[fguimier]

Summary

Refs IT9PE1-32062

• Raise every symfony/* constraint from ^7.0|^8.0 to ^7.4|^8.0: 7.0 to 7.3 are no longer maintained, and 7.4 is the LTS line.
• Symfony 7.4 as the lowest set exposes three lowest-only breakages, so their floors go up too:
  • symfony/config ^7.4.1|^8.0, now an explicit requirement since the bundle builds its configuration tree with it: 7.4.0 ships TreeBuilder generics PHPStan rejects;
  • phpstan/phpstan-symfony ^2.0.9: earlier releases cannot read those generics;
  • symfony/polyfill-php85 ^1.33 (dev): 1.32 lacks array_last(), which the latest Rector calls on PHP 8.4.
• Prerequisite for the next PR, which passes requireTld explicitly on the Url constraint of Log::$requestUrl: that option only exists since symfony/validator 7.1.

Test plan

• Fully covered by automated tests: the CI lowest job replayed locally (lowest set, then the latest phpstan/rector/phpunit/phpcs) passes phpcs, phpstan, rector and phpunit, as does highest (PHP 8.4)

Shipping

Merging this PR ships nothing: it needs a semver tag / GitHub release, then a
composer require assoconnect/log-bundle:^x.y bump PR in the backend. Two reviews total. The release is meant to go out together with the requireTld fix.

🤖 Generated with Claude Code

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[fguimier]

🤖 Review gate — 0 error / 0 warning / 1 info

Human review needed: no — dependency constraints only: every symfony/* floor moves to 7.4, and the three lowest-only tooling breakages it exposed get their own floor (symfony/config ^7.4.1, phpstan/phpstan-symfony ^2.0.9, symfony/polyfill-php85 ^1.33). No runtime behaviour change; the lowest and highest CI jobs cover it. Can be merged without a peer review.

🧪 Coverage: 0/0 behavior changes — every change is a dependency constraint
🎯 Hotspot thresholds: none (fewer than 100 files touched in 12 months)

⚠️ Self-review by the author is mandatory before merging, regardless of this verdict.