update lock clucknut

vendor/voku/portable-ascii/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+### 2.1.0 (2026-04-16)
+
+- run all checks and tests up to PHP 8.5
+- raise the minimum PHP version from 7.0 to 7.1
+- update PHPUnit dev-dependency to support ~8.5 || ~9.6 || ~10.5 || ~11.5
+- modernize CI: add a required PHPStan job, update the GitHub Actions matrix, and refresh the AppVeyor config
+- optimize `ASCII::to_ascii()` / `ASCII::to_transliterate()` hot paths, add benchmark coverage, and document current benchmark results
+- harden invalid UTF-8 handling in `clean()`, `to_ascii()`, and `to_transliterate()` for malformed, overlong, surrogate, and out-of-range sequences
+- expand regression coverage for malformed UTF-8, transliteration boundaries, slug loops, and other edge cases
+
 ### 2.0.3 (2024-11-21)
 
 - use modern phpdocs e.g. list<int> or conditional-return annotations 
@@ -207,4 +217,4 @@ ### 1.1.0 (2019-09-07)
 
 ### 1.0.0 (2019-09-05)
 
-- initial commit
+- initial commit

vendor/voku/portable-ascii/README.md

@@ -65,8 +65,8 @@ ##  Why Portable ASCII?[]()
 ## Requirements and Recommendations
 
 *   No extensions are required to run this library. Portable ASCII only needs PCRE library that is available by default since PHP 4.2.0 and cannot be disabled since PHP 5.3.0. "\u" modifier support in PCRE for ASCII handling is not a must.
-*   PHP 7.0 is the minimum requirement
-*   PHP 8.0 is also supported
+*   PHP 7.1 is the minimum requirement
+*   up to PHP 8.5 is also supported
 
 ## Usage
 
@@ -188,7 +188,7 @@ #### charsArrayWithSingleLanguageValues(bool $replace_extra_symbols, bool $asOri
 
 #### clean(string $str, bool $normalize_whitespace, bool $keep_non_breaking_space, bool $normalize_msword, bool $remove_invisible_characters): string
 <a href="#voku-php-readme-class-methods">↑</a>
-Accepts a string and removes all non-UTF-8 characters from it + extras if needed.
+Accepts a string and removes malformed UTF-8 from it + extras if needed.
 
 **Parameters:**
 - `string $str <p>The string to be sanitized.</p>`
@@ -204,7 +204,7 @@ #### clean(string $str, bool $normalize_whitespace, bool $keep_non_breaking_spac
 characters e.g.: "\0"</p>`
 
 **Return:**
-- `string <p>A clean UTF-8 string.</p>`
+- `string <p>A clean UTF-8 string with malformed byte sequences removed.</p>`
 
 --------
 
@@ -405,8 +405,8 @@ #### to_transliterate(string $str, string|null $unknown, bool $strict): string
 
 **Parameters:**
 - `string $str <p>The input string.</p>`
-- `string|null $unknown [optional] <p>Character use if character unknown. (default is '?')
-But you can also use NULL to keep the unknown chars.</p>`
+- `string|null $unknown [optional] <p>Character used for valid characters without a transliteration mapping. (default is '?')
+But you can also use NULL to keep those unknown chars. Malformed UTF-8 is discarded during cleaning.</p>`
 - `bool $strict [optional] <p>Use "transliterator_transliterate()" from PHP-Intl`
 
 **Return:**

vendor/voku/portable-ascii/composer.json

@@ -16,10 +16,10 @@
         }
     ],
     "require": {
-        "php": ">=7.0.0"
+        "php": ">=7.1.0"
     },
     "require-dev": {
-        "phpunit/phpunit": "~6.0 || ~7.0 || ~9.0"
+        "phpunit/phpunit": "~8.5 || ~9.6 || ~10.5 || ~11.5"
     },
     "suggest": {
         "ext-intl": "Use Intl for transliterator_transliterate() support"