Merge pull request #46 from tangrufus/php8

Update to PHP >=8.0; Update actions/cache to v4; Test PHP 8.0 to 8.4; Add dependabot config

.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+updates:
+  - package-ecosystem: composer
+    directory: "/"
+    schedule:
+      interval: daily
+    open-pull-requests-limit: 10
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: daily
+    open-pull-requests-limit: 10

.github/workflows/main.yml

@@ -11,24 +11,28 @@ on:
 jobs:
   main:
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        php: ['8.0', '8.1', '8.2', '8.3', '8.4']
     steps:
       - name: Checkout
         uses: actions/checkout@v4
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.0'
+          php-version: ${{ matrix.php }}
           coverage: xdebug
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Get composer cache directory
         id: composercache
         run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT
-      - uses: actions/cache@v3
+      - name: Cache dependencies
+        uses: actions/cache@v4
         with:
           path: ${{ steps.composercache.outputs.dir }}
-          key: ${{ runner.os }}-8.0.x-composer-${{ hashFiles('**/composer.json') }}
-          restore-keys: ${{ runner.os }}-8.0.x-composer-
+          key: ${{ runner.os }}-${{ matrix.php }}-composer-${{ hashFiles('**/composer.lock') }}
+          restore-keys: ${{ runner.os }}-${{ matrix.php }}-composer-
       - name: Install Composer dependencies
         run: composer install --no-progress --prefer-dist --optimize-autoloader
       - name: PHP int

.gitignore

@@ -1,2 +1,3 @@
 vendor
 coverage
+.phpunit.result.cache

README.md

@@ -125,10 +125,6 @@ Magically, everything still works. See this [comment](https://github.com/roots/w
 
 Any existing bcrypt hashed passwords will remain that way. Any new users or users resetting a password will get a new MD5 hashed password.
 
-**Why aren't you using the password_compat library so this works back to PHP 5.3.7?**
-
-The [password_compact](https://github.com/ircmaxell/password_compat) library is great if you really need it. But the Roots team advocates using supported versions of PHP which of now (March 2016) is 5.5 and above. Part of security is using a version of PHP that still gets security patches so we won't actively do something to support old unsupported versions of PHP.
-
 **Why doesn't this plugin show up in the admin?**
 
 If you're using Composer, then the `wp-password-bcrypt.php` file is automatically autoloaded. It's not treated as a true WordPress plugin since the package type is not set to `wordpress-muplugin` so it won't show up in the plugin list.

composer.json

@@ -41,13 +41,13 @@
     }
   },
   "require": {
-    "php": ">=5.6.0"
+    "php": ">=8.0"
   },
   "require-dev": {
     "brain/monkey": "^2.6",
     "mockery/mockery": "^1.4",
     "dealerdirect/phpcodesniffer-composer-installer": "^0.7.0",
-    "phpunit/phpunit": "<= 9.3",
+    "phpunit/phpunit": "^9.6",
     "squizlabs/php_codesniffer": "^3.5",
     "phpcompatibility/php-compatibility": "^9.3"
   },
@@ -67,5 +67,13 @@
     "test": "phpunit",
     "lint": "phpcs",
     "coverage": "XDEBUG_MODE=coverage phpunit --coverage-text --coverage-html=coverage"
+  },
+  "config": {
+    "platform": {
+      "php": "8.0.0"
+    },
+    "allow-plugins": {
+      "dealerdirect/phpcodesniffer-composer-installer": true
+    }
   }
 }