[loks0n]

Widens utopia-php/dsn from ^0.2.1 to ^0.2.1 || ^1.0 and locks 1.0.0.

dsn 1.0.0 changes no API. It marks the constructor argument #[\SensitiveParameter] and stops echoing the DSN in parse errors.

Downstream projects need this: utopia-php/queue 6.2+ requires dsn ^1.0, and queue 6.2+ is the first line that accepts utopia-php/validators ^2.0, which utopia-php/http 2.0.0-rc34+ requires. Without this change those projects can only resolve by aliasing packages.

Verified:

• composer check (PHPStan) passes.
• On dsn 1.0, new DSN('sentry://12345:abc123@o1.ingest.sentry.io') returns the same scheme, user, password and host that Server::initResources() reads for GEO_LOGGING_CONFIG.

🤖 Generated with Claude Code

[hansi-codes]

🟢 Tier S · Ready to merge

The Composer requirement now accepts both utopia-php/dsn 0.2.x and 1.x, and the lockfile selects version 1.0.0. The newer release retains the DSN parser API used by the server while redacting malformed DSNs from parse errors.

Verdict	New comments	Fixed	Still open
✅ Approved	0	0	0

📂 Walkthrough · 2

File	Change
composer.json	Widened the utopia-php/dsn version constraint to include 1.x.
composer.lock	Updated the locked utopia-php/dsn package to 1.0.0.

---

_{Reviewed 29017a0 · Details · Comment @hansi-codes review to re-run, or mention @hansi-codes with a question.}

[hansi-codes]

🟢 Tier S · Looks good to merge. Summary