Skip to content

Commit b978e17

Browse files
authored
ci(composer): ignore symfony cve (#2607)
## Description Ignore insecure dependency, this is currently causing CI to fail https://symfony.com/blog/cve-2025-64500-incorrect-parsing-of-path-info-can-lead-to-limited-authorization-bypass > Problem 1 - Root composer.json requires symfony/http-foundation ^6.4 || ^7.1, found symfony/http-foundation[v6.4.0, ..., v6.4.29, v7.1.0, ..., v7.3.7] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-365x-2zjk-pt47") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config. ## What type of PR is this? (check all applicable) - [ ] Bug Fix - [ ] Feature - [ ] Refactor - [ ] Deprecation - [ ] Breaking Change - [ ] Documentation Update - [x] CI ## Checklist - [ ] I have made corresponding changes to the documentation (`docs/`) - [ ] I have made corresponding changes to the changelog (`CHANGELOG.md`)
1 parent 772d26a commit b978e17

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

composer.json

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -94,7 +94,12 @@
9494
}
9595
},
9696
"config": {
97-
"sort-packages": true
97+
"sort-packages": true,
98+
"audit": {
99+
"ignore": [
100+
"PKSA-365x-2zjk-pt47"
101+
]
102+
}
98103
},
99104
"extra": {
100105
"branch-alias": {

0 commit comments

Comments
 (0)