[DO NOT COMMIT] Vendor minimum testing issue

Remove explicitly drupal/coder + Composer minimum is 1.9.0 now for Drupal 8.8.x.

Symfony has changed the wording of the ApcClassLoader deprecation message in the course of the version 3 lifecycle.

#9 sure. Let's see what else we need to get this green, and then spin-off the non-drupalci changes to a separate issue.

• guzzlehttp/guzzle needs to be at least at 6.3 where CookieJar::getCookieByName was introduced
• pear/archive_tar needs to be at least at 1.4.5 to be compliant with SA-CORE-2019-001 (and not calling deprecated code)

I do not know how to fix the rest. Gut feeling says all this can be telated to Mink but I will leave it to someone in the knows.

Composer to ^1.9 as per #6 is not necessary here, in case it would be managed in #3075785: Update composer/composer to ^1.9.1.

This should be green, now.

-        "behat/mink-goutte-driver": "^1.2",
+        "behat/mink-goutte-driver": "^1.2.1",
+        "behat/mink-browserkit-driver": "^1.3.3",
...
+        "instaclick/php-webdriver": "^1.4.5",
...
-        "jcalderonzumba/mink-phantomjs-driver": "^0.3.1",
+        "jcalderonzumba/mink-phantomjs-driver": "^0.3.2",

fix the mink drivers to at least the version currently installed in lock, and

+        "symfony/dom-crawler":"^3.4.0",
+        "symfony/browser-kit":"^3.4.0",

prevent these two Symfony components to be downgraded to 2.x versions.

This patch is not for commit - todos:
1 - agree this is the final set of lowest dependencies constraints. If so, then
2 - file a separate issue with the patch here without the drupalci.yml changes, for commit, and
3 - keep the patch with the drupalci.yml changes only here, in RTBC to keep testing daily

needs reroll

Rerolled.

Do we have an issue for at least pear/archive_tar from #12? That seems like an easy gain since it's a security concern. I could only find #3039611: Update core PHP dependencies for 8.8.x

There's a #3086332: Explicitly require-dev symfony/browser-kit: 3.4.0 too, now.

Reroll after commit of #3086332: Explicitly require-dev symfony/browser-kit: 3.4.0

@Mile23 re #22: filed #3086796: Explicitly require pear/archive_tar ^1.4.5

Filed #3086811: Explicitly require guzzlehttp/guzzle ^6.3

Reroll after commit of #3086811: Explicitly require guzzlehttp/guzzle ^6.3.

A test only patch just to see where we'd stand without the lower constraints set.

Looks like #3086796: Explicitly require pear/archive_tar ^1.4.5 will help us with the fails in #29, since pear/archive_tar will bump up our requirement for pear/pear-core-minimal.

Reuploading patch in #32

Rerolls.

Filed #3087678: Explicitly require-dev symfony/dom-crawler ^3.4.0

Needs reroll.

Re-roll.

Added similar issue for D9: #3104474: D9, PHP 7.2 vendor min Testing issue - DO NOT COMMIT

Patch no longer applies.

I have tested applying path #48 and its getting applied without any conflicts.
Yet to fix the failed Unit Test error.

Let's revive this for 9.3.x and see whether our composer.json minimums are correct.

We need at least Coder 8.3.10 for Drupal.Classes.UseGlobalClass.

We need minimums of :

• PHPUnit 8.5.14 for PhpUnitWarningsTest to pass.
• Prophecy 1.11 to avoid three fatal errors in DateTimeNormalizerTest and friends.
• doctrine/annotations 1.12 to avoid a failure in DocParserTest.
• MinkBrowserKitDriver 1.4 to avoid Symfony deprecations.

We also need:

• fabpot/goutte 3.3 to run GoutteDriverTest
• instaclick/php-webdriver 1.4.1 to upload files in Selenium tests
• Prophecy 1.12 to run OptimizedPhpArrayDumperTest

Marking RTBC so this gets auto retested.

Opened #3215280: Bump minimum dependencies required for tests to pass - if that gets committed we can remove the changes here and leave only the drupalci.yml change.

#3215280: Bump minimum dependencies required for tests to pass landed so hopefully this should stay green for a while.

Oh so it looks like our minimum dependencies differ based on PHP version, somehow :(

Just helping my eyes when they scan the RTBC queue...

@catch It's a support request so you could make your bookmark exclude those. (That's what I've done.)

Two releases behind now.

I think we no longer need this, since we have proper DrupalCI environments now?