Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable check for security vulnerabilites step #15527

Merged
merged 2 commits into from Nov 14, 2023

Conversation

Wojdylak
Copy link
Member

Q A
Branch? 1.12
Bug fix? yes
New feature? no
BC breaks? no
Deprecations? no
Related tickets N/A
License MIT

@Wojdylak Wojdylak requested a review from a team as a code owner November 14, 2023 08:59
@probot-autolabeler probot-autolabeler bot added the Maintenance CI configurations, READMEs, releases, etc. label Nov 14, 2023
@Wojdylak Wojdylak changed the base branch from 1.13 to 1.12 November 14, 2023 08:59
Copy link

github-actions bot commented Nov 14, 2023

Bunnyshell Preview Environment deleted

Available commands:

  • /bns:deploy to redeploy the environment

@GSadee GSadee merged commit 7c3b5ed into Sylius:1.12 Nov 14, 2023
28 checks passed
@GSadee
Copy link
Member

GSadee commented Nov 14, 2023

Thank you, Karol! 🎉


- `doctrine/doctrine-bundle:2.11.0`:

This version uses the [readonly property](https://github.com/doctrine/DoctrineBundle/blob/2.11.0/Repository/ServiceEntityRepositoryProxy.php#L34), which is available from PHP 8.1 while the package also supports PHP 7.4 and 8.0, leading to compatibility issues.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This really shouldn't be needed, the file you're linking is conditionally loaded by the "real" class downstream users are meant to be using, and this case it would be only when doctrine/orm:^3.0 is installed (which requires PHP 8.1 anyway). Sounds like this might be another case of a static analysis tool being over-eager?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We managed to solve it in #15531. Thanks for rising this topic :)!

jakubtobiasz added a commit that referenced this pull request Nov 14, 2023
…dylak)

This PR was merged into the 1.12 branch.

Discussion
----------

| Q               | A                                                            |
|-----------------|--------------------------------------------------------------|
| Branch?         | 1.12
| Bug fix?        | yes
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets | #15527
| License         | MIT

[link](#15527 (comment))

Commits
-------
  Add ignore parse errors to composer require checker
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Maintenance CI configurations, READMEs, releases, etc.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants