.gitattributes

@@ -48,6 +48,7 @@ core/.phpstan-baseline.php text eol=lf whitespace=blank-at-eol,-blank-at-eof,-sp
 # Define binary file attributes.
 # - Do not treat them as text.
 # - Include binary diff in patches instead of "binary files differ."
+*.avif    -text diff
 *.eot     -text diff
 *.exe     -text diff
 *.gif     -text diff

.gitlab-ci/pipeline-test-only.yml

-# cspell:ignore drupaltestbot drupaltestbotpw
+# cspell:ignore drupaltestbot drupaltestbotpw Dwebdriver logfile XVFB
 
 stages:
   - 🗜️ Test
@@ -14,7 +14,7 @@ variables:
   POSTGRES_DB: drupaltestbot
   POSTGRES_USER: drupaltestbot
   POSTGRES_PASSWORD: drupaltestbotpw
-  MINK_DRIVER_ARGS_WEBDRIVER: '["chrome", {"browserName":"chrome","goog:chromeOptions":{"args":["--disable-dev-shm-usage","--disable-gpu","--headless"]}}, "http://localhost:9515"]'
+  MINK_DRIVER_ARGS_WEBDRIVER: '["chrome", {"browserName":"chrome", "goog:chromeOptions":{"w3c": true, "args":["--no-sandbox","--ignore-certificate-errors", "--allow-insecure-localhost", "--headless", "--dns-prefetch-disable"]}}, "http://selenium:4444"]'
 
 '🩹 Test-only changes':
   stage: 🗜️ Test
@@ -25,18 +25,18 @@ variables:
     - if: $CI_PIPELINE_SOURCE == "parent_pipeline" && $PERFORMANCE_TEST != "1"
   needs:
     - pipeline: $PARENT_PIPELINE_ID
-      job: '📦️ Composer'
+      job: '🧹 PHP Coding standards (PHPCS)'
   services:
     - name: $_CONFIG_DOCKERHUB_ROOT/$_TARGET_DB:production
       alias: database
-    - name: $_CONFIG_DOCKERHUB_ROOT/chromedriver:production
-      alias: chrome
-      entrypoint:
-        - chromedriver
-        - "--no-sandbox"
-        - "--log-path=/tmp/chromedriver.log"
-        - "--verbose"
-        - "--whitelisted-ips="
+    - name: selenium/standalone-chrome:latest
+      alias: selenium
+      variables:
+        JAVA_OPTS: "-Dwebdriver.chrome.logfile=/builds/chromedriver.log"
+        SE_NODE_OVERRIDE_MAX_SESSIONS: "true"
+        SE_NODE_MAX_SESSIONS: "5"
+        SE_START_XVFB: "false"
+        SE_START_VNC: "false"
   before_script:
     - |
       [[ $_TARGET_DB == sqlite* ]] && export SIMPLETEST_DB=sqlite://localhost/$CI_PROJECT_DIR/sites/default/files/db.sqlite?module=sqlite

.gitlab-ci/pipeline.yml

-# cspell:ignore drupaltestbot drupaltestbotpw
+# cspell:ignore drupaltestbot drupaltestbotpw Dwebdriver logfile XVFB fastzip
 
 stages:
   - 🗜️ Test
@@ -47,17 +47,18 @@ default:
 .with-composer: &with-composer
   needs:
     - pipeline: $PARENT_PIPELINE_ID
-      job: '📦️ Composer'
+      job: '🧹 PHP Coding standards (PHPCS)'
 
 .with-composer-and-yarn: &with-composer-and-yarn
   needs:
     - pipeline: $PARENT_PIPELINE_ID
-      job: '📦️ Composer'
+      job: '🧹 PHP Coding standards (PHPCS)'
     - pipeline: $PARENT_PIPELINE_ID
-      job: '📦️ Yarn'
+      job: '📔 Spell-checking'
 
 variables:
   FF_NETWORK_PER_BUILD: 1
+  FF_USE_FASTZIP: 1
   SIMPLETEST_BASE_URL: http://localhost/subdirectory
   DB_DRIVER: mysql
   MYSQL_ROOT_PASSWORD: root
@@ -67,28 +68,43 @@ variables:
   POSTGRES_DB: drupaltestbot
   POSTGRES_USER: drupaltestbot
   POSTGRES_PASSWORD: drupaltestbotpw
-  MINK_DRIVER_ARGS_WEBDRIVER: '["chrome", {"browserName":"chrome","goog:chromeOptions":{"args":["--disable-dev-shm-usage","--disable-gpu","--headless","--dns-prefetch-disable"]}}, "http://localhost:9515"]'
+  MINK_DRIVER_ARGS_WEBDRIVER: '["chrome", {"browserName":"chrome", "goog:chromeOptions":{"w3c": true, "args":["--no-sandbox","--ignore-certificate-errors", "--allow-insecure-localhost", "--headless", "--dns-prefetch-disable"]}}, "http://selenium:4444"]'
+  MINK_DRIVER_ARGS_WEBDRIVER_CHROMEDRIVER_NON_W3C: '["chrome", {"browserName":"chrome","goog:chromeOptions":{"args":["--disable-dev-shm-usage","--disable-gpu","--headless","--dns-prefetch-disable"]}}, "http://localhost:9515"]'
   CI_PARALLEL_NODE_INDEX: $CI_NODE_INDEX
   CI_PARALLEL_NODE_TOTAL: $CI_NODE_TOTAL
+  PHPUNIT_FAIL_ON_PHPUNIT_DEPRECATION: false
 
