updated phpseclib dependency

fix EXIF-rotated images shown cropped in previews, closes #4482

JPEGs with EXIF orientation 5/6/7/8 were rendered cropped in the
mediamanager detail view, the image diff view and the fullscreen
deta

fix EXIF-rotated images shown cropped in previews, closes #4482

JPEGs with EXIF orientation 5/6/7/8 were rendered cropped in the
mediamanager detail view, the image diff view and the fullscreen
detail page: getimagesize() / JpegMeta report raw (rotation-unaware)
pixel dimensions, and passing both w and h to fetch.php defaults to
center-crop.

- Bump splitbrain/slika to 1.1, which ships ImageInfo: a rotation-
aware, metadata-only dimension simulator mirroring Adapter's
fluent API (autorotate/resize/crop).
- Add fit=1 to fetch.php: when both w and h are given, route to
media_resize_image() (bbox fit) instead of media_crop_image().
Token hashes only (id, w, h) so existing tokens stay valid.
- Add MediaFile::getDisplayDimensions($w, $h, $crop) which delegates
to ImageInfo and returns the dims fetch.php would produce.
- Add Display::getDetailHtml() and retire media_preview() / the old
media_image_preview_size() helper. media_tab_view and MediaDiff
now share the Display-based renderer.
- Rewrite tpl_img() (lib/tpl/*/detail.php) to use MediaFile dims +
fit=1 URL; drops the manual ratio math.
- Tests: MediaFileTest covers the dims math, DisplayTest covers the
detail-view HTML (rotated dims, rev-vs-timestamp URL selection,
structure), fetch_imagetoken gains a fit-token compat test.
Fixture _test/data/media/wiki/exif-orient-6.jpg: 20x30 JPEG with
EXIF orientation 6.

show more ...

updated phpseclib

updated dependencies (core and test)

Using our own php-ixr fork until the following PRs are merged upstream:

https://github.com/kissifrot/php-ixr/pull/13
https://github.com/kissifrot/php-ixr/pull/14

update slika which fixes another php 8.5 deprecation issue

update minimum requirement to PHP 8.2

According to https://stitcher.io/blog/php-version-stats-june-2025 most
people are running a newer version anyway. 8.2 still receives security
support til the en

update minimum requirement to PHP 8.2

According to https://stitcher.io/blog/php-version-stats-june-2025 most
people are running a newer version anyway. 8.2 still receives security
support til the end of the year and is the version included in Debian
old-stable (Bookworm).

This patch only increases the minumum version and updates the composer
dependencies. No code has been changed yet.

show more ...

updated strftime lib. fixes #4449

updated kissifrot/php-ixr closes #4429

removed dev suggestions from composer file

Those are now specified in the _test composer file.

updated php-cli #4384

dependency updates

updated simplepie, contains php 8.4 fixes

updated lesserphp

Replace strftime with Intl ICU. Fixes #3573

This uses a class that maps strftime placeholders to the appropriate ICU
patterns. I am using the fallback-intl branch here which provides an
English-only

Replace strftime with Intl ICU. Fixes #3573

This uses a class that maps strftime placeholders to the appropriate ICU
patterns. I am using the fallback-intl branch here which provides an
English-only fallback when the intl extension is not available.

Core has only two places where strftime is used: dformat() and the
SimplePie feed parser. Both are adjusted with this patch. For the latter
a custom Item class had to be registered. For better separation all our
FeedParser classes have been moved to the Feed namespace where our
FeedCreator classes already reside.

Note that this will currently be a degration for users without intl as
it will fall back to date and not to the still available strftime.

show more ...

updated composer depedencies

composer updates

replace LESS library. fixes #4088

This replaces the abandoned fork with my own fork at splitbrain/lesserphp

That fork has been cleaned up somewhat and the issues in #4088 should be
fixed.

Updated composer dependencies

upgrade to phpseclib 3

This replaces the dependabot PR #4114 and adjusts the usage of the
library.

updated composer dependencies

updates may also be caused by the php platform version increase in the last
commit

extracted JS compressor into its own library

This moves our JavaScript compressor into its own composer dependency.

updated repo links

updated composer dependencies

update to lesserphp 0.6

updated composer dependencies