From e784fa21f1f2f8d260d703f6cb4e4ffc73b85796 Mon Sep 17 00:00:00 2001
From: Sergei Predvoditelev <sergei@predvoditelev.ru>
Date: Sat, 8 Aug 2026 08:20:33 +0300
Subject: [PATCH 1/5] Add Composer Dependency Analyser

---
 .../composer-dependency-analyser.yml          | 27 ++++++++++++++
 .../workflows/composer-require-checker.yml    | 37 -------------------
 composer-dependency-analyser.php              | 11 ++++++
 composer.json                                 |  6 ++-
 docs/internals.md                             |  6 +--
 5 files changed, 45 insertions(+), 42 deletions(-)
 create mode 100644 .github/workflows/composer-dependency-analyser.yml
 delete mode 100644 .github/workflows/composer-require-checker.yml
 create mode 100644 composer-dependency-analyser.php

diff --git a/.github/workflows/composer-dependency-analyser.yml b/.github/workflows/composer-dependency-analyser.yml
new file mode 100644
index 0000000..3fed6a3
--- /dev/null
+++ b/.github/workflows/composer-dependency-analyser.yml
@@ -0,0 +1,27 @@
+name: composer dependency analyser
+
+on:
+  pull_request:
+    paths: &paths
+      - 'src/**'
+      - 'tests/**'
+      - '.github/workflows/composer-dependency-analyser.yml'
+      - 'composer.json'
+      - 'composer-dependency-analyser.php'
+  push:
+    branches: ['master']
+    paths: *paths
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  composer-dependency-analyser:
+    uses: yiisoft/actions/.github/workflows/composer-dependency-analyser.yml@master
+    with:
+      php: >-
+        ['8.1', '8.2', '8.3', '8.4', '8.5']
diff --git a/.github/workflows/composer-require-checker.yml b/.github/workflows/composer-require-checker.yml
deleted file mode 100644
index 1a56fef..0000000
--- a/.github/workflows/composer-require-checker.yml
+++ /dev/null
@@ -1,37 +0,0 @@
-on:
-  pull_request:
-    paths-ignore:
-      - 'docs/**'
-      - 'README.md'
-      - 'CHANGELOG.md'
-      - '.gitignore'
-      - '.gitattributes'
-      - 'infection.json.dist'
-      - 'phpunit.xml.dist'
-      - 'psalm.xml'
-
-  push:
-    branches: ['master']
-    paths-ignore:
-      - 'docs/**'
-      - 'README.md'
-      - 'CHANGELOG.md'
-      - '.gitignore'
-      - '.gitattributes'
-      - 'infection.json.dist'
-      - 'phpunit.xml.dist'
-      - 'psalm.xml'
-
-name: Composer require checker
-
-permissions:
-  contents: read
-
-jobs:
-  composer-require-checker:
-    uses: yiisoft/actions/.github/workflows/composer-require-checker.yml@master
-    with:
-      os: >-
-        ['ubuntu-latest']
-      php: >-
-        ['8.1', '8.2', '8.3', '8.4', '8.5']
diff --git a/composer-dependency-analyser.php b/composer-dependency-analyser.php
new file mode 100644
index 0000000..5b4c026
--- /dev/null
+++ b/composer-dependency-analyser.php
@@ -0,0 +1,11 @@
+<?php
+
+declare(strict_types=1);
+
+use ShipMonk\ComposerDependencyAnalyser\Config\Configuration;
+
+return (new Configuration())
+    ->disableComposerAutoloadPathScan()
+    ->setFileExtensions(['php'])
+    ->addPathToScan(__DIR__ . '/src', isDev: false)
+    ->addPathToScan(__DIR__ . '/tests', isDev: true);
diff --git a/composer.json b/composer.json
index 606bd9a..c0b3fdd 100644
--- a/composer.json
+++ b/composer.json
@@ -36,11 +36,12 @@
         "yiisoft/arrays": "^3.0"
     },
     "require-dev": {
+        "ext-ctype": "*",
         "bamarni/composer-bin-plugin": "^1.8.3",
         "friendsofphp/php-cs-fixer": "^3.91.3",
-        "maglnet/composer-require-checker": "^4.7.1",
         "phpunit/phpunit": "^10.5.60",
         "rector/rector": "^2.2.14",
+        "shipmonk/composer-dependency-analyser": "^1.8",
         "spatie/phpunit-watcher": "^1.24"
     },
     "autoload": {
@@ -71,6 +72,7 @@
         "test": "phpunit --testdox --no-interaction",
         "test-watch": "phpunit-watcher watch",
         "cs-fix": "php-cs-fixer fix",
-        "mutation": "infection --threads=max --min-covered-msi=100"
+        "mutation": "infection --threads=max --min-covered-msi=100",
+        "dependency-analyser": "composer-dependency-analyser"
     }
 }
diff --git a/docs/internals.md b/docs/internals.md
index 0a0a1cd..b77907c 100644
--- a/docs/internals.md
+++ b/docs/internals.md
@@ -36,9 +36,9 @@ use either newest or any specific version of PHP:
 
 ## Dependencies
 
-This package uses [composer-require-checker](https://github.com/maglnet/ComposerRequireChecker) to check if all
-dependencies are correctly defined in `composer.json`. To run the checker, execute the following command:
+Use [Composer Dependency Analyser](https://github.com/shipmonk-rnd/composer-dependency-analyser) to detect unknown,
+shadow, and unused [Composer](https://getcomposer.org) dependencies:
 
 ```shell
-./vendor/bin/composer-require-checker
+./vendor/bin/composer-dependency-analyser
 ```

From 07cd354b4ecd69b1d87b2216c1fad7a5a7cc5ab3 Mon Sep 17 00:00:00 2001
From: Sergei Predvoditelev <sergei@predvoditelev.ru>
Date: Sat, 8 Aug 2026 19:24:33 +0300
Subject: [PATCH 2/5] fix build.yml

---
 .github/workflows/build.yml | 34 +++++++++++++++-------------------
 1 file changed, 15 insertions(+), 19 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 35abbae..6c2bb17 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -1,30 +1,24 @@
+name: build
+
 on:
   pull_request:
-    paths-ignore:
-      - 'docs/**'
-      - 'README.md'
-      - 'CHANGELOG.md'
-      - '.gitignore'
-      - '.gitattributes'
-      - 'infection.json.dist'
-      - 'psalm.xml'
-
+    paths: &paths
+      - 'src/**'
+      - 'tests/**'
+      - 'phpunit.xml.dist'
+      - 'composer.json'
+      - '.github/workflows/build.yml'
   push:
     branches: ['master']
-    paths-ignore:
-      - 'docs/**'
-      - 'README.md'
-      - 'CHANGELOG.md'
-      - '.gitignore'
-      - '.gitattributes'
-      - 'infection.json.dist'
-      - 'psalm.xml'
-
-name: build
+    paths: *paths
 
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   phpunit:
     uses: yiisoft/actions/.github/workflows/phpunit.yml@master
@@ -33,3 +27,5 @@ jobs:
         ['ubuntu-latest', 'windows-latest']
       php: >-
         ['8.1', '8.2', '8.3', '8.4', '8.5']
+    secrets:
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

From 37c6673dd6fc8ed10c86892715498e12d40dc7c0 Mon Sep 17 00:00:00 2001
From: Sergei Predvoditelev <sergei@predvoditelev.ru>
Date: Sat, 8 Aug 2026 19:25:14 +0300
Subject: [PATCH 3/5] fix changelog

---
 CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6295dce..0e14577 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,7 +2,7 @@
 
 ## 2.0.1 under development
 
-Enh #246: Explicitly import functions and constants in "use" section (@mspirkov)
+- Enh #246: Explicitly import functions and constants in "use" section (@mspirkov)
 
 ## 2.0.0 December 13, 2025
 

From f327c02d6eb303d81a1d4271feb69158bcc21b73 Mon Sep 17 00:00:00 2001
From: Sergei Predvoditelev <sergei@predvoditelev.ru>
Date: Sat, 8 Aug 2026 19:27:08 +0300
Subject: [PATCH 4/5] fix bc & zizmor

---
 .github/workflows/bc.yml     | 17 +++++++++--------
 .github/workflows/zizmor.yml |  4 ++++
 2 files changed, 13 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/bc.yml b/.github/workflows/bc.yml
index d23237d..6a34da5 100644
--- a/.github/workflows/bc.yml
+++ b/.github/workflows/bc.yml
@@ -1,21 +1,22 @@
+name: backwards compatibility
+
 on:
   pull_request:
-    paths:
+    paths: &paths
       - 'src/**'
       - '.github/workflows/bc.yml'
       - 'composer.json'
   push:
     branches: ['master']
-    paths:
-      - 'src/**'
-      - '.github/workflows/bc.yml'
-      - 'composer.json'
-
-name: backwards compatibility
+    paths: *paths
 
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   roave_bc_check:
     uses: yiisoft/actions/.github/workflows/bc.yml@master
@@ -23,4 +24,4 @@ jobs:
       os: >-
         ['ubuntu-latest']
       php: >-
-        ['8.4']
+        ['8.5']
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 7534234..6ff2a77 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -13,6 +13,10 @@ permissions:
   actions: read # Required by zizmor when reading workflow metadata through the API
   contents: read # Required to read workflow files
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   zizmor:
     uses: yiisoft/actions/.github/workflows/zizmor.yml@master

From 9522b8c8ffc5cbcf423cb798a071cd008d5958f0 Mon Sep 17 00:00:00 2001
From: Sergei Predvoditelev <sergei@predvoditelev.ru>
Date: Sat, 8 Aug 2026 19:31:15 +0300
Subject: [PATCH 5/5] fix bc

---
 .github/workflows/bc.yml                | 1 +
 .roave-backward-compatibility-check.xml | 6 ++++++
 2 files changed, 7 insertions(+)
 create mode 100644 .roave-backward-compatibility-check.xml

diff --git a/.github/workflows/bc.yml b/.github/workflows/bc.yml
index 6a34da5..ad2ecaa 100644
--- a/.github/workflows/bc.yml
+++ b/.github/workflows/bc.yml
@@ -5,6 +5,7 @@ on:
     paths: &paths
       - 'src/**'
       - '.github/workflows/bc.yml'
+      - '.roave-backward-compatibility-check.xml'
       - 'composer.json'
   push:
     branches: ['master']
diff --git a/.roave-backward-compatibility-check.xml b/.roave-backward-compatibility-check.xml
new file mode 100644
index 0000000..79c40f0
--- /dev/null
+++ b/.roave-backward-compatibility-check.xml
@@ -0,0 +1,6 @@
+<roave-bc-check xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:noNamespaceSchemaLocation="vendor/roave/backward-compatibility-check/Resources/schema.xsd">
+    <baseline>
+        <ignored-regex>#An enum expression .* is not supported#</ignored-regex>
+    </baseline>
+</roave-bc-check>