 .with-database: &with-database
   name: $_CONFIG_DOCKERHUB_ROOT/$_TARGET_DB:production
   alias: database
 
 .with-chrome: &with-chrome
-  name: $_CONFIG_DOCKERHUB_ROOT/chromedriver:production
+  name: $_CONFIG_DOCKERHUB_ROOT/webdriver-chromedriver:production
   alias: chrome
   entrypoint:
     - chromedriver
     - "--no-sandbox"
     - "--log-path=/builds/chromedriver.log"
-    - "--whitelisted-ips="
+    - "--allowed-ips="
     - "--allowed-origins=*"
 
+.with-selenium-chrome: &with-selenium-chrome
+  name: selenium/standalone-chrome:127.0
+  alias: selenium
+  variables:
+    JAVA_OPTS: "-Dwebdriver.chrome.logfile=/builds/chromedriver.log"
+    SE_NODE_OVERRIDE_MAX_SESSIONS: "true"
+    SE_NODE_MAX_SESSIONS: "16"
+    SE_SESSION_RETRY_INTERVAL: "1"
+    SE_SESSION_REQUEST_TIMEOUT: "60"
+    SE_START_XVFB: "true"
+    SE_START_VNC: "false"
+
 .run-tests: &run-tests
   script:
+    - sudo -u www-data -E -H composer run-script drupal-phpunit-upgrade-check
     # Need to pass this along directly.
-    - sudo MINK_DRIVER_ARGS_WEBDRIVER="$MINK_DRIVER_ARGS_WEBDRIVER" -u www-data php ./core/scripts/run-tests.sh --color --keep-results --types "$TESTSUITE" --concurrency "$CONCURRENCY" --repeat "1" --sqlite "./sites/default/files/tests.sqlite" --dburl $SIMPLETEST_DB --url $SIMPLETEST_BASE_URL --verbose --non-html --all --ci-parallel-node-index $CI_PARALLEL_NODE_INDEX --ci-parallel-node-total $CI_PARALLEL_NODE_TOTAL
+    - sudo -u www-data -E -H php ./core/scripts/run-tests.sh --color --keep-results --types "$TESTSUITE" --concurrency "$CONCURRENCY" --repeat "1" --sqlite "./sites/default/files/tests.sqlite" --dburl $SIMPLETEST_DB --url $SIMPLETEST_BASE_URL --verbose --non-html --all --ci-parallel-node-index $CI_PARALLEL_NODE_INDEX --ci-parallel-node-total $CI_PARALLEL_NODE_TOTAL
 
 .run-repeat-class-test: &run-repeat-class-test
   script:
@@ -100,7 +116,7 @@ variables:
         echo '   "Key" to "REPEAT_TEST_CLASS" and "Value" to "Drupal\Tests\ckeditor5\FunctionalJavascript\MediaLinkabilityTest"';
         exit 1;
       else
-        sudo MINK_DRIVER_ARGS_WEBDRIVER="$MINK_DRIVER_ARGS_WEBDRIVER" -u www-data php ./core/scripts/run-tests.sh --color --keep-results --concurrency "$CONCURRENCY" --repeat "100" --sqlite "./sites/default/files/tests.sqlite" --dburl $SIMPLETEST_DB --url $SIMPLETEST_BASE_URL --verbose --non-html --class $REPEAT_TEST_CLASS
+        sudo -u www-data -E -H php ./core/scripts/run-tests.sh --color --keep-results --concurrency "$CONCURRENCY" --repeat "$REPEAT_COUNT" --sqlite "./sites/default/files/tests.sqlite" --dburl $SIMPLETEST_DB --url $SIMPLETEST_BASE_URL --verbose --non-html --class $REPEAT_TEST_CLASS
       fi
 
