bear/resource

Added

• HttpRequestException for HTTP transport and response parsing failures
• JsonSchemaException::getErrors() returning typed JsonSchemaError / ConstraintViolation DTOs through a JsonSchemaErrors collection (#364)
• JsonSchemaRequestException / JsonSchemaResponseException subclasses for source discrimination at catch sites (#369)

Changed

• Set default cURL timeouts for HTTP resource requests: 5 seconds to connect and 30 seconds overall

Fixed

• Remove invalid Psalm taint-source annotation from AbstractRequest::__invoke()

Added

• HttpRequestException for HTTP transport and response parsing failures
• JsonSchemaException::getErrors() returning typed JsonSchemaError / ConstraintViolation DTOs through a JsonSchemaErrors collection (#364)
• JsonSchemaRequestException / JsonSchemaResponseException subclasses for source discrimination at catch sites (#369)

Changed

• Set default cURL timeouts for HTTP resource requests: 5 seconds to connect and 30 seconds overall

Fixed

• Remove invalid Psalm taint-source annotation from AbstractRequest::__invoke()

Changed

• HalRenderer now evaluates embedded AbstractRequest instances via (string) cast instead of direct __invoke(), allowing lazy/batch decorators (e.g. bear/async's AsyncRequest) to short-circuit invocation (#360).
• Pre-seed HalRenderer on same-schema sibling embeds before evaluation so batch decorators preserve _links on flushed siblings (#360).
• Relax AbstractRequest::jsonSerialize() return type to mixed for JsonSerializable interface compliance (#360).

Fixed

• Skip body schema validation for cached rendered responses to avoid redundant validation on cache hits (#359).

Fixed

• Skip body schema validation for cached rendered responses (#359)
• Allow HalRenderer embed evaluation to handle mixed return from jsonSerialize() (#360)

Fixed

• Allow JsonSchemaInterceptor request validation to flatten Ray.InputQuery #[Input] DTO arguments before JSON Schema validation.

Fixed

• Allow JsonSchemaInterceptor request validation to flatten Ray.InputQuery #[Input] DTO arguments before JSON Schema validation

Added

• ResourceClient class — stateless ResourceInterface implementation safe for coroutine/async environments
• Method enum for type-safe HTTP method parameters
• ResourceClient::newRequest() for direct request creation without fluent interface
• LinkCrawler extracted from Linker for coroutine safety

Changed

• Linker delegates list detection to LinkCrawler for shared logic

Added

• ResourceClient class — stateless ResourceInterface implementation safe for coroutine/async environments
• Method enum for type-safe HTTP method parameters
• ResourceClient::newRequest() for direct request creation without fluent interface
• LinkCrawler extracted from Linker for coroutine safety

Changed

• Linker delegates list detection to LinkCrawler for shared logic

Added

• EmbedInterceptorInterface for swappable embed implementations
  • Allows alternative implementations (e.g., async/parallel embed resolution) to be injected via DI
  • EmbedInterceptor now implements this interface
  • EmbedResourceModule binds via the interface for extensibility

Added

• EmbedInterceptorInterface for swappable embed implementations
  • Allows alternative implementations (e.g., async/parallel embed resolution) to be injected via DI
  • EmbedInterceptor now implements this interface
  • EmbedResourceModule binds via the interface for extensibility

Add Psalm taint annotations for security analysis

Added

• Psalm taint annotations for improved security analysis
  • Added @psalm-taint-specialize to AbstractUri::__toString()
  • Enhanced static analysis for detecting potential security issues

Added

• Ray.InputQuery #[Input] attribute support for OPTIONS method
  • OPTIONS requests now properly expand #[Input] parameters to show constructor properties
  • Added comprehensive test coverage for Input parameter expansion scenarios

Fixed

• Bug where non-Input required parameters were dropped when #[Input] attribute existed
• OPTIONS method now correctly handles mixed Input and regular parameters

Changed

• Refactored OptionsMethodRequest parameter processing for improved maintainability
  • Extracted Input parameter processing to dedicated method
  • Improved code organization and readability

Added

• Ray.InputQuery #[Input] attribute support for OPTIONS method
  • OPTIONS requests now properly expand #[Input] parameters to show constructor properties
  • Added comprehensive test coverage for Input parameter expansion scenarios

Fixed

• Bug where non-Input required parameters were dropped when #[Input] attribute existed
• OPTIONS method now correctly handles mixed Input and regular parameters

Changed

• Refactored OptionsMethodRequest parameter processing for improved maintainability
  • Extracted Input parameter processing to dedicated method
  • Improved code organization and readability

Changes

Changed

• PHP 8 Attributes Migration: Removed doctrine/annotations and doctrine/cache dependencies, migrated to native PHP 8 attributes
• Minimum PHP Version: Updated requirement from PHP 8.1 to PHP 8.2
• Development Tools: Updated PHPUnit from 9.6 to 11.0, migrated test suite to PHP 8 attributes
• Dependencies: Updated to stable Ray dependencies (ray/aop ^2.18.0, ray/di ^2.18.0), replaced nocarrier/hal with koriym/hal ^1.1
• CI/CD: Updated Scrutinizer CI to PHP 8.4

