Exponential Platform Legacy v3.3.44.11

Fixed

• The 3.x line installs on PHP 8.0 again, as composer.json and doc/INSTALL.md promise.
• se7enxweb/symfony-flex ^2.10.3 installs on PHP 8.0 again.
• se7enxweb/twig ~3.19.1 on every PHP version.
  • It is Twig 3.19 with the security fixes of Twig 3.26 and 3.27, and it includes the intl extension.
  • It replaces twig/twig and twig/intl-extra.
  • Every older release that still runs on PHP 8.0 is refused by Composer's security blocking.
• A per-id advisory policy (config.policy.advisories.ignore-id, and audit.ignore for Composer 2.9).
  • It lists the 17 advisory ids that the fork's version number falls into, each with the fix that resolves it.
  • Nothing is ignored as a whole.
• conflict: unfixed Twig releases (twig/twig other than the fork below 3.27, twig/intl-extra below 3.26) are never installed.
• The project no longer replaces se7enxweb/ezpublish-legacy-installer itself. The installer package does, so Composer can install its 2.2.5, which runs on PHP 8.0.
• The 0.3.x-dev branch of se7enxweb/ezplatform-standard-design allows PHP 8.0 again.

Changed

• Twig is 3.19.1 (the se7enxweb fork) on every PHP version, as the 2.5 line uses se7enxweb/twig 2.16.
• Before, PHP 8.1 and later installed upstream Twig 3.30.
• Composer does not choose a package that only replaces twig/twig unless the project requires it.

Also in this release

• The injected-settings subscriber had readonly promoted properties, which need PHP 8.1. It now uses plain private properties, so the container compiles on PHP 8.0.
• doc/INSTALL.md asks for memory_limit ≥ 512M for the console. With Twig 3.19.x, cache:clear in the dev environment needs about 288M (bisected; upstream Twig 3.19.0 needs the same).

Known, not fixed here

• The Platform admin (/adminui) answers 500 on PHP 8.0 and 8.5 alike, so it has nothing to do with PHP 8.0.
• yarn ez (INSTALL.md step 9) fails because se7enxweb/ezplatform-admin-ui-assets v5.3.6 ships no Resources/public/vendors.
• Upstream builds those into the release tag with bin/prepare_release.sh, and the fork's tag lacks them.
• The ngadminui siteaccess is listed but the 3.x line installs no Netgen Admin UI.