 ################
@@ -119,67 +135,61 @@ variables:
   allow_failure: true
   services:
     - <<: *with-database
-    - <<: *with-chrome
+    - <<: *with-selenium-chrome
   script:
     - $CI_PROJECT_DIR/.gitlab-ci/scripts/test-only.sh
 
 '🖱️️️ PHPUnit Functional Javascript':
   <<: [ *with-composer, *run-tests, *default-job-settings ]
-  parallel: 2
+  parallel: 3
   variables:
     TESTSUITE: PHPUnit-FunctionalJavascript
-    CONCURRENCY: 15
-    KUBERNETES_CPU_REQUEST: "24"
+    CONCURRENCY: 5
+    KUBERNETES_CPU_REQUEST: "16"
   services:
     - <<: *with-database
-    - <<: *with-chrome
+    - <<: *with-selenium-chrome
   after_script:
+    - echo $MINK_DRIVER_ARGS_WEBDRIVER
     - sed -i "s#$CI_PROJECT_DIR/##" ./sites/default/files/simpletest/phpunit-*.xml || true
     - cp /builds/chromedriver.log ./
 
-'🌐️️ PHPUnit Functional':
+'👷️️️ PHPUnit Build':
   <<: [ *with-composer, *run-tests, *default-job-settings ]
-  parallel: 7
   variables:
-    TESTSUITE: PHPUnit-Functional
-    KUBERNETES_CPU_REQUEST: "24"
+    TESTSUITE: PHPUnit-Build
+    KUBERNETES_CPU_REQUEST: "8"
+    CONCURRENCY: "5"
   services:
     - <<: *with-database
 
-'⚙️️ PHPUnit Kernel':
+'🌐️️ PHPUnit Functional':
   <<: [ *with-composer, *run-tests, *default-job-settings ]
-  parallel: 3
+  parallel: 8
   variables:
-    TESTSUITE: PHPUnit-Kernel
+    TESTSUITE: PHPUnit-Functional
+    CONCURRENCY: "5"
     KUBERNETES_CPU_REQUEST: "16"
   services:
     - <<: *with-database
 
-'👷️️️ PHPUnit Build':
+'⚙️️ PHPUnit Kernel':
   <<: [ *with-composer, *run-tests, *default-job-settings ]
+  parallel: 5
   variables:
-    TESTSUITE: PHPUnit-Build
-    KUBERNETES_CPU_REQUEST: "2"
-  services:
-    - <<: *with-database
-
-'⚡️ PHPUnit Unit':
-  <<: [ *with-composer, *run-tests, *default-job-settings ]
+    TESTSUITE: PHPUnit-Kernel
+    KUBERNETES_CPU_REQUEST: "8"
+    CONCURRENCY: 12
   services:
-    # There are some unit tests that need a database.
-    # @todo Remove after https://www.drupal.org/project/drupal/issues/3386217
     - <<: *with-database
-  variables:
-    TESTSUITE: PHPUnit-Unit
-    KUBERNETES_CPU_REQUEST: "16"
 
 '🦉️️️ Nightwatch':
   <<: [ *with-composer-and-yarn, *default-job-settings ]
   variables:
-    KUBERNETES_CPU_REQUEST: "24"
+    KUBERNETES_CPU_REQUEST: "16"
   services:
     - <<: *with-database
-    - <<: *with-chrome
+    - <<: *with-selenium-chrome
   script:
     - export DRUPAL_TEST_DB_URL=$SIMPLETEST_DB
     - cp ./core/.env.example ./core/.env
@@ -189,15 +199,16 @@ variables:
     - echo "DRUPAL_TEST_BASE_URL='http://localhost/subdirectory'" >> ./core/.env
     - echo "DRUPAL_TEST_CHROMEDRIVER_AUTOSTART=false" >> ./core/.env
     - echo "DRUPAL_TEST_DB_URL='${DRUPAL_TEST_DB_URL}'" >> ./core/.env
-    - echo "DRUPAL_TEST_WEBDRIVER_HOSTNAME='localhost'" >> ./core/.env
+    - echo "DRUPAL_TEST_WEBDRIVER_HOSTNAME='selenium'" >> ./core/.env
     - echo "DRUPAL_TEST_WEBDRIVER_CHROME_ARGS='--disable-dev-shm-usage --disable-gpu --headless --dns-prefetch-disable'" >> ./core/.env
-    - echo "DRUPAL_TEST_WEBDRIVER_PORT='9515'" >> ./core/.env
+    - echo "DRUPAL_TEST_WEBDRIVER_W3C=true" >> ./core/.env
+    - echo "DRUPAL_TEST_WEBDRIVER_PORT='4444'" >> ./core/.env
     - echo "DRUPAL_NIGHTWATCH_OUTPUT='"../nightwatch_output"'" >> ./core/.env
     - echo "COLUMNS=1000" >> ./core/.env
     - chown -R www-data:www-data ./sites /var/www
     - cd core
     - corepack enable
-    - sudo -u www-data yarn run test:nightwatch --workers=4
+    - sudo -u www-data -E -H yarn run test:nightwatch --workers=3
   after_script:
     - cp /builds/chromedriver.log ./
   artifacts:
@@ -209,19 +220,43 @@ variables:
       - ./nightwatch_output
       - '*.log'
 
