[TikiWiki-commits] [Git][tikiwiki/tiki][29.x] [UPD] Composer: Update packages affected by security vulnerability

luci pushed to branch 29.x at Tiki Wiki CMS Groupware / Tiki


Commits:
b177ff7e by ushindi bienvenu at 2026-02-13T23:19:01+00:00
[UPD] Composer: Update packages affected by security vulnerability
---
* [UPD] Update package affected by security vulnerability

* [UPD] Update package affected by security vulnerability

See merge request tikiwiki/tiki!9554

- - - - -


2 changed files:

- vendor_bundled/composer.json
- vendor_bundled/composer.lock


Changes:

=====================================
vendor_bundled/composer.json
=====================================
@@ -229,7 +229,7 @@
         "npm-asset/boomerangjs": "~1.687",
         "onelogin/php-saml": "~4.2",
         "openannotation/annotator": ">=1.2.10",
-        "paragonie/sodium_compat": "~2.1",
+        "paragonie/sodium_compat": "~2.5",
         "pclzip/pclzip": "~2.8",
         "pear/net_socket": "~1.2",
         "pear/pear": "~1.10",
@@ -252,14 +252,14 @@
         "steverhoades/oauth2-openid-connect-client": "~2.0",
         "studio-42/elfinder": "~2.1",
         "symfony/amazon-mailer": "~6.4",
-        "symfony/config": "~6.4.3",
-        "symfony/console": "~6.4.3",
-        "symfony/dependency-injection": "~6.4.3",
+        "symfony/config": "~6.4",
+        "symfony/console": "~6.4",
+        "symfony/dependency-injection": "~6.4",
         "symfony/finder": "~6.4",
         "symfony/mailchimp-mailer": "~6.4",
-        "symfony/mailer": "~6.4.21",
+        "symfony/mailer": "~6.4",
         "symfony/mailgun-mailer": "~6.4",
-        "symfony/mime": "~6.4.3",
+        "symfony/mime": "~6.4",
         "symfony/polyfill-ctype": "~1.8",
         "symfony/polyfill-iconv": "~1.27",
         "symfony/polyfill-intl-icu": "~1.27",
@@ -383,6 +383,16 @@
             "cweagans/composer-patches": true,
             "dealerdirect/phpcodesniffer-composer-installer": true,
             "php-http/discovery": true
+        },
+        "audit": {
+            "ignore-abandoned": {
+                "candy-chat/xmpp-prebind-php": "Work scheduled for removal next month.",
+                "laminas/laminas-loader": "Required transitively by laminas/laminas-http but will be solved in 3.0 https://github.com/laminas/laminas-http/pull/110",
+                "laminas/laminas-text":  "Reported as an abandoned package, but it is still required indirectly by laminas/laminas-captcha. See https://github.com/laminas/laminas-captcha/issues/41 to track progress on removing this dependency.",
+                "pear/structures_graph": " Reported as an abandoned package, but it is still required indirectly by pear/pear",
+                "pear/xml_parser": "This package is abandoned and no longer maintained. No replacement package was suggested.",
+                "pear/xml_util": " Reported as an abandoned package, but it is still required indirectly by pear/pear"
+            }
         }
     },
     "autoload": {


=====================================
vendor_bundled/composer.lock
=====================================
@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "eb33a2718584b802e3c9387957b9541d",
+    "content-hash": "ca12ae2bafbc3cc1dee772fc2684a2b2",
     "packages": [
         {
             "name": "amphp/amp",
@@ -16103,11 +16103,11 @@
         },
         {
             "name": "phpstan/phpstan",
-            "version": "2.1.38",
+            "version": "2.1.39",
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/dfaf1f530e1663aa167bc3e52197adb221582629",
-                "reference": "dfaf1f530e1663aa167bc3e52197adb221582629",
+                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/c6f73a2af4cbcd99c931d0fb8f08548cc0fa8224",
+                "reference": "c6f73a2af4cbcd99c931d0fb8f08548cc0fa8224",
                 "shasum": ""
             },
             "require": {
@@ -16152,25 +16152,25 @@
                     "type": "github"
                 }
             ],
-            "time": "2026-01-30T17:12:46+00:00"
+            "time": "2026-02-11T14:48:56+00:00"
         },
         {
             "name": "phpstan/phpstan-deprecation-rules",
-            "version": "2.0.3",
+            "version": "2.0.4",
             "source": {
                 "type": "git",
                 "url": "https://github.com/phpstan/phpstan-deprecation-rules.git",
-                "reference": "468e02c9176891cc901143da118f09dc9505fc2f"
+                "reference": "6b5571001a7f04fa0422254c30a0017ec2f2cacc"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/phpstan/phpstan-deprecation-rules/zipball/468e02c9176891cc901143da118f09dc9505fc2f",
-                "reference": "468e02c9176891cc901143da118f09dc9505fc2f",
+                "url": "https://api.github.com/repos/phpstan/phpstan-deprecation-rules/zipball/6b5571001a7f04fa0422254c30a0017ec2f2cacc",
+                "reference": "6b5571001a7f04fa0422254c30a0017ec2f2cacc",
                 "shasum": ""
             },
             "require": {
                 "php": "^7.4 || ^8.0",
-                "phpstan/phpstan": "^2.1.15"
+                "phpstan/phpstan": "^2.1.39"
             },
             "require-dev": {
                 "php-parallel-lint/php-parallel-lint": "^1.2",
@@ -16195,11 +16195,14 @@
                 "MIT"
             ],
             "description": "PHPStan rules for detecting usage of deprecated classes, methods, properties, constants and traits.",
+            "keywords": [
+                "static analysis"
+            ],
             "support": {
                 "issues": "https://github.com/phpstan/phpstan-deprecation-rules/issues",
-                "source": "https://github.com/phpstan/phpstan-deprecation-rules/tree/2.0.3"
+                "source": "https://github.com/phpstan/phpstan-deprecation-rules/tree/2.0.4"
             },
-            "time": "2025-05-14T10:56:57+00:00"
+            "time": "2026-02-09T13:21:14+00:00"
         },
         {
             "name": "phpunit/php-code-coverage",
@@ -18186,12 +18189,12 @@
         "ext-openssl": "*",
         "ext-zip": "*"
     },
-    "platform-dev": [],
+    "platform-dev": {},
     "platform-overrides": {
         "php": "8.1",
         "ext-ldap": "0",
         "ext-soap": "0",
         "ext-sockets": "0"
     },
-    "plugin-api-version": "2.6.0"
+    "plugin-api-version": "2.9.0"
 }



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/b177ff7eda47eec4d247a97a9bf4f03e291b2ee0

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/b177ff7eda47eec4d247a97a9bf4f03e291b2ee0
You're receiving this email because of your account on gitlab.com.

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs