From ba23f507b31d447e904ed1dc3d4c113f5d4f98c4 Mon Sep 17 00:00:00 2001
From: Andriy Kutsynyak <andriy.kutsynyak@flywire.com>
Date: Tue, 24 Feb 2026 10:00:18 -0600
Subject: [PATCH 1/4] INV-804 CVE-2025-45769 updated PHP-JWT to 7.0

---
 composer.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/composer.json b/composer.json
index 90616b3..f2e42d2 100644
--- a/composer.json
+++ b/composer.json
@@ -29,7 +29,7 @@
     "ext-json": "*",
     "ext-mbstring": "*",
     "guzzlehttp/guzzle": "^6.0|^7.0",
-    "firebase/php-jwt": "~5.0|~6.0"
+    "firebase/php-jwt": "^7.0"
   },
   "require-dev": {
     "phpunit/phpunit": "^4.0|^5.0|^6.0|^7.0|^8.0|^9.0",

From e3690ce4d56bb1e87299045e6c82310f23409cfc Mon Sep 17 00:00:00 2001
From: Andriy Kutsynyak <andriy.kutsynyak@flywire.com>
Date: Tue, 24 Feb 2026 10:02:42 -0600
Subject: [PATCH 2/4] actions update

---
 .github/workflows/ci.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 11535b0..829dfa2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -36,7 +36,7 @@ jobs:
           echo "::set-output name=dir::$(composer config cache-files-dir)"
 
       - name: Cache Composer dependencies
-        uses: actions/cache@v2
+        uses: actions/cache@v4
         id: cache
         with:
           path: |
@@ -91,7 +91,7 @@ jobs:
           echo "::set-output name=dir::$(composer config cache-files-dir)"
 
       - name: Cache Composer dependencies
-        uses: actions/cache@v2
+        uses: actions/cache@v4
         id: cache
         with:
           path: |

From b91c7f0d24c70c1c67c062f2bd214ac2da6ccec1 Mon Sep 17 00:00:00 2001
From: Andriy Kutsynyak <andriy.kutsynyak@flywire.com>
Date: Tue, 24 Feb 2026 10:08:10 -0600
Subject: [PATCH 3/4] version updates

---
 .github/workflows/ci.yml | 22 +++++++---------------
 composer.json            |  2 +-
 2 files changed, 8 insertions(+), 16 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 829dfa2..4ef98d0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,15 +12,12 @@ jobs:
     strategy:
       matrix:
         php-version:
-          - '5.5'
-          - '5.6'
-          - '7.0'
-          - '7.1'
-          - '7.2'
-          - '7.3'
-          - '7.4'
           - '8.0'
           - '8.1'
+          - '8.2'
+          - '8.3'
+          - '8.4'
+          - '8.5'
     steps:
       - uses: actions/checkout@v2
 
@@ -48,12 +45,7 @@ jobs:
       - name: Install dependencies
         run: |
           composer remove --dev phpstan/phpstan
-          # PHPUnit 4 for PHP 5
-          if [ "${{ matrix.php-version }}" == "5.5" ] || [ "${{ matrix.php-version }}" == "5.6" ]; then composer require --dev -W "phpunit/phpunit:^4"; fi
-          # PHPUnit 6 for PHP 7.0 - 7.2
-          if [ "${{ matrix.php-version }}" == "7.0" ] || [ "${{ matrix.php-version }}" == "7.1" ] || [ "${{ matrix.php-version }}" == "7.2" ]; then composer require --dev -W "phpunit/phpunit:^6"; fi
-          # PHPUnit 9 for 7.3+
-          if [ "${{ matrix.php-version }}" == "7.3" ] || [ "${{ matrix.php-version }}" == "7.4" ] || [ "${{ matrix.php-version }}" == "8.0" ] || [ "${{ matrix.php-version }}" == "8.1" ]; then composer require --dev -W "phpunit/phpunit:^9"; fi
+          composer require --dev -W "phpunit/phpunit:^9"
           composer install --prefer-dist --no-progress --no-interaction --no-scripts
           mkdir -p build/logs
 
@@ -62,7 +54,7 @@ jobs:
           vendor/bin/phpunit
 
       - name: Upload coverage results to Coveralls
-        if: ${{ github.event_name == 'push' && matrix.php-version == '7.4' }}
+        if: ${{ github.event_name == 'push' && matrix.php-version == '8.5' }}
         env:
           COVERALLS_REPO_TOKEN: ${{ secrets.COVERALLS_REPO_TOKEN }}
         continue-on-error: true
@@ -75,7 +67,7 @@ jobs:
     strategy:
       matrix:
         php-version:
-          - '7.4'
+          - '8.5'
     steps:
       - uses: actions/checkout@v2
 
diff --git a/composer.json b/composer.json
index f2e42d2..fefe9f2 100644
--- a/composer.json
+++ b/composer.json
@@ -25,7 +25,7 @@
     }
   ],
   "require": {
-    "php": ">=5.4",
+    "php": ">=8.0",
     "ext-json": "*",
     "ext-mbstring": "*",
     "guzzlehttp/guzzle": "^6.0|^7.0",

From ddaf872d7edec465c86c6102052a3b87a1dd7313 Mon Sep 17 00:00:00 2001
From: Andriy Kutsynyak <andriy.kutsynyak@flywire.com>
Date: Tue, 24 Feb 2026 10:10:53 -0600
Subject: [PATCH 4/4] version updates

---
 src/Collection.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Collection.php b/src/Collection.php
index a2ad3af..17cfde9 100644
--- a/src/Collection.php
+++ b/src/Collection.php
@@ -45,7 +45,7 @@ public function parseLinkHeader($header)
             // pull out rel="..."
             $matches = [];
             preg_match('/rel="(.*)"/', $section[1], $matches);
-            $name = $matches[1];
+            $name = $matches[1]; /* @phpstan-ignore-line */
 
             $links[$name] = $url;
         }