Skip to content

Conversation

@jasonvarga
Copy link
Member

This bumps min versions of some constraints so prefer-lowest installs without security advisory errors that happen in Composer 2.9 now.

http-foundation 6.4.29 and 7.3.7
and process 6.4.14 and 7.1.7
are the lowest versions without security advisories

changing laravel/framework is technically not needed, as the other requirements would cause safe versions of framework to get installed.
@jasonvarga jasonvarga merged commit d072e3a into 5.x Nov 13, 2025
23 checks passed
@jasonvarga jasonvarga deleted the composer-security branch November 13, 2025 16:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants