googleapis / google-api-php-client

A PHP client library for accessing Google APIs
http://googleapis.github.io/google-api-php-client/
Apache License 2.0
9.32k stars 3.52k forks source link

Composer dependency is ^1.10.22 - security vulnerability #2551

Closed gravelld closed 8 months ago

gravelld commented 8 months ago

Thanks for your work on this library.

Due to https://github.com/composer/composer/security/advisories/GHSA-frqg-7g38-6gcf the minimum version for the 1.x version of composer should be 1.10.23. This means the entry in composer.json should be:

"composer/composer": "^1.10.23"