refactor: update dependencies and remove deprecated properties

[mairo744]

Q	A
Documentation	no
Bugfix	no
BC Break	no
New Feature	no
RFC	no
QA	yes

Description

This PR adds composer-dependency-analyser to improve static analysis of unused or missing dependencies in the project.
I used maglnet/composer-require-checker, but I found that shipmonk-rnd/composer-dependency-analyser is more effective:

• It is faster and easier to use
• It reports more accurate dependency usage

During this process, I resolved the issues flagged by the tool and also updated some Composer dependencies to ensure compatibility and clean analysis results.

Added a conditional polyfill for the #[AllowDynamicProperties] attribute, which is only available in PHP 8.2+

• Since laminas/laminas-hydrator support PHP 8.1, this attribute caused the analyser to fail
• A CI-only polyfill is now loaded to satisfy the tool without affecting production code

[mairo744]

I’m starting the process of upgrading to psr/container v2. At the moment, I’m unsure which specific library is blocking the upgrade, but my current suspicion is laminas/laminas-modulemanager, which appears to depend on the abandoned laminas/laminas-config.

[mairo744]

Hi @gsteel,
Is it necessary for laminas/laminas-hydrator to depend on laminas/laminas-modulemanager?

It seems that laminas/laminas-modulemanager only provides default configuration for Laminas MVC applications.

Since Laminas MVC is being retired (announcement), would it make sense to decouple this dependency?

[froschdesign]

The laminas-modulemanager support can be removed. See: laminas/laminas-validator#384

[gsteel]

Can you please drop module-manager stuff in a separate PR?

This makes it easier to formulate change-logs/migration docs etc.

Cheers 👍

[gsteel]

Making Laminas Service Manager a hard dep is the right thing to do - I hate soft deps, but, Hydrator ships a standalone container specifically to avoid installation of servicemanager, so I'm not sure this is ideal. WDYT @froschdesign?

[gsteel]

Thanks @mairo744 - Let's merge this and defer the discussion about SMv4 as a hard dependency for later 👍