Bump the composer group across 1 directory with 6 updates#2
Open
dependabot[bot] wants to merge 1 commit into5.xfrom
Open
Bump the composer group across 1 directory with 6 updates#2dependabot[bot] wants to merge 1 commit into5.xfrom
dependabot[bot] wants to merge 1 commit into5.xfrom
Conversation
Bumps the composer group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [enshrined/svg-sanitize](https://github.com/darylldoyle/svg-sanitizer) | `0.19.0` | `0.22.0` | | [web-auth/webauthn-lib](https://github.com/web-auth/webauthn-lib) | `4.9.2` | `5.2.4` | | [yiisoft/yii2](https://github.com/yiisoft/yii2-framework) | `2.0.51` | `2.0.54` | | [yiisoft/yii2-redis](https://github.com/yiisoft/yii2-redis) | `2.0.18` | `2.0.20` | | [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) | `10.5.45` | `10.5.63` | | [psy/psysh](https://github.com/bobthecow/psysh) | `0.12.7` | `0.12.21` | Updates `enshrined/svg-sanitize` from 0.19.0 to 0.22.0 - [Release notes](https://github.com/darylldoyle/svg-sanitizer/releases) - [Commits](darylldoyle/svg-sanitizer@0.19.0...0.22.0) Updates `web-auth/webauthn-lib` from 4.9.2 to 5.2.4 - [Commits](web-auth/webauthn-lib@4.9.2...5.2.4) Updates `yiisoft/yii2` from 2.0.51 to 2.0.54 - [Changelog](https://github.com/yiisoft/yii2-framework/blob/master/CHANGELOG.md) - [Commits](yiisoft/yii2-framework@2.0.51...2.0.54) Updates `yiisoft/yii2-redis` from 2.0.18 to 2.0.20 - [Release notes](https://github.com/yiisoft/yii2-redis/releases) - [Changelog](https://github.com/yiisoft/yii2-redis/blob/master/CHANGELOG.md) - [Commits](yiisoft/yii2-redis@2.0.18...2.0.20) Updates `phpunit/phpunit` from 10.5.45 to 10.5.63 - [Release notes](https://github.com/sebastianbergmann/phpunit/releases) - [Changelog](https://github.com/sebastianbergmann/phpunit/blob/10.5.63/ChangeLog-10.5.md) - [Commits](sebastianbergmann/phpunit@10.5.45...10.5.63) Updates `psy/psysh` from 0.12.7 to 0.12.21 - [Release notes](https://github.com/bobthecow/psysh/releases) - [Commits](bobthecow/psysh@v0.12.7...v0.12.21) --- updated-dependencies: - dependency-name: enshrined/svg-sanitize dependency-version: 0.22.0 dependency-type: direct:production dependency-group: composer - dependency-name: web-auth/webauthn-lib dependency-version: 5.2.4 dependency-type: direct:production dependency-group: composer - dependency-name: yiisoft/yii2 dependency-version: 2.0.54 dependency-type: direct:production dependency-group: composer - dependency-name: yiisoft/yii2-redis dependency-version: 2.0.20 dependency-type: direct:development dependency-group: composer - dependency-name: phpunit/phpunit dependency-version: 10.5.63 dependency-type: indirect dependency-group: composer - dependency-name: psy/psysh dependency-version: 0.12.21 dependency-type: indirect dependency-group: composer ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the composer group with 6 updates in the / directory:
0.19.00.22.04.9.25.2.42.0.512.0.542.0.182.0.2010.5.4510.5.630.12.70.12.21Updates
enshrined/svg-sanitizefrom 0.19.0 to 0.22.0Release notes
Sourced from enshrined/svg-sanitize's releases.
Commits
0afa95eMerge commit from fork5a0a1ea[SECURITY] Prevent bypass via mixed-case SVG attributes5e47746Merge pull request #112 from Orgoth/patch-1b154c6eUpdate AllowedAttributes.php068d9fcMerge pull request #110 from lolli42/lolli-17dd11e4Use actions/checkout@v4, v3 is deprecatedfd26ab8Require PHP ^7.1c0b26c3Add PHP 8.4 to test matrix71b62a0Support PHP 8.4bcd646aMerge pull request #108 from gawpertron/fix/recursive-php-sanitisationUpdates
web-auth/webauthn-libfrom 4.9.2 to 5.2.4Commits
c346c98fix: add PHPStan type annotations for parse_url() return values in CheckAllow...9d891cdMerge commit from fork8782f57fix: set trust anchor when validating certificate path to support intermediat...49efc4afix: use spomky-labs/pki-framework to replace native php openssl functions fo...ac89d35Rector/ECS (#792)8937c39Add WebAuthn authentication extensions supportb02a2e6Refactor Symfony test configurations and add badge support6450850Replace secured_rp_ids with allowed_origins and allow_subdomains7aa58eaFix typo in docblock annotation for@deprecatedproperty (#696)3630e05Fix trust path denormalization for x5c data validation (#694)Updates
yiisoft/yii2from 2.0.51 to 2.0.54Changelog
Sourced from yiisoft/yii2's changelog.
... (truncated)
Commits
99daebfrelease version 2.0.54b905795Reorganize static analysis documentation in UPGRADE.md (#20701)ae4179dDocument Behavior template parameter requirements for static analysis tools (...a351d47Fix #20689: Fix PHP8.5imagedestroydeprecation warningedaf376Revert "release version 2.0.54"ce44881Revert "prepare for next release"23bbb65prepare for next release8ce2309release version 2.0.54fe0481fUpdate framework/composer.json61af031Minor changelog fixesUpdates
yiisoft/yii2-redisfrom 2.0.18 to 2.0.20Changelog
Sourced from yiisoft/yii2-redis's changelog.
Commits
d5b89cbrelease version 2.0.20962252dMerge commit from forkbfec5b6Fix #270: Prevent null parameter onmb_strlento avoid PHP 8.4 implicity nu...c00e9fbprepare for next release81a4a56release version 2.0.19b083ad4Fix Issue template typo invesion(#268)d09895fMerge pull request #265 from rob006/patch-1309af2cUpdate CHANGELOG.md465b044Improve performance ofmget()for big list of keys4629747Merge pull request #263 from Arhell/updUpdates
phpunit/phpunitfrom 10.5.45 to 10.5.63Release notes
Sourced from phpunit/phpunit's releases.
... (truncated)
Changelog
Sourced from phpunit/phpunit's changelog.
... (truncated)
Commits
3319826Prepare releaseb0d98a2Merge branch '9.6' into 10.5b36f023Fix regression introduced in PHPUnit 9.6.333f7dd50Prepare release9c95cf0Merge branch '9.6' into 10.5fea0625Prepare release1a677f6Merge branch '8.5' into 9.61015741Prepare releasee5cda18Fix bad mergea8b932bMerge branch '9.6' into 10.5Updates
psy/psyshfrom 0.12.7 to 0.12.21Release notes
Sourced from psy/psysh's releases.
... (truncated)
Commits
4821fabMerge branch 'release/v0.12.21'd5ebbe4Bump to v0.12.2185b019aGive phar test a bit more memory.a097a1aTruncate reverse history search preview to prevent the input lines from689401bImprove reverse history search UI.7938716Add filtered history navigation (up/down arrow keys with text in the buffer)7d6ade6Merge pull request #914 from bobthecow/feature/interactive-readline4c0d732Improve auto-indent/dedent behavior59e9dfaUse a default <info> format that's more readable across modern terminal theme...c2b2408Allow tab completion with interactive readline, regardless of ext-readline av...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.