Updated composer dependencies, refactoring, added new security checker, added phpstan-deprecation-rules.

Author: DKravtsov

.env

@@ -31,7 +31,7 @@ XDEBUG_VERSION=3.3.2
 ###< XDebug docker configuration ###
 
 ###> MySQL docker configuration. Can be overridden in: .env.local, .env.staging, .env.prod. ###
-# MySQL version, recommend values: 8.4.2|8.3.0|8.2.0|8.1.0|8.0.39
+# MySQL version, recommend values: 9.1.0|9.0.1|8.4.2|8.3.0|8.2.0|8.1.0|8.0.39
 MYSQL_VERSION=8.4.2
 # MySQL INNODB_USE_NATIVE_AIO possible values: 1|0. Set to 0 when AIO interface is not supported on OSX. https://dev.mysql.com/doc/refman/8.0/en/innodb-parameters.html#sysvar_innodb_use_native_aio
 INNODB_USE_NATIVE_AIO=1

.idea/php.xml

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1.7-labs
 FROM php:8.3-fpm
 
 # set main params
@@ -42,6 +43,7 @@ RUN apt-get update && apt-get upgrade -y && apt-get install -y \
       libzip-dev \
       wget \
       librabbitmq-dev \
+      debsecan \
     && pecl install amqp \
     && docker-php-ext-configure pdo_mysql --with-pdo-mysql=mysqlnd \
     && docker-php-ext-configure intl \
@@ -53,6 +55,8 @@ RUN apt-get update && apt-get upgrade -y && apt-get install -y \
       opcache \
       zip \
     && docker-php-ext-enable amqp \
+    && apt-get install --no-install-recommends -y \
+        $(debsecan --suite bookworm --format packages --only-fixed) \
     && rm -rf /tmp/* \
     && rm -rf /var/list/apt/* \
     && rm -rf /var/lib/apt/lists/* \
@@ -74,10 +78,6 @@ COPY ./docker/general/do_we_need_xdebug.sh /tmp/
 COPY ./docker/dev/xdebug-${XDEBUG_CONFIG}.ini /tmp/xdebug.ini
 RUN chmod u+x /tmp/do_we_need_xdebug.sh && /tmp/do_we_need_xdebug.sh
 
-# install security-checker in case dev/test environment
-COPY ./docker/general/do_we_need_security-checker.sh /tmp/
-RUN chmod u+x /tmp/do_we_need_security-checker.sh && /tmp/do_we_need_security-checker.sh
-
 # install composer
 COPY --from=composer:latest /usr/bin/composer /usr/bin/composer
 RUN chmod +x /usr/bin/composer
@@ -114,6 +114,10 @@ RUN if [ "$BUILD_ARGUMENT_ENV" = "dev" ] || [ "$BUILD_ARGUMENT_ENV" = "test" ];
     else export APP_ENV=$BUILD_ARGUMENT_ENV && COMPOSER_MEMORY_LIMIT=-1 composer install --optimize-autoloader --no-interaction --no-progress --no-dev; \
     fi
 
+# checks for security vulnerability advisories for installed packages in case dev/test environment
+RUN if [ "$BUILD_ARGUMENT_ENV" = "dev" ] || [ "$BUILD_ARGUMENT_ENV" = "test" ]; then COMPOSER_MEMORY_LIMIT=-1 composer audit; \
+    fi
+
 # create cached config file .env.local.php in case staging/prod environment
 RUN if [ "$BUILD_ARGUMENT_ENV" = "staging" ] || [ "$BUILD_ARGUMENT_ENV" = "prod" ]; then composer dump-env $BUILD_ARGUMENT_ENV; \
     fi

Dockerfile

@@ -277,6 +277,9 @@ composer-install: ## Installs composer dependencies
 composer-update: ## Updates composer dependencies
 	@make exec-bash cmd="COMPOSER_MEMORY_LIMIT=-1 composer update"
 
+composer-audit: ## Checks for security vulnerability advisories for installed packages
+	@make exec-bash cmd="COMPOSER_MEMORY_LIMIT=-1 composer audit"
+
 info: ## Shows Php and Symfony version
 	@make exec cmd="php --version"
 	@make exec cmd="bin/console about"

Makefile

@@ -14,7 +14,7 @@
 		"Elasticsearch"
 	],
 	"homepage": "https://github.com/systemsdk/docker-symfony-api",
-	"version": "v3.2.1",
+	"version": "v3.3.0",
 	"license": "MIT",
 	"authors": [
 		{