Removed

• doctrine/annotations (abandoned package)
• doctrine/cache (abandoned package)
• symfony/polyfill-php83 (unnecessary for PHP 8.2+)
• Backward compatibility code for annotations

Fixed

• CI workflow to remove PHP 8.1 from test matrix
• Parameter processing to handle methods without attributes correctly
• Updated .gitignore for .phpunit.cache directory

⚠️ Migration Required

Applications using annotations must migrate to PHP 8 attributes:

composer require --dev bearsunday/rector-bearsunday

# Preview changes
vendor/bin/rector process src --config=vendor/bearsunday/rector-bearsunday/rector.php --dry-run

# Apply migration
vendor/bin/rector process src --config=vendor/bearsunday/rector-bearsunday/rector.php

Why This Change?

The doctrine/annotations package has been officially abandoned by its maintainers. This change:

• Eliminates security and compatibility risks from abandoned packages
• Adopts native PHP 8 attributes as the modern standard
• Improves performance (no runtime annotation parsing overhead)
• Provides automated migration tooling

Full changelog: https://github.com/bearsunday/BEAR.Resource/blob/1.x/CHANGELOG.md

Changed

• BREAKING: Minimum PHP version requirement changed from 8.1 to 8.2
• Migrated from Doctrine Annotations to PHP 8 Attributes
• Upgraded PHPUnit from 9.6 to 11.0
• Migrated PHPUnit XML configuration to latest schema
• Converted PHPUnit annotations to PHP 8 attributes (@depends → #[Depends], @dataProvider → #[DataProvider])
• Updated Scrutinizer CI to PHP 8.4
• Replaced nocarrier/hal with koriym/hal ^1.1
• Restored stable Ray dependencies (ray/aop ^2.18.0, ray/di ^2.18.0)
• Applied readonly class optimization by Rector

Removed

• BREAKING: Removed all Doctrine Annotations support
• Removed backward compatibility code for annotations (getAnnotationParamMetas, getAssistedNames, addNamedParams, getWebContext, setAssistedAnnotation, getInsFromMethodAnnotations)
• Removed doctrine/annotations dependency
• Removed unnecessary symfony/polyfill-php83 dependency
• Removed obsolete @CookieParam annotation docblocks

Migration Guide: Use bearsunday/rector-bearsunday to automatically convert annotations to attributes.

Fixed

• CI workflow to remove PHP 8.1 from test matrix
• Parameter processing to handle methods without attributes correctly
• Updated .gitignore for .phpunit.cache directory

Changed

• Updated ray/input-query dependency to version ^1.0

Full Changelog

v1.26.2...v1.26.3

Changed

• Updated ray/input-query dependency to version ^1.0

Changed

• Updated ray/input-query dependency to version ^0.3.0

This minor release updates the Ray.InputQuery dependency to support the latest features and improvements in version 0.3.0.

For full changelog, see: https://github.com/bearsunday/BEAR.Resource/blob/1.x/CHANGELOG.md

Changed

• Updated ray/input-query dependency to version ^0.3.0

Fixed

• Exception handling in parameter resolution for Ray.InputQuery integration
• Consistent ParameterException throwing when InvalidArgumentException occurs in parameter injection
• Proper exception chaining to preserve debugging context

Added

• Ray.InputQuery integration for file upload handling
• Support for AbstractFileUpload return types in InputFormParam and InputFormsParam
• Ability to pass generated file upload objects directly to resource methods
• Integration tests for file upload functionality
• InputParam class for handling input query parameters
• Comprehensive file upload examples and documentation
• Comprehensive type definitions in Types.php for improved type safety

Changed

• Updated ray/input-query dependency to version ^0.2.0
• Updated koriym/file-upload dependency to version ^0.2.0
• Refactored file upload handling for improved consistency and readability
• Replaced create method with newInstance for inputQuery instantiation

Fixed

• Parameter validation to prevent silent errors
• Code style issues in test files

Dependencies

• ray/input-query: ^0.2.0
• koriym/file-upload: ^0.2.0
• ext-fileinfo: * (required for Windows CI compatibility)

Added

• Request exception handler for JSON schema validation
• Arguments support for JsonSchemaRequestExceptionHandlerInterface

Changed

• Enhanced JSON schema validation error handling

Added

• PHP 8.4 support in CI workflow
• PHPStan baseline configuration

Changed

• Update rize/uri-template requirement from ^0.3 to ^0.4
• Update method parameters to allow nullable types
• Refactor codebase for improved readability and readonly properties
• Replace assertSame with assertJsonStringEqualsJsonString in tests
• Update copyright year to 2025

Changed

• Make koriym/json-schema-faker package optional