Bump league/flysystem from 1.1.3 to 1.1.4 #697
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
kesselb
force-pushed
the
dependabot/composer/league/flysystem-1.1.4
branch
3 times, most recently
from
438c737
to
14257bd
Compare
kesselb
force-pushed
the
dependabot/composer/league/flysystem-1.1.4
branch
from
3dae94e
to
a569993
Compare
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
kesselb
force-pushed
the
dependabot/composer/league/flysystem-1.1.4
branch
from
12ba4fb
to
4b518f8
Compare
|
Hey 👋 Added the vendor changes. I don't know how to make the CI happy. composer run vendor change the hashes with each run 🤷 |
|
It's impossible to satisfy CI since composer V2. See the other recently merged PRs :) |
|
Could you please re-check if league/flysystem can be updated to 1.1.4? The currently used version 1.1.3 is vulnerable: https://nvd.nist.gov/vuln/detail/CVE-2021-32708 |
|
It's currently unused and being removed in the future |
|
A newer version of league/flysystem exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged. |
|
Master does not have this anymore: |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Bumps league/flysystem from 1.1.3 to 1.1.4.
Commits
f3ad691Reject paths with funky whitespace.1ac14e9Added SharePoint community adapter4347fe7Remove ext-fileinfo from suggests, it's already in requires1bf07fcFix time-related tests failing in 202113352d2Remove@deprecatedMountManager2062a94Adding AsyncAWS under community support53f16fdMore precise signatures2323c98Add missing emptyDir annotationDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)