+'🖱️️️ PHPUnit Functional Javascript (non W3C legacy)':
+  <<: [ *with-composer, *default-job-settings ]
+  parallel: 1
+  variables:
+    TESTSUITE: PHPUnit-FunctionalJavascript
+    CONCURRENCY: 6
+    KUBERNETES_CPU_REQUEST: "16"
+    MINK_DRIVER_ARGS_WEBDRIVER: $MINK_DRIVER_ARGS_WEBDRIVER_CHROMEDRIVER_NON_W3C
+  services:
+    - <<: *with-database
+    - <<: *with-chrome
+  script:
+    - sudo -u www-data -E -H composer run-script drupal-phpunit-upgrade-check
+    # Run a small subset of tests to prove non W3C testing still works.
+    - sudo -u www-data -E -H php ./core/scripts/run-tests.sh --color --keep-results --types "$TESTSUITE" --concurrency "$CONCURRENCY" --repeat "1" --sqlite "./sites/default/files/tests.sqlite" --dburl $SIMPLETEST_DB --url $SIMPLETEST_BASE_URL --verbose --non-html javascript
+
+  after_script:
+    - sed -i "s#$CI_PROJECT_DIR/##" ./sites/default/files/simpletest/phpunit-*.xml || true
+    - cp /builds/chromedriver.log ./
+
 '🔁 Repeat Class Test':
   <<: [ *with-composer, *run-repeat-class-test, *default-job-settings ]
   when: manual
   allow_failure: true
   variables:
     REPEAT_TEST_CLASS: 'Drupal\Tests\Change\Me'
+    REPEAT_COUNT: 100
   services:
     - <<: *with-database
+    - <<: *with-selenium-chrome
 
 '🚲 Performance tests':
-  <<: [ *with-composer, *default-job-settings ]
+  <<: [ *default-job-settings ]
   rules:
     - if: $PERFORMANCE_TEST == "1"
+    - when: manual
+      allow_failure: true
   variables:
     KUBERNETES_CPU_REQUEST: "24"
     MINK_DRIVER_ARGS_WEBDRIVER: '["chrome", {"browserName":"chrome","goog:chromeOptions":{"args":["--disable-dev-shm-usage","--disable-gpu","--headless","--no-sandbox"]}}, "http://chrome:9515"]'
@@ -237,8 +272,9 @@ variables:
       [[ $_TARGET_DB == mysql* ]] && export SIMPLETEST_DB=mysql://$MYSQL_USER:$MYSQL_PASSWORD@database/$MYSQL_DATABASE?module=mysql
       [[ $_TARGET_DB == mariadb* ]] && export SIMPLETEST_DB=mysql://$MYSQL_USER:$MYSQL_PASSWORD@database/$MYSQL_DATABASE?module=mysql
       [[ $_TARGET_DB == pgsql* ]] && export SIMPLETEST_DB=pgsql://$POSTGRES_USER:$POSTGRES_PASSWORD@database/$POSTGRES_DB?module=pgsql
+    - composer install --optimize-autoloader
     - export OTEL_COLLECTOR="$OTEL_COLLECTOR"
     - mkdir -p ./sites/simpletest ./sites/default/files ./build/logs/junit /var/www/.composer
     - chown -R www-data:www-data ./sites ./build/logs/junit ./vendor /var/www/
     - sudo -u www-data git config --global --add safe.directory $CI_PROJECT_DIR
-    - sudo SIMPLETEST_BASE_URL="http://$HOSTNAME/subdirectory" SIMPLETEST_DB="$SIMPLETEST_DB" MINK_DRIVER_ARGS_WEBDRIVER="$MINK_DRIVER_ARGS_WEBDRIVER" OTEL_COLLECTOR="$OTEL_COLLECTOR" -u www-data ./vendor/bin/phpunit --verbose -c core --group OpenTelemetry --log-junit=./sites/default/files/simpletest/phpunit-performance.xml
+    - sudo SIMPLETEST_BASE_URL="http://$HOSTNAME/subdirectory" -u www-data -E -H ./vendor/bin/phpunit -c core --group OpenTelemetry --log-junit=./sites/default/files/simpletest/phpunit-performance.xml

.gitlab-ci/scripts/.empty-phpstan-baseline.php

+<?php
+
+return [];

.gitlab-ci/scripts/component-coverage-metrics.php

+#!/usr/bin/env php
+<?php
+
+/**
+ * @file
+ * Drupal's Component test coverage metrics.
+ */
+
+if (PHP_SAPI !== 'cli') {
+  return;
+}
+
+$reportFilePath = __DIR__ . '/../../component-coverage-report.txt';
+$metricsFilePath = __DIR__ . '/../../component-coverage-metrics.txt';
+
+$report = @file_get_contents($reportFilePath);
+if (empty($report)) {
+  exit(0);
+}
+
+// Dump the report to STDOUT, with colors, for humans.
+echo $report;
+
+// Remove ANSI color codes and replace the file.
+$output = preg_replace('/\x1b\[\d+(?:;\d+)*m/', '', $report);
+file_put_contents($reportFilePath, $output);
+
+// Find and report the metrics.
+foreach (explode("\n", $output) as $line) {
+  preg_match('/^\s*(Classes|Methods|Lines):\s+(\d+\.\d+%\s*\([\d\/\s]*\))\s*$/', $line, $m);
+  if (!empty($m)) {
+    $metric = strtolower($m[1]);
+    $metricValue = str_replace(' ', '·', $m[2]);
+    file_put_contents($metricsFilePath, "component.coverage.{$metric} {$metricValue}\n", \FILE_APPEND);
+  }
+}

.gitlab-ci/scripts/phpstan-baseline-statistics.php

+#!/usr/bin/env php
+<?php
+
+/**
+ * @file
+ * PHPStan baseline statistics.
+ */
+
+if (PHP_SAPI !== 'cli') {
+  return;
+}
+
+$ignoreErrors = [];
+require __DIR__ . '/../../core/.phpstan-baseline.php';
+
+$stats = ['__total' => 0];
+foreach ($ignoreErrors as $ignore) {
+  $identifier = $ignore['identifier'] ?? '* not specified *';
+  $count = $ignore['count'] ?? 1;
+  $stats['__total'] += $count;
+  $stats[$identifier] = isset($stats[$identifier]) ? $stats[$identifier] + $count : $count;
+}
+
+echo "----------------------------------------\n";
+echo "PHPStan baseline statistics\n";
+echo "----------------------------------------\n";
+echo sprintf("%6d * Total baselined errors\n", $stats['__total']);
+echo "----------------------------------------\n";
+echo "Breakdown by error identifier:\n";
+file_put_contents(__DIR__ . '/../../phpstan-metrics.txt', 'phpstan-baseline ' . $stats['__total'] . PHP_EOL, FILE_APPEND);
+
+unset($stats['__total']);
+arsort($stats);
+
+foreach ($stats as $identifier => $stat) {
+  echo sprintf("%6d %s\n", $stat, $identifier);
+  file_put_contents(__DIR__ . '/../../phpstan-metrics.txt', 'phpstan-baseline.' . $identifier . ' ' . $stat . PHP_EOL, FILE_APPEND);
+}

.gitlab-ci/scripts/test-only.sh

@@ -21,8 +21,12 @@
 fi
 
 echo "2️⃣ Running test changes for this branch"
+EXIT_CODE=0
 if [[ $(git diff ${BASELINE} --name-only|grep -E "Test.php$") ]]; then
 for test in `git diff ${BASELINE} --name-only|grep -E "Test.php$"`; do
-  sudo SIMPLETEST_BASE_URL="$SIMPLETEST_BASE_URL" SIMPLETEST_DB="$SIMPLETEST_DB" MINK_DRIVER_ARGS_WEBDRIVER="$MINK_DRIVER_ARGS_WEBDRIVER" -u www-data ./vendor/bin/phpunit -c core $test --log-junit=./sites/default/files/simpletest/phpunit-`echo $test|sed 's/\//_/g' `.xml;
+  sudo SIMPLETEST_BASE_URL="$SIMPLETEST_BASE_URL" SIMPLETEST_DB="$SIMPLETEST_DB" MINK_DRIVER_ARGS_WEBDRIVER="$MINK_DRIVER_ARGS_WEBDRIVER" -u www-data ./vendor/bin/phpunit -c core $test --log-junit=./sites/default/files/simpletest/phpunit-`echo $test|sed 's/\//_/g' `.xml || EXIT_CODE=$?;
 done;
 fi
+
+echo "Exiting with EXIT_CODE=$EXIT_CODE"
+exit $EXIT_CODE

.ht.router.php

@@ -44,7 +44,7 @@
   // fallback to index.php.
   do {
     $path = dirname($path);
-    if (preg_match('/\.php$/', $path) && is_file(__DIR__ . $path)) {
+    if (str_ends_with($path, '.php') && is_file(__DIR__ . $path)) {
       // Discovered that the path contains an existing PHP file. Use that as the
       // script to include.
       $script = ltrim($path, '/');

.htaccess

@@ -22,6 +22,9 @@ DirectoryIndex index.php index.html index.htm
 AddType image/svg+xml svg svgz
 AddEncoding gzip svgz
 
+# Add correct encoding for webp.
+AddType image/webp .webp
+
 # Most of the following PHP settings cannot be changed at runtime. See
 # sites/default/default.settings.php and
 # Drupal\Core\DrupalKernel::bootEnvironment() for settings that can be

composer.json

@@ -9,38 +9,38 @@
         "chat": "https://www.drupal.org/node/314178"
     },
     "require": {
-        "composer/installers": "^2.0",
+        "composer/installers": "^2.3",
         "drupal/core": "self.version",
         "drupal/core-project-message": "self.version",
+        "drupal/core-recipe-unpack": "self.version",
         "drupal/core-vendor-hardening": "self.version"
     },
     "require-dev": {
         "behat/mink": "^1.11",
         "behat/mink-browserkit-driver": "^2.2",
         "colinodell/psr-testlogger": "^1.2",
-        "composer/composer": "^2.7",
+        "composer/composer": "^2.8.1",
         "drupal/coder": "^8.3.10",
         "justinrainbow/json-schema": "^5.2",
-        "lullabot/mink-selenium2-driver": "^1.7",
-        "lullabot/php-webdriver": "^2.0.3",
-        "mglaman/phpstan-drupal": "^1.2.10",
-        "micheh/phpcs-gitlab": "^1.1",
+        "lullabot/mink-selenium2-driver": "^1.7.3",
+        "lullabot/php-webdriver": "^2.0.5",
+        "mglaman/phpstan-drupal": "^1.2.11 || ^2.0.4",
+        "micheh/phpcs-gitlab": "^1.1 || ^2.0",
         "mikey179/vfsstream": "^1.6.11",
         "open-telemetry/exporter-otlp": "^1",
         "open-telemetry/sdk": "^1",
         "php-http/guzzle7-adapter": "^1.0",
         "phpspec/prophecy-phpunit": "^2",
-        "phpstan/extension-installer": "^1.1",
-        "phpstan/phpstan": "^1.10.62",
-        "phpstan/phpstan-phpunit": "^1.3.16",
-        "phpunit/phpunit": "^9.6.13",
-        "symfony/browser-kit": "^7.0",
-        "symfony/css-selector": "^7.0",
-        "symfony/dom-crawler": "^7.0",
-        "symfony/error-handler": "^7.0",
-        "symfony/lock": "^7.0",
-        "symfony/phpunit-bridge": "^7.0",
-        "symfony/var-dumper": "^7.0"
+        "phpstan/extension-installer": "^1.4.3",
+        "phpstan/phpstan": "^1.12.4 || ^2.1.14",
+        "phpstan/phpstan-phpunit": "^1.3.16 || ^2.0.6",
+        "phpunit/phpunit": "^10.5.19 || ^11.5.3",
+        "symfony/browser-kit": "^7.3@beta",
+        "symfony/css-selector": "^7.3@beta",
+        "symfony/dom-crawler": "^7.3@beta",
+        "symfony/error-handler": "^7.3@beta",
+        "symfony/lock": "^7.3@beta",
+        "symfony/var-dumper": "^7.3@beta"
     },
     "replace": {
         "symfony/polyfill-php72": "*",
@@ -61,11 +61,13 @@
         },
         "allow-plugins": {
             "composer/installers": true,
+            "dealerdirect/phpcodesniffer-composer-installer": true,
             "drupal/core-project-message": true,
+            "drupal/core-recipe-unpack": true,
             "drupal/core-vendor-hardening": true,
+            "php-http/discovery": true,
             "phpstan/extension-installer": true,
-            "dealerdirect/phpcodesniffer-composer-installer": true,
-            "php-http/discovery": true
+            "tbachert/spi": false
         }
     },
     "extra": {
@@ -86,6 +88,9 @@
             "modules/custom/{$name}": ["type:drupal-custom-module"],
             "themes/custom/{$name}": ["type:drupal-custom-theme"]
         },
+        "drupal-recipe-unpack": {
+            "on-require": false
+        },
         "drupal-core-project-message": {
             "post-install-cmd-message": [
                 "<bg=blue;fg=white>drupal/drupal</>: This package is meant for core development,",
@@ -105,6 +110,11 @@
             "Drupal\\Composer\\": "composer"
         }
     },
+    "autoload-dev": {
+        "psr-4": {
+            "Drupal\\PHPStan\\Rules\\": "core/tests/PHPStan/Rules"
+        }
+    },
     "scripts": {
         "pre-install-cmd": "Drupal\\Composer\\Composer::ensureComposerVersion",
         "pre-update-cmd": "Drupal\\Composer\\Composer::ensureComposerVersion",
@@ -123,14 +133,22 @@
     "repositories": [
         {
             "type": "path",
+            "canonical": false,
             "url": "core"
         },
         {
             "type": "path",
+            "canonical": false,
+            "url": "composer/Plugin/RecipeUnpack"
+        },
+        {
+            "type": "path",
+            "canonical": false,
             "url": "composer/Plugin/ProjectMessage"
         },
         {
             "type": "path",
+            "canonical": false,
             "url": "composer/Plugin/VendorHardening"
         },
         {

