Merge pull request #376 from XeroAPI/PETOSS-518-Find-package-vulnerab…

…ilities-and-update-dependent-packages-for-PHP

Petoss 518 find package vulnerabilities and update dependent packages for php

.github/workflows/build-lint-test.yml

@@ -27,6 +27,14 @@ jobs:
               run: composer install
               working-directory: xero-php-oauth2
 
+            - name: Check for Vulnerabilities
+              run: composer audit
+              working-directory: xero-php-oauth2
+
+            - name: Check for Outdated Packages
+              run: composer outdated
+              working-directory: xero-php-oauth2
+
             - name: Validate PHP Syntax
               run: find . -path ./vendor -prune -o -name "*.php" -exec php -l {} \; > /dev/null || exit 1
               working-directory: xero-php-oauth2

README.md

@@ -57,7 +57,7 @@ Sample apps can get you started quickly with simple auth flows and advanced usag
 # Installation
 To install this SDK in your project we recommend using [Composer](https://getcomposer.org/doc/00-intro.md#installation-linux-unix-macos) (For OSX we recommend using [Homebrew](https://formulae.brew.sh/formula/composer)).
 
-All third party libraries dependencies managed with Composer and the SDK requires `PHP 5.6` and later.
+All third party libraries dependencies managed with Composer and the SDK requires `PHP 8.1` and later.
 
 To install the bindings via [Composer](http://getcomposer.org/), and add the xero-php-oauth2 sdk to your `composer.json` and navigate to where your composer.json file is and run the command:
 ```

composer.json

@@ -18,7 +18,7 @@
         }
     ],
     "require": {
-        "php": ">=5.6",
+        "php": ">=8.1",
         "ext-curl": "*",
         "ext-json": "*",
         "ext-mbstring": "*",
@@ -27,9 +27,8 @@
         "firebase/php-jwt": "^6.0"
     },
     "require-dev": {
-        "phpunit/phpunit": "^4.8",
-        "squizlabs/php_codesniffer": "~2.6",
-        "friendsofphp/php-cs-fixer": "~2.12"
+        "squizlabs/php_codesniffer": "^3.10",
+        "friendsofphp/php-cs-fixer": "^3.60"
     },
     "autoload": {
         "psr-4": { "XeroAPI\\XeroPHP\\" : "lib/" }