>>> [!note] Migrated issue <!-- Drupal.org comment --> <!-- Migrated from issue #3254044. --> Reported by: [bradjones1](https://www.drupal.org/user/405824) Related to !6 >>> <h3 id="summary-problem-motivation">Problem/Motivation</h3> <p>Over on Simple OAuth, we're working on <span class="drupalorg-gitlab-issue-link project-issue-status-info project-issue-status-7"><a href="https://www.drupal.org/project/simple_oauth/issues/3230707" title="Status: Closed (fixed)">#3230707: 5.x broken on php 8 due to incompatibility with lcobucci/jwt v4 via league/oauth2-server ^8.2</a></span>, which bumps <code>jwt/lcobucci</code> to 4.x. This isn't necessarily because the functionality changes at all on our end, but we have other peer dependencies which require the version bump.</p> <p>I also use Authnet on this project, so I get</p> <pre>bradj@brad-laptop:~/www/kinksters$ composer update drupal/simple_oauth -W<br>Gathering patches for root package.<br>Loading composer repositories with package information&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Updating dependencies&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br>Your requirements could not be resolved to an installable set of packages.<br><br>&nbsp; Problem 1<br>&nbsp;&nbsp;&nbsp; - Root composer.json requires drupal/commerce_authnet 1.x-dev -&gt; satisfiable by drupal/commerce_authnet[1.x-dev (alias of dev-1.x)].<br>&nbsp;&nbsp;&nbsp; - Conclusion: don't install lcobucci/jwt 4.1.x-dev (conflict analysis result)<br>&nbsp;&nbsp;&nbsp; - Conclusion: don't install lcobucci/jwt 4.2.x-dev (conflict analysis result)<br>&nbsp;&nbsp;&nbsp; - Conclusion: don't install lcobucci/jwt 4.0.4 (conflict analysis result)<br>&nbsp;&nbsp;&nbsp; - Conclusion: don't install lcobucci/jwt 4.1.0 (conflict analysis result)<br>&nbsp;&nbsp;&nbsp; - Conclusion: don't install lcobucci/jwt 4.1.1 (conflict analysis result)<br>&nbsp;&nbsp;&nbsp; - Conclusion: don't install lcobucci/jwt 4.1.2 (conflict analysis result)<br>&nbsp;&nbsp;&nbsp; - Conclusion: don't install lcobucci/jwt 4.1.3 (conflict analysis result)<br>&nbsp;&nbsp;&nbsp; - Conclusion: don't install lcobucci/jwt 4.1.4 (conflict analysis result)<br>&nbsp;&nbsp;&nbsp; - Conclusion: don't install lcobucci/jwt 4.1.5 (conflict analysis result)<br>&nbsp;&nbsp;&nbsp; - Root composer.json requires drupal/simple_oauth dev-clientcredentials -&gt; satisfiable by drupal/simple_oauth[dev-clientcredentials].<br>&nbsp;&nbsp;&nbsp; - drupal/simple_oauth dev-clientcredentials requires lcobucci/jwt ^4 -&gt; satisfiable by lcobucci/jwt[4.0.0-alpha1, ..., 4.2.x-dev].<br>&nbsp;&nbsp;&nbsp; - You can only install one version of a package, so only one of these can be installed: lcobucci/jwt[3.1.0, ..., 3.4.x-dev, 4.0.0-alpha1, ..., 4.2.x-dev].<br>&nbsp;&nbsp;&nbsp; - Conclusion: install lcobucci/jwt 3.4.x-dev (conflict analysis result)</pre><p>when attempting to upgrade.</p> <h4 id="summary-steps-reproduce">Steps to reproduce</h4> <p>Install both Simple OAuth with the above patch applied, and Commerce Authnet</p> <h3 id="summary-proposed-resolution">Proposed resolution</h3> <p>I'm willing to bet the upgrade path is rather straightforward, and the <a href="https://lcobucci-jwt.readthedocs.io/en/stable/upgrading/#v3x-to-v4x">upgrade notes</a> suggest similarly, so we can just "do this" and see how the testbot goes.</p> <h3 id="summary-remaining-tasks">Remaining tasks</h3> <h3 id="summary-ui-changes">User interface changes</h3> <h3 id="summary-api-changes">API changes</h3> <h3 id="summary-data-model-changes">Data model changes</h3> > Related issue: [Issue #3230707](https://www.drupal.org/node/3230707)