[jschaedl]

Summary

Makes the library installable on PHP 8.5 and fixes the retry and error handling so it is safe for non-idempotent requests. Released as 0.1.0; breaking changes are listed in UPGRADE-0.1.md.

PHP and tooling

• PHP ~8.2 to ~8.5; CI tests the whole range
• PHPUnit 11 (tests moved to attributes), PHPStan 2 (level max, type coverage 99%, empty baseline), Rector 2, current php-cs-fixer rule sets
• Dropped the abandoned azjezz/psl and the unused symplify/phpstan-rules and spatie/phpunit-snapshot-assertions

Retries

• GenericRetryStrategy behind a new RetryStrategyInterface; RetryTrait removed
• 5xx and network errors are retried for idempotent methods only, because a resent POST can create a second order or invoice. 429 is retried for every method.
• Retry-After (seconds or HTTP-date) is honoured; if it asks for longer than maxDelay, the request is not retried
• RetryClient gets a maxDuration deadline (waits included) and an injectable clock instead of usleep
• maxRetries now counts retries, not attempts

Errors

• Client throws ClientException/ServerException on 4xx/5xx (HTTP status as code, request and response attached) and TransportException on network failures (cause chained); all implement ApiExceptionInterface
• Messages never contain response bodies or query strings
• Response handlers run before the status check, so they can turn an expected 404 into a domain exception
• throwOnErrorStatus: false keeps the old behaviour

Bodies

• Request bodies can be array|string|null; a string is sent as-is
• Encoders set their own Content-Type; a request can bring its own encoder (new FormRequestBodyEncoder)
• Responses keep rawBody() and decode lazily; decode failures throw DecodingException

Testing

• Testing\MockClient (queued responses, recorded requests) and Clock\MockClock

Verification

• make tests: unit 60, integration 13, e2e 2 (real Symfony + Guzzle clients against httpbin)
• Non-network tests also pass on PHP 8.2, 8.3 and 8.4 (Docker php:*-cli)
• make cs-check, make analyse and rector --dry-run are clean