Boyscouting

.github/workflows/ci.yml

@@ -4,11 +4,11 @@ on: [push, pull_request]
 jobs:
   build:
     name: PHPUnit
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     strategy:
       max-parallel: 10
       matrix:
-        php: ['7.4', '8.0', '8.1']
+        php: ['7.4', '8.0', '8.1', '8.2', '8.3', '8.4']
 
     steps:
       - name: Set up PHP

.github/workflows/static.yml

@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Psalm
         uses: docker://vimeo/psalm-github-actions

README.md

@@ -8,4 +8,4 @@
 [![Downloads](https://img.shields.io/packagist/dt/paragonie/hidden-string.svg)](https://packagist.org/packages/paragonie/hidden-string)
 
 This package extracts the HiddenString class originally used in [Halite](https://github.com/paragonie/halite).
-**Requires PHP 7.**
+**Requires PHP 7 or newer.**

composer.json

@@ -18,7 +18,7 @@
   ],
   "require": {
     "php": "^7.4|^8",
-    "paragonie/constant_time_encoding": "^2"
+    "paragonie/constant_time_encoding": "^2|^3"
   },
   "autoload": {
     "psr-4": {

psalm.xml

@@ -1,6 +1,5 @@
 <?xml version="1.0"?>
 <psalm
-    totallyTyped="true"
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xmlns="https://getpsalm.org/schema/config"
     xsi:schemaLocation="https://getpsalm.org/schema/config file:///mnt/share/hiddenstring/vendor/vimeo/psalm/config.xsd"

src/HiddenString.php

@@ -50,6 +50,7 @@ final class HiddenString
      * @throws TypeError
      */
     public function __construct(
+        #[\SensitiveParameter]
         string $value,
         bool $disallowInline = true,
         bool $disallowSerialization = true
@@ -181,8 +182,10 @@ public function __sleep(): array
      *
      * @throws TypeError
      */
-    public static function safeStrcpy(string $string): string
-    {
+    public static function safeStrcpy(
+        #[\SensitiveParameter]
+        string $string
+    ): string {
         $length = Binary::safeStrlen($string);
         $return = '';
         $chunk = $length >> 1;