[Bug]: Can't install on PHP 8.5 with current composer libraries in lock file

[auroraeosrose]

Snipe-IT Version

master

PHP Version

PHP 8.5.2

Composer Version

Composer version 2.9.5 2026-01-29 11:40:53

MySQL/MariaDB version

irrelevant

How did you install Snipe-IT?

Git install

Is this a fresh install or an upgrade?

Fresh install

What happened?

Three libraries currently are locked to php 8.4.x in their present versions which makes new composer installs fail (weee)

composer update lcobucci/jwt phpspec/prophecy nette/schema

that made it work for 8.5

What browsers are you seeing the problem on?

No response

Can you reproduce this on the public demo?

Yes

Do you have full multiple company support enabled?

Yes

If you have full multiple company support enabled, do you have location scoping to company enabled?

Yes

Application log output

Browser console output

Common Issues

• I have searched this repo for existing issues related to my issue (including closed issues)
• My APP_URL is set correctly in my .env file (including http or https and no trailing slash)
• I have searched the official Snipe-IT documentation and have checked the Common Issues documentation (where applicable)
• I have run database migrations (where applicable).
• I have attached screenshots and/or videos of the issue (where applicable)

Code of Conduct

• I agree to follow this project's Code of Conduct

[snipe]

Hi Aurora! Long time no see!

Unfortunately we're not yet compatible with 8.5.x, as some of our dependencies aren't updated to work with it yet (as you've discovered). As soon as they are, we'll change the requirement page to reflect that. :(

[auroraeosrose]

Just so you know - it's running fine on 8.5 here with just the one package update :)

[snipe]

Ah, good to know, thanks! Do you know if that package update still supports 8.2? That's our lower boundary right now.

[auroraeosrose]

https://github.com/lcobucci/jwt/blob/6.0.x/composer.json - sadly doesn't look like it :(

lcobucci/jwt@9296329 - since last year

but I don't actually see anything BREAKING for 8.2 in it

GitHub

jwt/composer.json at 6.0.x · lcobucci/jwt

A simple library to work with JSON Web Token and JSON Web Signature - lcobucci/jwt

[snipe]

That author has been historically a stickler for versions, so I’m not 100% sure how we pull this off. Without a mid-level or major release, we can’t change the min PHP requirements. 😩

[snipe]

(We’ve gotten around this in the past by maintaining our own fork for a while, then moving back to their fork once things are more synced up. We may have to do that again.)

[uberbrady]

I think my PR that moves us to Laravel 12 actually "accidentally" gives us PHPv8.5 support (?!)