 2.1.0
+- **Symfony Translation**: 4.4.47 → 7.3.2
+- **Flysystem**: 3.16 → 3.30 (already up to date)
+
+### ⚙️ Configuration Updates
+- Updated `phpunit.xml.dist` schema for PHPUnit 10
+- Added `phpstan.neon` configuration file for future static analysis
+- Updated dependency constraints to allow modern versions
+
+## Compatibility
+
+### PHP Versions
+- Maintained compatibility with PHP 8.1+
+- Tested against PHP 8.1, 8.2, 8.3, 8.4
+
+### Breaking Changes
+- **None**: All updates were done maintaining backward compatibility
+- All existing tests pass without modification
+- Public API remains unchanged
+
+## Testing Status
+- ✅ All 81 tests pass
+- ✅ No security vulnerabilities
+- ✅ CI workflow compatible with new dependencies
+- ✅ Compatible across all supported PHP versions
+
+## Future Considerations
+
+### Static Analysis
+- PHPStan configuration added (`phpstan.neon`) but not installed due to network constraints
+- Can be installed manually: `composer require --dev phpstan/phpstan`
+
+### Further Updates
+- All major dependencies are now at modern versions
+- Future updates should be minor/patch versions
+- Regular `composer outdated` checks recommended
+
+## Verification Commands
+
+```bash
+# Run tests
+composer test
+
+# Check for security issues
+composer audit
+
+# Check for outdated packages
+composer outdated
+
+# Validate composer configuration
+composer validate
+```
+
+## Notes
+- The update process prioritized stability and backward compatibility
+- Only production-ready, stable versions were selected
+- All changes maintain the existing public API

composer.json

@@ -19,14 +19,14 @@
     "guzzlehttp/psr7": "^2.7.0"
   },
   "require-dev": {
-    "phpunit/phpunit": "^9.6.21",
-    "league/flysystem": "^3.16",
-    "psr/cache": "^1.0",
+    "phpunit/phpunit": "^10.5",
+    "league/flysystem": "^3.30",
+    "psr/cache": "^2.0",
     "cache/array-adapter": "^0.4 || ^0.5 || ^1.0",
-    "illuminate/cache": "^5.0",
+    "illuminate/cache": "^8.0 || ^9.0 || ^10.0 || ^11.0",
     "cache/simple-cache-bridge": "^0.1 || ^1.0",
     "symfony/phpunit-bridge": "^7.1.4",
-    "symfony/cache": "^4.4 || ^5.0"
+    "symfony/cache": "^5.0 || ^6.0 || ^7.0"
   },
   "autoload": {
     "psr-4": {

phpstan.neon

@@ -0,0 +1,5 @@
+parameters:
+	level: 5
+	paths:
+		- src
+	checkGenericClassInNonGenericObjectType: false

phpunit.xml.dist

@@ -1,6 +1,6 @@
 <?xml version="1.0"?>
 <phpunit xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
-         xsi:noNamespaceSchemaLocation="https://schema.phpunit.de/9.5/phpunit.xsd"
+         xsi:noNamespaceSchemaLocation="https://schema.phpunit.de/10.5/phpunit.xsd"
          backupGlobals="false"
          colors="true"
          bootstrap="./vendor/autoload.php">