fix: whitelist OpenEMR symbols in composer-require-checker

These symbols come from the host OpenEMR application at runtime.
openemr/openemr is a dev-only dependency (not declared in require)
so the checker must allow them explicitly.

Assisted-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: kojiromike

.composer-require-checker.json

@@ -14,7 +14,13 @@
     "callable",
     "iterable",
     "void",
-    "object"
+    "object",
+    "attr",
+    "xlt",
+    "OpenEMR\\Common\\Crypto\\CryptoGen",
+    "OpenEMR\\Common\\Database\\QueryUtils",
+    "OpenEMR\\Events\\Globals\\GlobalsInitializedEvent",
+    "OpenEMR\\Services\\Globals\\GlobalSetting"
   ],
   "php-core-extensions": [
     "Core",

src/ConfigService.php

@@ -17,8 +17,8 @@ class ConfigService
 {
     private const UPSERT_SQL = <<<'SQL'
         INSERT INTO `globals` (`gl_name`, `gl_index`, `gl_value`)
-        VALUES (?, 0, ?)
-        ON DUPLICATE KEY UPDATE `gl_value` = VALUES(`gl_value`)
+        VALUES (?, 0, ?) AS new
+        ON DUPLICATE KEY UPDATE `gl_value` = new.`gl_value`
         SQL;
 
     /**

src/GlobalsRegistrar.php

@@ -42,10 +42,10 @@ static function (GlobalsInitializedEvent $event) use ($descriptor, $globalsBag):
 
                 // Enable/disable toggle
                 $enableSetting = new GlobalSetting(
-                    xlt('Enable ' . $descriptor->sectionName),
+                    sprintf(xlt('Enable %s'), $descriptor->sectionName),
                     GlobalSetting::DATA_TYPE_BOOL,
                     '0',
-                    xlt('Enable or disable the ' . $descriptor->sectionName . ' module'),
+                    sprintf(xlt('Enable or disable the %s module'), $descriptor->sectionName),
                 );
                 $service->appendToSection(
                     $descriptor->sectionName,

tests/Mocks/openemr_functions.php

@@ -15,6 +15,6 @@ function xlt(string $text): string
 if (!function_exists('attr')) {
     function attr(string $text): string
     {
-        return htmlspecialchars($text, ENT_QUOTES);
+        return htmlspecialchars($text, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
     }
 }

tests/Unit/GlobalsRegistrarTest.php

@@ -37,6 +37,14 @@ public function testRegisterAddsListener(): void
         $this->assertTrue($dispatcher->hasListeners(GlobalsInitializedEvent::EVENT_HANDLE));
     }
 
+    protected function tearDown(): void
+    {
+        // Clean up global state written by GlobalsService::save()
+        // phpcs:ignore Squiz.PHP.GlobalKeyword.NotAllowed
+        global $GLOBALS_METADATA;
+        $GLOBALS_METADATA = null;
+    }
+
     /**
      * Dispatch the event and return the captured globals metadata.
      *

tests/bootstrap.php

@@ -8,7 +8,7 @@
 // Suppress error_log output during tests
 ini_set('error_log', '/dev/null');
 
-// Load mock classes before anything else to prevent "class not found" errors
+// Load mock classes to shadow real OpenEMR classes (must come after autoloader)
 require_once __DIR__ . '/Mocks/MockQueryUtils.php';
 require_once __DIR__ . '/Mocks/MockCryptoGen.php';
 require_once __DIR__ . '/Mocks/openemr_functions.php';