feat: migrate release-tool to PHP 8.5 and Symfony 8.1

.github/dependabot.yml

@@ -4,7 +4,9 @@
 version: 2
 updates:
   - package-ecosystem: composer
-    directory: /
+    directories:
+      - /
+      - /vendor-bin/*
     schedule:
       interval: daily
     cooldown:

.github/workflows/infection.yml

@@ -22,7 +22,9 @@ jobs:
           persist-credentials: false
       - uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
         with:
-          php-version: '8.3'
+          php-version: '8.5'
           coverage: xdebug
       - run: composer install --no-interaction --no-progress --prefer-dist
+      - run: composer bin phpunit install --no-interaction --no-progress --prefer-dist
+      - run: composer bin infection install --no-interaction --no-progress --prefer-dist
       - run: composer infection

.github/workflows/phar.yml

@@ -22,10 +22,11 @@ jobs:
           persist-credentials: false
       - uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
         with:
-          php-version: '8.3'
+          php-version: '8.5'
           coverage: none
       - run: composer install --no-interaction --no-progress --prefer-dist
-      - run: vendor/bin/box validate
+      - run: composer bin box install --no-interaction --no-progress --prefer-dist
+      - run: vendor-bin/box/vendor/bin/box validate
       - name: Build first PHAR
         run: composer build:phar && cp build/release-tool.phar build/release-tool.first.phar
       - name: Build second PHAR

.github/workflows/php-quality.yml

@@ -26,12 +26,24 @@ jobs:
           persist-credentials: false
       - uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
         with:
-          php-version: '8.3'
+          php-version: '8.5'
           coverage: none
       - run: composer install --no-interaction --no-progress --prefer-dist
+      - name: Install isolated quality tool
+        if: matrix.check != 'composer'
+        shell: bash
+        env:
+          QUALITY_CHECK: ${{ matrix.check }}
+        run: |
+          case "$QUALITY_CHECK" in
+            cs-check) namespace=php-cs-fixer ;;
+            rector-check) namespace=rector ;;
+            *) namespace="$QUALITY_CHECK" ;;
+          esac
+          composer bin "$namespace" install --no-interaction --no-progress --prefer-dist
       - name: Composer
         if: matrix.check == 'composer'
-        run: composer validate --strict && composer audit --locked
+        run: composer validate --strict && composer audit --locked && composer bin all validate --strict && composer bin all audit --locked
       - name: PHPStan
         if: matrix.check == 'phpstan'
         run: composer phpstan

.github/workflows/phpunit.yml

@@ -17,7 +17,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        php: ['8.3', '8.4']
+        php: ['8.5']
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
@@ -27,6 +27,7 @@ jobs:
           php-version: ${{ matrix.php }}
           coverage: none
       - run: composer install --no-interaction --no-progress --prefer-dist
+      - run: composer bin phpunit install --no-interaction --no-progress --prefer-dist
       - run: composer test
 
   runtime-php85:

.github/workflows/release.yml

@@ -90,16 +90,20 @@ jobs:
       - uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
         if: steps.release.outputs.published != 'true'
         with:
-          php-version: '8.3'
+          php-version: '8.5'
           coverage: none
 
       - name: Install dependencies
         if: steps.release.outputs.published != 'true'
         run: composer install --no-interaction --no-progress --prefer-dist
 
+      - name: Install isolated PHAR builder dependencies
+        if: steps.release.outputs.published != 'true'
+        run: composer bin box install --no-interaction --no-progress --prefer-dist
+
       - name: Validate PHAR configuration
         if: steps.release.outputs.published != 'true'
-        run: vendor/bin/box validate
+        run: vendor-bin/box/vendor/bin/box validate
 
       - name: Build PHAR
         if: steps.release.outputs.published != 'true'

.gitignore

@@ -6,3 +6,7 @@
 /.phpstan.cache
 /.psalm-cache/
 composer.phar
+
+# Isolated development and PHAR build dependencies
+/vendor-bin/**/vendor/
+/.deptrac.cache

REUSE.toml

@@ -31,7 +31,8 @@ path = [
     "resources/**",
     "src/**",
     "tests/**",
-    "tools/**"
+    "tools/**",
+    "vendor-bin/**"
 ]
 precedence = "aggregate"
 SPDX-FileCopyrightText = "2026 LibreCode coop and contributors"

VERSION

@@ -1 +1 @@
-0.11.21
+0.12.0

actions/appstore-publication-wait/action.yml

@@ -26,6 +26,12 @@ inputs:
 runs:
   using: composite
   steps:
+    - name: Set up PHP 8.5 for release-tool
+      uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+      with:
+        php-version: '8.5'
+        coverage: none
+
     - id: setup
       name: Setup release-tool
       shell: bash

actions/artifact-validate/action.yml

@@ -18,6 +18,12 @@ inputs:
 runs:
   using: composite
   steps:
+    - name: Set up PHP 8.5 for release-tool
+      uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+      with:
+        php-version: '8.5'
+        coverage: none
+
     - id: setup
       name: Setup release-tool
       shell: bash

actions/authorization-check/action.yml

@@ -22,6 +22,12 @@ inputs:
 runs:
   using: composite
   steps:
+    - name: Set up PHP 8.5 for release-tool
+      uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+      with:
+        php-version: '8.5'
+        coverage: none
+
     - id: setup
       name: Set up release-tool
       shell: bash

actions/build-inspect/action.yml

@@ -30,6 +30,12 @@ outputs:
 runs:
   using: composite
   steps:
+    - name: Set up PHP 8.5 for release-tool
+      uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+      with:
+        php-version: '8.5'
+        coverage: none
+
     - id: setup
       name: Set up release-tool
       shell: bash

actions/metadata-inspect/action.yml

@@ -35,6 +35,12 @@ outputs:
 runs:
   using: composite
   steps:
+    - name: Set up PHP 8.5 for release-tool
+      uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+      with:
+        php-version: '8.5'
+        coverage: none
+
     - id: setup
       name: Setup release-tool
       shell: bash

actions/post-merge/action.yml

@@ -70,6 +70,12 @@ runs:
           exit 1
         fi
 
+    - name: Set up PHP 8.5 for release-tool
+      uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+      with:
+        php-version: '8.5'
+        coverage: none
+
     - id: setup
       name: Setup release-tool
       shell: bash

actions/prepare/action.yml

@@ -86,6 +86,12 @@ runs:
           exit 1
         fi
 
+    - name: Set up PHP 8.5 for release-tool
+      uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+      with:
+        php-version: '8.5'
+        coverage: none
+
     - id: setup
       name: Setup release-tool
       shell: bash

actions/publication/action.yml

@@ -47,6 +47,12 @@ outputs:
 runs:
   using: composite
   steps:
+    - name: Set up PHP 8.5 for release-tool
+      uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+      with:
+        php-version: '8.5'
+        coverage: none
+
     - id: setup
       name: Setup release-tool
       shell: bash

actions/release-identity/action.yml

@@ -39,6 +39,12 @@ outputs:
 runs:
   using: composite
   steps:
+    - name: Set up PHP 8.5 for release-tool
+      uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+      with:
+        php-version: '8.5'
+        coverage: none
+
     - id: setup
       name: Setup release-tool
       shell: bash

actions/release-notes/action.yml

@@ -48,6 +48,12 @@ outputs:
 runs:
   using: composite
   steps:
+    - name: Set up PHP 8.5 for release-tool
+      uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+      with:
+        php-version: '8.5'
+        coverage: none
+
     - id: setup
       name: Setup release-tool
       shell: bash

actions/release-preflight/action.yml

@@ -45,6 +45,12 @@ outputs:
 runs:
   using: composite
   steps:
+    - name: Set up PHP 8.5 for release-tool
+      uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+      with:
+        php-version: '8.5'
+        coverage: none
+
     - id: setup
       name: Setup release-tool
       shell: bash

actions/resume-context/action.yml

@@ -23,6 +23,12 @@ outputs:
 runs:
   using: composite
   steps:
+    - name: Set up PHP 8.5 for release-tool
+      uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+      with:
+        php-version: '8.5'
+        coverage: none
+
     - id: setup
       name: Setup release-tool
       shell: bash

