Bump elephantio/elephant.io from 4.13.1 to 5.1.0 (rebased onto main)

[Copilot]

The original dependabot PR conflicted with main, which had accumulated significant changes (PHP 8.3, PHPUnit, health scan refactor) while reverting elephant.io to ^4.8. This rebase preserves the 5.1.0 upgrade on top of the current main.

Changes

• composer.json: Merged main's additions (php >=8.3, autoload-dev, phpunit/phpunit ^12.5) while keeping elephantio/elephant.io: ^5.1
• composer.lock: Main branch as base; replaced elephant.io v4.13.1 → v5.1.0 with updated content hash
• Synced from main: GitHub Actions workflows, ScannerService, ScanCommandOutputHelper, FileHashLookupService, ScannerServiceCallbackInterface, new HealthScanner/HealthResponseException classes, phpunit.xml, and unit tests

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

[Copilot]

Just as a heads up, I was blocked by some firewall rules while working on your feedback. Expand below for details.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/ElephantIO/elephant.io/zipball/9849207dcc749582225c183fa1342dee5407ffd1
  • Triggering command: /usr/bin/php8.3 /usr/bin/php8.3 -n -c /tmp/6blgzI /usr/bin/composer update elephantio/elephant.io --no-scripts (http block)
• https://api.github.com/repos/php-fig/http-client/zipball/bb5906edc1c324c9a05aa0873d40117941e5fa90
  • Triggering command: /usr/bin/php8.3 /usr/bin/php8.3 -n -c /tmp/6blgzI /usr/bin/composer update elephantio/elephant.io --no-scripts (http block)
• https://api.github.com/repos/php-fig/http-factory/zipball/2b4765fddfe3b508ac62f829e852b1501d3f6e8a
  • Triggering command: /usr/bin/php8.3 /usr/bin/php8.3 -n -c /tmp/6blgzI /usr/bin/composer update elephantio/elephant.io --no-scripts (http block)
• https://api.github.com/repos/php-fig/http-message/zipball/402d35bcb92c70c026d1a6a9883f06b2ead23d71
  • Triggering command: /usr/bin/php8.3 /usr/bin/php8.3 -n -c /tmp/6blgzI /usr/bin/composer update elephantio/elephant.io --no-scripts (http block)
• https://api.github.com/repos/php-fig/log/zipball/f16e1d5863e37f8d8c2a01719f5b34baa2b714d3
  • Triggering command: /usr/bin/php8.3 /usr/bin/php8.3 -n -c /tmp/6blgzI /usr/bin/composer update elephantio/elephant.io --no-scripts (http block)
• https://api.github.com/repos/ralouphie/getallheaders/zipball/120b605dfeb996808c31b6477290a714d356e822
  • Triggering command: /usr/bin/php8.3 /usr/bin/php8.3 -n -c /tmp/6blgzI /usr/bin/composer update elephantio/elephant.io --no-scripts (http block)
• https://api.github.com/repos/symfony/deprecation-contracts/zipball/63afe740e99a13ba87ec199bb07bbdee937a5b62
  • Triggering command: /usr/bin/php8.3 /usr/bin/php8.3 -n -c /tmp/6blgzI /usr/bin/composer update elephantio/elephant.io --no-scripts (http block)
• https://api.github.com/repos/symfony/polyfill-mbstring/zipball/85181ba99b2345b0ef10ce42ecac37612d9fd341
  • Triggering command: /usr/bin/php8.3 /usr/bin/php8.3 -n -c /tmp/6blgzI /usr/bin/composer update elephantio/elephant.io --no-scripts (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)