[lhbarrientosz]

PHP Compatibility and Security Validation

This PR upgrades the project's baseline to PHP 8.3.36 and updates the development tooling to ensure compatibility with the supported PHP versions.

Validation Results

The library was tested using official PHP Docker images with the following results:

PHP Version	Syntax Validation	Unit Tests
8.3.36	✅ Passed	15 tests, 19 assertions
8.4.27	✅ Passed	15 tests, 19 assertions
8.5.12	✅ Passed	15 tests, 19 assertions

Tests were executed with all PHP error levels enabled (E_ALL). No warnings, deprecations, or risky tests were detected.

Additional validation performed on PHP 8.3.36:

• ✅ Composer validation
• ✅ Platform requirements verification
• ✅ PHP CS Fixer
• ✅ PHPStan level 8

Security Considerations

These PHP releases include fixes for the following vulnerabilities:

• CVE-2026-109618
• CVE-2026-109619

The current Composer constraint:

"php": "^8.3.36"

also allows earlier, unpatched releases from the PHP 8.4 and 8.5 branches. To enforce the minimum patched version across all supported branches, the recommended constraint is:

"php": "~8.3.36 || ~8.4.27 || ~8.5.12"

Note: Updating the Composer constraint alone does not patch deployed PHP runtimes. Production servers and containers must also be upgraded, and any existing PHP workers must be restarted or replaced to ensure the security fixes are applied.