actions/stable-select/action.yml

@@ -37,6 +37,12 @@ outputs:
 runs:
   using: composite
   steps:
+    - name: Set up PHP 8.5 for release-tool
+      uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+      with:
+        php-version: '8.5'
+        coverage: none
+
     - id: setup
       name: Setup release-tool
       shell: bash

composer.json

@@ -4,24 +4,15 @@
   "type": "project",
   "license": "AGPL-3.0-or-later",
   "require": {
-    "php": "^8.3",
-    "symfony/console": "^7.4",
-    "symfony/yaml": "^7.4",
-    "symfony/http-client": "^7.4",
-    "symfony/process": "^7.4",
+    "php": "^8.5",
+    "symfony/console": "^8.1",
+    "symfony/yaml": "^8.1",
+    "symfony/http-client": "^8.1",
+    "symfony/process": "^8.1",
     "ext-simplexml": "*"
   },
   "require-dev": {
-    "friendsofphp/php-cs-fixer": "^3.70",
-    "humbug/box": "^4.6",
-    "infection/infection": "^0.35",
-    "phpmd/phpmd": "^3.0",
-    "phpstan/phpstan": "^2.1",
-    "phpunit/phpunit": "^11.5",
-    "rector/rector": "^2.0",
-    "squizlabs/php_codesniffer": "^4.0",
-    "vimeo/psalm": "^6.0",
-    "deptrac/deptrac": "^4.7"
+    "bamarni/composer-bin-plugin": "^1.9"
   },
   "autoload": {
     "psr-4": {
@@ -37,17 +28,17 @@
     "bin/release-tool"
   ],
   "scripts": {
-    "test": "phpunit",
-    "test:coverage": "XDEBUG_MODE=coverage phpunit --coverage-clover build/coverage.xml",
-    "infection": "infection --threads=max --min-msi=75 --min-covered-msi=75",
-    "phpstan": "phpstan analyse --no-progress",
-    "psalm": "psalm --no-cache",
-    "phpmd": "phpmd analyze",
-    "phpcs": "phpcs",
-    "cs:check": "php-cs-fixer fix --dry-run --diff",
-    "cs:fix": "php-cs-fixer fix",
-    "rector:check": "rector validate-config && rector process --dry-run",
-    "deptrac": "deptrac analyse --no-progress",
+    "test": "php vendor-bin/phpunit/vendor/bin/phpunit",
+    "test:coverage": "XDEBUG_MODE=coverage php vendor-bin/phpunit/vendor/bin/phpunit --coverage-clover build/coverage.xml",
+    "infection": "php vendor-bin/infection/vendor/bin/infection --threads=max --min-msi=75 --min-covered-msi=75",
+    "phpstan": "php vendor-bin/phpstan/vendor/bin/phpstan analyse --no-progress",
+    "psalm": "php vendor-bin/psalm/vendor/bin/psalm --no-cache",
+    "phpmd": "php vendor-bin/phpmd/vendor/bin/phpmd analyze",
+    "phpcs": "php vendor-bin/phpcs/vendor/bin/phpcs",
+    "cs:check": "php vendor-bin/php-cs-fixer/vendor/bin/php-cs-fixer fix --dry-run --diff",
+    "cs:fix": "php vendor-bin/php-cs-fixer/vendor/bin/php-cs-fixer fix",
+    "rector:check": "php vendor-bin/rector/vendor/bin/rector validate-config && php vendor-bin/rector/vendor/bin/rector process --dry-run",
+    "deptrac": "php vendor-bin/deptrac/vendor/bin/deptrac analyse --no-progress",
     "qa": [
       "@test",
       "@phpstan",
@@ -58,18 +49,24 @@
       "@rector:check",
       "@deptrac"
     ],
-    "build:phar": "box compile",
+    "build:phar": "php vendor-bin/box/vendor/bin/box compile",
     "test:phar": [
       "php tools/test-phar.php",
       "php tools/test-publication-phar.php"
     ]
   },
   "config": {
     "allow-plugins": {
-      "infection/extension-installer": true
+      "bamarni/composer-bin-plugin": true
     },
     "sort-packages": true
   },
   "minimum-stability": "stable",
-  "prefer-stable": true
+  "prefer-stable": true,
+  "extra": {
+    "bamarni-bin": {
+      "bin-links": false,
+      "forward-command": false
+    }
+  }
 }