Verified Commit dc99b713 authored by Jess's avatar Jess
Browse files

task: #3626470 Review Drupal 12 and 11.x composer dependencies for allowed versions with CVEs 

By: gábor hojtsy
By: xjm
By: longwave
(cherry picked from commit d29add7e)
parent c1ce9e6b

composer.json

+2 −2
Changes for composer.json: 2 added lines, 2 removed lines.
Original line number Diff line number Diff line
@@ -22,7 +22,7 @@ 
        "behat/mink": "^1.11",

        "behat/mink-browserkit-driver": "^2.2",

        "colinodell/psr-testlogger": "^1.2",

        "composer/composer": "^2.8.1",

        "composer/composer": "^2.10.3",

        "drupal/coder": "^9.0",

        "lullabot/mink-selenium2-driver": "^1.7.3",

        "lullabot/php-webdriver": "^2.0.7",
@@ -36,7 +36,7 @@ 
        "phpstan/extension-installer": "^1.4.3",

        "phpstan/phpstan": "^2.2.14",

        "phpstan/phpstan-phpunit": "^2.0.16",

        "phpunit/phpunit": "^12.5.15",

        "phpunit/phpunit": "^12.5.22",

        "spaze/phpstan-disallowed-calls": "^4.12.0",

        "symfony/browser-kit": "^8.1",

        "symfony/css-selector": "^8.1",

composer.lock

+3 −3
Changes for composer.lock: 3 added lines, 3 removed lines.
Original line number Diff line number Diff line
@@ -4,7 +4,7 @@ 
        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",

        "This file is @generated automatically"

    ],

    "content-hash": "9e0f207b34e66fecdec5d42dd73aed53",

    "content-hash": "656c5666d63d59c98e1a32836019f088",

    "packages": [

        {

            "name": "asm89/stack-cors",
@@ -368,7 +368,7 @@ 
            "dist": {

                "type": "path",

                "url": "core",

                "reference": "17d2b0926409eccf01dd12d91139e79a321d7e07"

                "reference": "56fdfed7e4ef932dad548e43ec17949f843b89eb"

            },

            "require": {

                "asm89/stack-cors": "^2.3",
@@ -391,7 +391,7 @@ 
                "ext-tokenizer": "*",

                "ext-xml": "*",

                "ext-zlib": "*",

                "guzzlehttp/guzzle": "^8.0",

                "guzzlehttp/guzzle": "^8.0.1",

                "guzzlehttp/psr7": "^3.0",

                "justinrainbow/json-schema": "^6.5.2",

                "masterminds/html5": "^2.7",

composer/Metapackage/DevDependencies/composer.json

+2 −2
Changes for composer/Metapackage/DevDependencies/composer.json: 2 added lines, 2 removed lines.
Original line number Diff line number Diff line
@@ -15,7 +15,7 @@ 
        "behat/mink": "^1.11",

        "behat/mink-browserkit-driver": "^2.2",

        "colinodell/psr-testlogger": "^1.2",

        "composer/composer": "^2.8.1",

        "composer/composer": "^2.10.3",

        "drupal/coder": "^9.0",

        "lullabot/mink-selenium2-driver": "^1.7.3",

        "lullabot/php-webdriver": "^2.0.7",
@@ -29,7 +29,7 @@ 
        "phpstan/extension-installer": "^1.4.3",

        "phpstan/phpstan": "^2.2.14",

        "phpstan/phpstan-phpunit": "^2.0.16",

        "phpunit/phpunit": "^12.5.15",

        "phpunit/phpunit": "^12.5.22",

        "spaze/phpstan-disallowed-calls": "^4.12.0",

        "symfony/browser-kit": "^8.1",

        "symfony/css-selector": "^8.1",

core/composer.json

+1 −1
Changes for core/composer.json: 1 added line, 1 removed line.
Original line number Diff line number Diff line
@@ -40,7 +40,7 @@ 
        "twig/twig": "^3.28.0",

        "doctrine/lexer": "^3",

        "drupal/core-composer-scaffold": "self.version",

        "guzzlehttp/guzzle": "^8.0",

        "guzzlehttp/guzzle": "^8.0.1",

        "guzzlehttp/psr7": "^3.0",

        "egulias/email-validator": "^4.0",

        "masterminds/html5": "^2.7",