Merge branch 'main' into develop

Author: martinyde

.github/workflows/pr.yaml

@@ -47,6 +47,7 @@ jobs:
         run: |
           composer install --no-interaction --no-progress
           composer normalize composer.json --dry-run
+          composer audit
 
   config-check:
     name: Check that config is up to date
@@ -59,13 +60,10 @@ jobs:
           docker network create frontend
           docker compose pull
           docker compose up --detach
-
           # Important: Use --no-interaction to make https://getcomposer.org/doc/06-config.md#discard-changes have effect.
           docker compose exec --user root phpfpm composer install --no-interaction
-
           # Install the site
           docker compose exec --user root phpfpm vendor/bin/drush site:install --existing-config --yes
-
       - name: Export config
         run: docker compose exec --user root phpfpm vendor/bin/drush config:export --yes
       - name: Check for changes in config

CHANGELOG.md

@@ -8,6 +8,12 @@ Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [1.2.0]
+
+- [PR-366](https://github.com/itk-dev/os2loop/pull/366)
+  - Security update
+    - Drupal Core 10.3.6 => 10.4.3
+    - XLS serialization 1.4.0 => 2.0.0
 
 ## [1.1.4]
 
@@ -21,7 +27,7 @@ Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [1.1.2]
 
-  - [PR-362](https://github.com/itk-dev/os2loop/pull/362)
+- [PR-362](https://github.com/itk-dev/os2loop/pull/362)
   - Change Share with a friend form
   - Add chosen lib
   - Use chosen lib for profession and expertise fields

composer.json

@@ -17,9 +17,9 @@
         "drupal/color": "^1.0",
         "drupal/config_ignore": "^2.4",
         "drupal/convert_media_tags_to_markup": "^3.0",
-        "drupal/core-composer-scaffold": "^10.1",
-        "drupal/core-project-message": "^10.1",
-        "drupal/core-recommended": "^10.1",
+        "drupal/core-composer-scaffold": "^10.4",
+        "drupal/core-project-message": "^10.4",
+        "drupal/core-recommended": "^10.4",
         "drupal/date_popup": "^2.0",
         "drupal/diff": "^1.1",
         "drupal/entity_print": "^2.13",
@@ -57,7 +57,7 @@
         "drupal/views_data_export": "^1.3",
         "drupal/views_flag_refresh": "^1.0",
         "drupal/viewsreference": "^2.0@beta",
-        "drupal/xls_serialization": "^1.3",
+        "drupal/xls_serialization": "^2.0",
         "drush/drush": "^12.2",
         "jjj/chosen": "2.2.1"
     },
@@ -208,8 +208,7 @@
         },
         "patches": {
             "drupal/core": {
-                "Disable forced configuration langcode (https://www.drupal.org/project/drupal/issues/3150540)": "https://www.drupal.org/files/issues/2024-07-03/drupal-3150540-42.patch",
-                "Handle undefined index when using form states (https://www.drupal.org/project/drupal/issues/2700667)": "https://www.drupal.org/files/issues/2020-03-11/2700667-104.patch"
+                "Disable forced configuration langcode (https://www.drupal.org/project/drupal/issues/3150540)": "https://www.drupal.org/files/issues/2024-07-03/drupal-3150540-42.patch"
             },
             "drupal/devel": {
                 "Public methods are not visible in kint (https://gitlab.com/drupalspoons/devel/-/issues/221 via https://www.drupal.org/project/devel/issues/3112201)": "https://gitlab.com/-/project/18040690/uploads/7897853cd83cb829ae8d752657e2f497/kint.221-5-3.patch"