composer/Composer.php

@@ -119,9 +119,10 @@ public static function drupalVersionBranch(): string {
    * @param string $root
    *   Path to root of drupal/drupal repository.
    * @param string $subprojectType
-   *   Type of subproject - one of Metapackage, Plugin, or Template
+   *   Type of subproject - one of Metapackage, Plugin, or Template.
    *
    * @return \Symfony\Component\Finder\Finder
+   *   A Finder object.
    */
   public static function composerSubprojectPaths(string $root, string $subprojectType): Finder {
     return Finder::create()

composer/Generator/Builder/DrupalCoreRecommendedBuilder.php

@@ -59,6 +59,7 @@ public function getPackage() {
    * Returns the initial package metadata that describes the metapackage.
    *
    * @return array
+   *   The initial package metadata.
    */
   protected function initialPackageMetadata() {
     return [

composer/Generator/Builder/DrupalDevDependenciesBuilder.php

@@ -34,6 +34,7 @@ public function getPackage() {
    * Returns the initial package metadata that describes the metapackage.
    *
    * @return array
+   *   The initial package metadata.
    */
   protected function initialPackageMetadata() {
     return [

composer/Generator/Builder/DrupalPinnedDevDependenciesBuilder.php

@@ -39,6 +39,7 @@ public function getPackage() {
    * Returns the initial package metadata that describes the metapackage.
    *
    * @return array
+   *   The initial package metadata.
    */
   protected function initialPackageMetadata() {
     return [

composer/Generator/ComponentGenerator.php

@@ -226,7 +226,7 @@ protected function initialPackageMetadata(): array {
       ],
       // Always reconcile PHP version.
       'require' => [
-        'php' => '>=7.3.0',
+        'php' => '>=' . \Drupal::MINIMUM_PHP,
       ],
     ];
   }

composer/Generator/PackageGenerator.php

@@ -64,6 +64,7 @@ public function generate(IOInterface $io, $base_dir) {
    * Returns a list of metapackage builders.
    *
    * @return BuilderInterface[]
+   *   An array of BuilderInterface objects.
    */
   protected function builders() {
     return [

composer/Generator/Util/DrupalCoreComposer.php

@@ -92,7 +92,7 @@ public function getRequireDev() {
    * @param string $packageName
    *   Name of package to find, e.g. 'behat/mink-selenium2-driver'.
    * @param bool $dev
-   *   TRUE: consider only 'packages-dev'. Default: consider only 'packages'
+   *   TRUE: consider only 'packages-dev'. Default: consider only 'packages'.
    *
    * @return array
    *   Package info from composer.lock.

composer/Metapackage/CoreRecommended/composer.json

@@ -8,58 +8,61 @@
     },
     "require": {
         "drupal/core": "11.x-dev",
-        "asm89/stack-cors": "~v2.2.0",
-        "composer/semver": "~3.4.0",
-        "doctrine/annotations": "~2.0.1",
-        "doctrine/deprecations": "~1.1.3",
+        "asm89/stack-cors": "~v2.3.0",
+        "composer/semver": "~3.4.3",
+        "doctrine/annotations": "~2.0.2",
+        "doctrine/deprecations": "~1.1.5",
         "doctrine/lexer": "~2.1.1",
-        "egulias/email-validator": "~4.0.2",
-        "guzzlehttp/guzzle": "~7.8.1",
-        "guzzlehttp/promises": "~2.0.2",
-        "guzzlehttp/psr7": "~2.6.2",
+        "egulias/email-validator": "~4.0.4",
+        "guzzlehttp/guzzle": "~7.9.3",
+        "guzzlehttp/promises": "~2.2.0",
+        "guzzlehttp/psr7": "~2.7.1",
         "masterminds/html5": "~2.9.0",
-        "mck89/peast": "~v1.16.2",
+        "mck89/peast": "~v1.17.0",
         "pear/archive_tar": "~1.5.0",
         "pear/console_getopt": "~v1.4.3",
-        "pear/pear-core-minimal": "~v1.10.15",
+        "pear/pear-core-minimal": "~v1.10.16",
         "pear/pear_exception": "~v1.0.2",
+        "php-tuf/composer-stager": "~v2.0.1",
         "psr/cache": "~3.0.0",
         "psr/container": "~2.0.2",
         "psr/event-dispatcher": "~1.0.0",
         "psr/http-client": "~1.0.3",
-        "psr/http-factory": "~1.0.2",
-        "psr/log": "~3.0.0",
+        "psr/http-factory": "~1.1.0",
+        "psr/log": "~3.0.2",
         "ralouphie/getallheaders": "~3.0.3",
-        "sebastian/diff": "~4.0.6",
-        "symfony/console": "~v7.0.6",
-        "symfony/dependency-injection": "~v7.0.6",
-        "symfony/deprecation-contracts": "~v3.4.0",
-        "symfony/error-handler": "~v7.0.6",
-        "symfony/event-dispatcher": "~v7.0.3",
-        "symfony/event-dispatcher-contracts": "~v3.4.2",
-        "symfony/filesystem": "~v7.0.6",
-        "symfony/finder": "~v7.0.0",
-        "symfony/http-foundation": "~v7.0.6",
-        "symfony/http-kernel": "~v7.0.6",
-        "symfony/mailer": "~v7.0.6",
-        "symfony/mime": "~v7.0.6",
-        "symfony/polyfill-ctype": "~v1.29.0",
-        "symfony/polyfill-iconv": "~v1.29.0",
-        "symfony/polyfill-intl-grapheme": "~v1.29.0",
-        "symfony/polyfill-intl-idn": "~v1.29.0",
-        "symfony/polyfill-intl-normalizer": "~v1.29.0",
-        "symfony/polyfill-mbstring": "~v1.29.0",
-        "symfony/process": "~v7.0.4",
-        "symfony/psr-http-message-bridge": "~v7.0.6",
-        "symfony/routing": "~v7.0.6",
-        "symfony/serializer": "~v7.0.6",
-        "symfony/service-contracts": "~v3.4.2",
-        "symfony/string": "~v7.0.4",
-        "symfony/translation-contracts": "~v3.4.2",
-        "symfony/validator": "~v7.0.6",
-        "symfony/var-dumper": "~v7.0.6",
-        "symfony/var-exporter": "~v7.0.6",
-        "symfony/yaml": "~v7.0.3",
-        "twig/twig": "~v3.9.3"
+        "revolt/event-loop": "~v1.0.7",
+        "sebastian/diff": "~5.1.1",
+        "symfony/console": "~v7.3.0-BETA1",
+        "symfony/dependency-injection": "~v7.3.0-BETA1",
+        "symfony/deprecation-contracts": "~v3.5.1",
+        "symfony/error-handler": "~v7.3.0-BETA1",
+        "symfony/event-dispatcher": "~v7.3.0-BETA1",
+        "symfony/event-dispatcher-contracts": "~v3.5.1",
+        "symfony/filesystem": "~v7.3.0-BETA1",
+        "symfony/finder": "~v7.3.0-BETA1",
+        "symfony/http-foundation": "~v7.3.0-BETA1",
+        "symfony/http-kernel": "~v7.3.0-BETA1",
+        "symfony/mailer": "~v7.3.0-BETA1",
+        "symfony/mime": "~v7.3.0-BETA1",
+        "symfony/polyfill-ctype": "~v1.32.0",
+        "symfony/polyfill-iconv": "~v1.32.0",
+        "symfony/polyfill-intl-grapheme": "~v1.32.0",
+        "symfony/polyfill-intl-idn": "~v1.32.0",
+        "symfony/polyfill-intl-normalizer": "~v1.32.0",
+        "symfony/polyfill-mbstring": "~v1.32.0",
+        "symfony/polyfill-php84": "~v1.32.0",
+        "symfony/process": "~v7.3.0-BETA1",
+        "symfony/psr-http-message-bridge": "~v7.3.0-BETA1",
+        "symfony/routing": "~v7.3.0-BETA1",
+        "symfony/serializer": "~v7.3.0-BETA1",
+        "symfony/service-contracts": "~v3.5.1",
+        "symfony/string": "~v7.3.0-BETA1",
+        "symfony/translation-contracts": "~v3.5.1",
+        "symfony/validator": "~v7.3.0-BETA1",
+        "symfony/var-dumper": "~v7.3.0-BETA1",
+        "symfony/var-exporter": "~v7.3.0-BETA1",
+        "symfony/yaml": "~v7.3.0-BETA1",
+        "twig/twig": "~v3.21.1"
     }
 }