[fguimier]

Summary

Refs IT9PE1-32062

• Pass requireTld: false explicitly on the Url constraint of Log::$requestUrl. Omitting it is deprecated since Symfony 7.1, and Symfony 8 flips the default to true: request URLs without a TLD (http://localhost/...) would then fail validation.
• false is the current default, so nothing changes on Symfony 7. On Symfony 8 it keeps today's behaviour.
• Adds conflict: symfony/validator <7.4: validator is only a dev requirement and symfony/framework-bundle 7.4 still accepts validator 6.4, so a consumer on validator 7.0 would otherwise hit an unknown named argument error.

Test plan

• Fully covered by automated tests: LogTest::testRequestUrlWithoutTldIsValid validates a localhost URL. Without the fix it fails on the highest dependency set (symfony/validator 8.1.8, checked locally).

Shipping

Merging this PR ships nothing: it needs a semver tag / GitHub release, then a
composer require assoconnect/log-bundle:^x.y bump PR in the backend. Two reviews total. A minor release (v2.7.0) covers #44 (merged) and this PR.

🤖 Generated with Claude Code

[sonarqubecloud]

❌ The last analysis has failed.

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[fguimier]

🤖 Review gate — 0 error / 0 warning / 2 info

Human review needed: yes — stacked on #44, so it cannot be merged before it. On its own the agent found nothing to flag: requireTld: false keeps the current 7.x validation of Log::$requestUrl, LogTest::testRequestUrlWithoutTldIsValid fails on symfony/validator 8.x if the fix is reverted, and the symfony/validator <7.4 conflict protects consumers who install validator separately.

🧪 Coverage: 1/1 behavior changes covered — discriminates on the highest job only (validator 8.x); on lowest (7.4) the default is already false
🎯 Hotspot thresholds: none (fewer than 100 files touched in 12 months)

⚠️ Self-review by the author is mandatory before merging, regardless of this verdict.

[fguimier]

🤖 Review gate — re-run after #44 was merged, supersedes the previous verdict — 0 error / 0 warning / 2 info

Human review needed: no — no longer stacked: rebased on main, the diff is exactly the two commits already reviewed (requireTld: false on Log::$requestUrl, and the symfony/validator <7.4 conflict). The previous verdict was forced to human review only because of the stack. Can be merged without a peer review.

🧪 Coverage: 1/1 behavior changes covered — LogTest::testRequestUrlWithoutTldIsValid discriminates on the highest job (validator 8.x)
🎯 Hotspot thresholds: none (fewer than 100 files touched in 12 months)

⚠️ Self-review by the author is mandatory before merging, regardless of this verdict.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud