Cannot use latest version containing security update with older versions of Symfony

[christian-fries]

Describe the bug

Since version 3.366.0, this package has a dependency on symfony/filesystem >= 6.4.3 (introduced in #3179). As a result, this package cannot be used with Symfony 5.4 anymore, which otherwise still gets security updates. For Symfony 5.4 projects, its not possible to use the latest version containing the latest security patches.

After quickly scanning the Composer script that requires the filesystem component, I think it would work with symfony/filesystem:^5.4 as well.

Regression Issue

• Select this option if this issue appears to be a regression.

Expected Behavior

The latest version containing security updates can be used with Symfony 5.4

Current Behavior

The latest version cannot be installed in Symfony 5.4 projects due to the dependency on symfony/filesystem >= 6.4.3

Reproduction Steps

Try install latest version of package in Symfony 5.4 project.

Possible Solution

I propose to add compatibility for symfony/filesystem ^5.4

Additional Information/Context

No response

SDK version used

3.359.11

Environment details (Version of PHP (php -v)? OS name and version, etc.)

PHP 8.2.29

[stobrien89]

Hi @christian-fries,

Sorry for the issues. I'll look into the feasibility of adding back support for filesystem ^5.4 because it still receives security updates, but our latest security patches only apply to those using the S3 Encryption Client. This is a separate wrapper around the standard S3 client that requires separate setup and configuration. If you're not using this client, you might want to revert your SDK version in the meantime.

[stobrien89]

Hi @christian-fries,

Support for filesystem 5.4 was added in #3237 and will be available in the next release (likely 12/26 around 2PM EST). Closing for now, but let us know if you run into any issues.

[github-actions]

This issue is now closed. Comments on closed issues are hard for our team to see.
If you need more assistance, please open a new issue that references this one.