Skip to content

Update composer.json to fix Symfony security advisory#22

Open
JeroenSchrader wants to merge 1 commit intoabantecart:mainfrom
JeroenSchrader:patch-1
Open

Update composer.json to fix Symfony security advisory#22
JeroenSchrader wants to merge 1 commit intoabantecart:mainfrom
JeroenSchrader:patch-1

Conversation

@JeroenSchrader
Copy link
Copy Markdown

See This Github link for more details on the security advisory.

Currently when trying to run composer install with v1.1 set as a requirement, composer gives the following error:

Problem 1
- Root composer.json requires abantecart/ups-php 1.1.0 -> satisfiable by abantecart/ups-php[1.1.0].
- abantecart/ups-php 1.1.0 requires symfony/process v7.3.0 -> found symfony/process[v7.3.0] but these were not loaded, because they are affected by security advisories ("PKSA-rkkf-636k-qjb3"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add them to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.

The security advisory has been resolved in version 7.3.11 so this removes the composer error.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant