Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Apr 3, 2025

This PR contains the following updates:

Package Update Change
composer/composer patch 2.8.6 -> 2.8.9

Release Notes

composer/composer (composer/composer)

v2.8.9

Compare Source

  • Fixed json schema issues with version validation (#​12376)
    • Fixed bump-after-update triggering after an update --lock, which makes no sense (#​12371)
    • Fixed zip bomb false positives when unpacking using ZipArchive (#​12409)
    • Fixed creation of empty archives (#​12408)
    • Removed output of script being run when running via composer <script-name> (#​12383)

v2.8.8

Compare Source

  • Fixed json schema issues with version validation (#​12367)
    • Fixed issues running on 32bit machines (#​12365)

v2.8.7

Compare Source

  • Bumped justinrainbow/json-schema dependency to 6.x (#​12348)
    • Added COMPOSER_MAX_PARALLEL_PROCESS env var to control max amount of parallel processes Composer will start (#​12356)
    • Added zstd/brotli presence in diagnose command output
    • Fixed error handler to avoid spamming deprecation notices (#​12360)
    • Fixed InstalledVersions returning duplicate data at Composer runtime (#​12225)
    • Fixed handling of --with ... constraints to make them apply to packages replaced a package with a different name (#​12353)
    • Fixed deprecation warnings showing up in IDE code inspections within the vendor dir (#​12331)
    • Fixed a few json schema completeness issues (#​12332, #​12321)
    • Fixed issue autoloading files with a .phar inside the path (#​12326)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge April 3, 2025 17:37
@renovate renovate bot force-pushed the renovate/composer-composer-2.x branch from 035f183 to 1910ca6 Compare April 4, 2025 17:02
@renovate renovate bot changed the title chore(deps): update dependency composer/composer to v2.8.7 chore(deps): update dependency composer/composer to v2.8.8 Apr 4, 2025
@renovate renovate bot force-pushed the renovate/composer-composer-2.x branch from 1910ca6 to 57f0fbc Compare May 13, 2025 15:51
@renovate renovate bot changed the title chore(deps): update dependency composer/composer to v2.8.8 chore(deps): update dependency composer/composer to v2.8.9 May 13, 2025
@renovate renovate bot added this pull request to the merge queue May 13, 2025
Merged via the queue into main with commit 8595c4b May 13, 2025
8 checks passed
@renovate renovate bot deleted the renovate/composer-composer-2.x branch May 13, 2025 18:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants