Resolução de CVEs

.github/workflows/fixer.yml

@@ -26,7 +26,7 @@ jobs:
           php-version: "8.5"
 
       - name: Composer
-        run: composer install
+        run: composer install --ignore-platform-req=php+
 
       - name: Style code fixer
         run: composer format

.github/workflows/tests.yml

@@ -13,11 +13,15 @@ permissions:
 
 jobs:
   default:
-    name: Unit, Integration and Pages
+    name: Unit, Integration and Pages (PHP ${{ matrix.php-version }})
 
     if: '! github.event.pull_request.draft'
 
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        php-version: ['8.4', '8.5']
     env:
       APP_URL: http://localhost:8000
       APP_ENV: testing
@@ -55,7 +59,7 @@ jobs:
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.5'
+          php-version: ${{ matrix.php-version }}
           extensions: bcmath, gd, pdo, pcntl, pdo_pgsql, pgsql, zip
         env:
           update: true

app/Rules/ReCaptchaV3.php

@@ -9,6 +9,16 @@
 
 class ReCaptchaV3 implements Rule
 {
+    /**
+     * @var mixed
+     */
+    private $client;
+
+    public function __construct($client = null)
+    {
+        $this->client = $client ?? app(Client::class);
+    }
+
     /**
      * Create a new rule instance.
      *
@@ -20,10 +30,8 @@ public function passes($attribute, $value)
             return true;
         }
 
-        $client = new Client;
-
         try {
-            $response = $client->post('https://www.google.com/recaptcha/api/siteverify', [
+            $response = $this->client->post('https://www.google.com/recaptcha/api/siteverify', [
                 'query' => [
                     'secret' => config('legacy.app.recaptcha_v3.private_key'),
                     'response' => $value,

app/Services/ImportUsersService.php

@@ -142,7 +142,7 @@ private function createUserByConnection(string $name, string $user, string $pass
         return LegacyUser::create([
             'cod_usuario' => $employee->getKey(),
             'ref_cod_instituicao' => app(LegacyInstitution::class)->getKey(),
-            'ref_funcionario_cad' => 1,
+            'ref_funcionario_cad' => $employee->getKey(),
             'ref_cod_tipo_usuario' => LegacyUserType::LEVEL_ADMIN,
             'data_cadastro' => now(),
             'ativo' => 1,

composer.json

@@ -28,7 +28,7 @@
         "dex/composer-plug-and-play": "^0.26",
         "dex/frontier": "^0.17.0",
         "google/recaptcha": "^1.2",
-        "guzzlehttp/guzzle": "^7.3",
+        "guzzlehttp/guzzle": "^7.15.2",
         "honeybadger-io/honeybadger-laravel": "^5.0",
         "intervention/image": "^2.6",
         "laravel/framework": "^13.0",
@@ -42,7 +42,7 @@
         "league/flysystem-ftp": "^3.0",
         "league/flysystem-sftp-v3": "^3.0",
         "maatwebsite/excel": "^3.1",
-        "phpoffice/phpspreadsheet": "1.30.0",
+        "phpoffice/phpspreadsheet": "1.30.6",
         "predis/predis": "^2.3",
         "psr/simple-cache": "^3.0",
         "socialiteproviders/laravelpassport": "^4.3",
@@ -59,6 +59,7 @@
         "mockery/mockery": "^1.6",
         "nunomaduro/collision": "^8.6",
         "pestphp/pest": "^4.0",
+        "roave/security-advisories": "dev-latest",
         "spatie/laravel-ignition": "^2.0",
         "symfony/yaml": "^7.0"
     },
@@ -109,22 +110,22 @@
         "openapi": "vendor/uderline/openapi-php-attributes/opag tests public/openapi.json",
         "set-permissions": "find bootstrap/cache -type d -exec chmod 777 {} + && find storage -type d -exec chmod 777 {} +",
         "new-install": [
-            "@composer install",
+            "@composer install --ignore-platform-req=php+",
             "@composer plug-and-play",
             "@set-permissions",
             "@php artisan key:generate --ansi",
             "@php artisan storage:link --ansi",
             "@php artisan migrate --force --ansi"
         ],
         "update-install": [
-            "@composer update",
+            "@composer update --ignore-platform-req=php+",
             "@composer plug-and-play",
             "@set-permissions",
             "@php artisan storage:link --ansi",
             "@php artisan migrate --force --ansi"
         ],
         "testing-install": [
-            "@composer install",
+            "@composer install --ignore-platform-req=php+",
             "@php artisan key:generate --ansi",
             "@php artisan migrate --force --ansi --env=testing"
         ],
@@ -143,24 +144,12 @@
         "optimize-autoloader": true,
         "preferred-install": "dist",
         "sort-packages": true,
+        "platform-check": false,
         "allow-plugins": {
             "dex/composer-plug-and-play": true,
             "pestphp/pest-plugin": true,
             "phpstan/extension-installer": true,
             "php-http/discovery": true
-        },
-        "audit": {
-            "ignore": [
-                "PKSA-gz3f-3cz3-3wsw",
-                "PKSA-x13r-n4wc-4gcr",
-                "PKSA-8cfg-tzhf-fr83",
-                "PKSA-hznc-gbby-6w16",
-                "PKSA-jtdk-dcr5-f11n",
-                "PKSA-r22k-87hv-mfk4",
-                "PKSA-m9cr-9614-rsf7",
-                "PKSA-dqzt-yst9-1w9y",
-                "PKSA-x678-4z45-v3d5"
-            ]
         }
     },
     "minimum-stability": "dev",