composer(deps-dev): update api-platform/core requirement from ^2.6 to ^2.7

[dependabot]

Updates the requirements on api-platform/core to permit the latest version.

Release notes

Sourced from api-platform/core's releases.

Version 2.7.0

Changelog

• Swagger UI: Add usePkceWithAuthorizationCodeGrant to Swagger UI initOAuth (#4649)
• BC: mapping.paths in configuration should override bundles configuration (#4465)
• GraphQL: Add the ability to use different pagination types for the queries of a resource (#4453)
• Security: BC Fix ApiProperty security attribute expression being passed a class string for the object variable on updates/creates - null is now passed instead if the object is not available (#4184)
• Security: ApiProperty now supports a security_post_denormalize attribute, which provides access to the object variable for the object being updated/created and previous_object for the object before it was updated (#4184)
• Maker: Add make:data-provider and make :data-persister commands to generate a data provider / persister (#3850)
• JSON Schema: Add support for generating property schema with numeric constraint restrictions (#4225)
• JSON Schema: Add support for generating property schema with Collection restriction (#4182)
• JSON Schema: Add support for generating property schema format for Url and Hostname (#4185)
• JSON Schema: Add support for generating property schema with Count restriction (#4186)
• JSON Schema: Manage Compound constraint when generating property metadata (#4180)
• Validator: Add an option to disable query parameter validation (#4165)
• JSON Schema: Add support for generating property schema with Choice restriction (#4162)
• JSON Schema: Add support for generating property schema with Range restriction (#4158)
• JSON Schema: Add support for generating property schema with Unique restriction (#4159)
• BC: Change api_platform.listener.request.add_format priority from 7 to 28 to execute it before firewall (priority 8) (#3599)
• BC: Use @final annotation in ORM filters (#4109)
• Allow defining exception_to_status per operation (#3519)
• Doctrine: Better exception to find which resource is linked to an exception (#3965)
• Doctrine: Allow mixed type value for date filter (notice if invalid) (#3870)
• Doctrine: Add nulls_always_first and nulls_always_last to nulls_comparison in order filter (#4103)
• Doctrine: Add a global order_nulls_comparison configuration (#3117)
• MongoDB: date_immutable support (#3940)
• DataProvider: Add TraversablePaginator (#3783)
• JSON:API: Support inclusion of resources from path (#3288)
• Swagger UI: Add swagger_ui_extra_configuration to Swagger / OpenAPI configuration (#3731)
• Allow controller argument with a name different from $data thanks to an argument resolver (#3263)
• GraphQL: Support ApiProperty security (#4143)
• GraphQL: BC Fix security on association collection properties. The collection resource item_query security is no longer used. ApiProperty security can now be used to secure collection (or any other) properties. (#4143)
• Deprecate allow_plain_identifiers option (#4167)
• Exception: Add the ability to customize multiple status codes based on the validation exception (#4017)
• ApiLoader: Support _format resolving (#4292)
• Metadata: new namespace ApiPlatform\Metadata instead of ApiPlatform\Core\Metadata, for example ApiPlatform\Metadata\ApiResource (#4351)
• Metadata: deprecation of ApiPlatform\Core\Annotation (#4351)
• Metadata: ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface is deprecated in favor of ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface (#4351)
• Metadata: item and collection prefixes for operations are deprecated, as well as the ApiPlatform\Core\Api\OperationType class (#4351)
• Graphql: ApiPlatform\Metadata\GraphQl follow the same metadata conventions (a Subscription operation is available and isn't hidden behind an update Mutation anymore), interfaces got simplified (being @​experimental) (#4351)
• IriConverter: new interface for ApiPlatform\Bridge\Symfony\Routing\IriConverter that adds an operationName, same for ApiPlatform\Api\IdentifiersExtractor (#4351)
• DataProvider: new ApiPlatform\State\ProviderInterface that replaces DataProviders (#4351)
• DataPersister: new ApiPlatform\State\ProcessorInterface that replaces DataPersisters (#4351)
• A new configuration is available to keep old services (IriConverter, IdentifiersExtractor and OpenApiFactory) metadata_backward_compatibility_layer (defaults to false) (#4351)
• Add support for security_post_validation attribute
• Mark the GraphQL subsystem as stable (#4500)
• feat(test): add Client::loginUser() (#4588)
• feat(http_cache): use symfony/http-client instead of guzzlehttp/guzzle, ApiPlatform\Core\HttpCache\PurgerInterface is deprecated in favor of ApiPlatform\HttpCache\PurgerInterface, new purger that uses PURGE (#4695)
• Implements Skolem IRIs instead of blank nodes, can be disabled using iri: false (#4731)
• IRI Converter: new interface declaring getIriFromResource and getResourceFromIri (#4734)

... (truncated)

Changelog

Sourced from api-platform/core's changelog.

2.7.0

• chore: remove @​experimental phpdoc (#4933)
• Metadata: do not set id when identifier is false (#4880)
• Metadata: automatic GET operation when none is declared (#4881)
• Metadata: exception to status on operations (#4861)
• Serializer: adds the JSON_INVALID_UTF8_IGNORE flag to JsonEncode (#4741)
• Symfony: autoconfigure legacy Doctrine extensions (#4909)
• Elasticsearch: skip metadata without ES nodes (#4913)
• Symfony: deprecated the $exceptionOnNoToken parameter in ResourceAccessChecker::__construct() (#4900)

Various cs fixes and PHPDoc to help upgrading to 3.0.

3.0.0-rc.2

• JsonLd: correct the api_jsonld_context route format (#4844)
• Metadata: remove metadata_backward_compatibility_layer option (#4843)
• OpenApi: fixed required fields (in and name) within ApiPlatform\OpenApi\Model\Parameter BC

Various cleanup, removed Core namespace leftovers and todos.

3.0.0-beta.2 / 3.0.0-rc.1

• ExpressionLanguage: deprecated class ApiPlatform\Symfony\Security\ExpressionLanguage has been removed in favor of Symfony\Component\Security\Core\Authorization\ExpressionLanguage.

3.0.0-beta.1

Breaking changes:

• Identifiers: Allow plain identifiers is removed, use a custom normalizer if needed (#4811)
• Symfony: deprecated configuration was removed (#4811)
• DataTransformers: concept got removed, input and output classes are handled as anonymous resources (#4805)
• Doctrine: some interfaces have changed (extensions and filters), string $operationName got removed in favor of ApiPlatform\Metadata\Operation $operation. (#4779)
• Doctrine: ContextAware interfaces were merged with their child interfaces you can safely remove them (#4779)
• Metadata: the Core namespace got removed (#4805)
• Mercure: deprecation removed (#4805)

2.7.0-rc.2

• Symfony: the upgrade command now updates ApiFilter as well (#4845)
• Symfony: maker command to create a state Processor (#4423)

2.7.0-beta.5

• Serializer: ignore no-operation on SerializeListener (#4828)
• Schema: schema generation with default operation (#4818)

2.7.0-beta.4

• Metadata: reduce coalescing operator call (#4810)

... (truncated)

Commits

• d3f5fb8 chore: minor perf improvement in ReadListener (#4938)
• 6212380 fix(metadata): add not exposed when no get (#4937)
• 5b7d97f chore: remove @​experimental phpdoc (#4933)
• 6609e1e style: $context always exists
• 625cccb chore: changelog 2.6.9
• e366ef4 fix(serializer): remove 'iri' from context cache
• ab307c9 chore: commitlint scope must not be empty (#4919)
• 99293fc fix(elasticsearch): skip metadata without ES nodes
• 72ed622 chore: changelog 2.7
• 89dd701 chore: add commitlint (#4915)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)