Skip to content

Upgrade - #884

Open
4rthem wants to merge 4 commits into
masterfrom
upgrade
Open

Upgrade#884
4rthem wants to merge 4 commits into
masterfrom
upgrade

Conversation

@4rthem

@4rthem 4rthem commented Sep 3, 2026

Copy link
Copy Markdown
Member

No description provided.

4rthem and others added 4 commits September 3, 2026 00:44
- api-platform/core 3.4.x-dev -> 4.3.17 in databox & uploader APIs (PRs #855, #857)
  with BC config (hydra_prefix, standard_put: false, uploader symfony listeners)
  and code migration (Metadata namespaces, openapi Model objects, filter
  getProperties maps, error-resource handling, output DTO IRIs)
- guzzlehttp/guzzle 7.12.3 -> 7.15.5 in configurator (PR #873)
- vite 5.4.21 -> 7.3.2 in databox/indexer & visual-workflow (PR #845)
- @remix-run/router -> 1.23.4 (PR #877), js-yaml -> 4.3.2 (PR #859)
- drop golang.org/x/crypto from report via go mod tidy (PR #854)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- expose/api: api-platform/core 3.4.x-dev -> 4.3.17 (fixes CVE-2026-54164
  and CVE-2026-49858), openapiContext converted to OpenApi Model objects,
  BC config aligned with databox/uploader
- easycorp/easyadmin-bundle 5.4.1 -> 5.5.1 in the 3 APIs (CVE-2026-81892,
  custom action dispatcher access_control bypass)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- remove serializer.hydra_prefix BC flag from the 3 APIs: collections now
  expose member/totalItems/view, errors expose title/description
- @alchemy/api: HydraCollectionResponse & getHydraCollection use the new
  keys (legacy hydra:-prefixed keys still read as fallback),
  ApiConstant.HydraTitle/HydraDescription -> ErrorTitle/ErrorDescription
- update PHP test assertions accordingly

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- drop the standard_put: false BC flag: PUT now follows the v4 replace
  semantics, so plain item updates use PATCH (merge-patch+json)
- entities: remove Put operations twinned with Patch, rename update-only
  Put operations to Patch (databox, uploader, expose); custom RPC-style
  Put endpoints kept (move, merge, trigger-workflow, profile item upsert)
- @alchemy/api http client sends application/merge-patch+json on PATCH;
  client api calls switched from put() to patch() for entity updates
- databox ExposeClient uses PATCH against expose assets
- uploader: declare patch_formats (custom formats list lacked it)
- tests updated to PATCH with merge-patch content type

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant