github-actions[bot]
commented
2 years ago Dependency diff between development base branch development (a863a7bb719f2e829cf814156dc06af6f862bf13) and PR branch dependabot/composer/codebase/composer/composer-2.2.12 (25df874561733458a9f79bc2cdf18ca6d7415b59):
diff --git a/deps.a863a7bb719f2e829cf814156dc06af6f862bf13 b/deps.pr-317.25df874561733458a9f79bc2cdf18ca6d7415b59
index b025e20..b25a5b7 100644
--- a/deps.a863a7bb719f2e829cf814156dc06af6f862bf13
+++ b/deps.pr-317.25df874561733458a9f79bc2cdf18ca6d7415b59
@@ -7,14 +7,15 @@ behat/mink-selenium2-driver v1.4.0
chi-teck/drupal-code-generator 1.33.1
citation-style-language/locales 1.0.0
citation-style-language/styles-distribution 1.0.0
-composer/ca-bundle 1.2.10
-composer/composer 2.1.6
+composer/ca-bundle 1.3.1
+composer/composer 2.2.12
composer/installers v1.11.0
composer/metadata-minifier 1.0.0
composer/package-versions-deprecated 1.11.99.3
+composer/pcre 1.0.1
composer/semver 3.2.5
-composer/spdx-licenses 1.5.5
-composer/xdebug-handler 2.0.2
+composer/spdx-licenses 1.5.6
+composer/xdebug-handler 2.0.5
consolidation/annotated-command 4.2.4
consolidation/config 1.2.1
consolidation/filter-via-dot-access-data 1.0.0
@@ -145,7 +146,7 @@ jhu-idc/islandora_repository_reports dev-main 56a0291
jhu-idc/migrate_file dev-8.x-1.x 19d0ea1
jhu-idc/reference_value_pair dev-main ee0bb99
jhu_idc/idc_migration v2.0.1
-justinrainbow/json-schema 5.2.11
+justinrainbow/json-schema 5.2.12
laminas/laminas-diactoros 2.6.0
laminas/laminas-escaper 2.7.0
laminas/laminas-feed 2.14.1
@@ -226,8 +227,8 @@ sebastian/type 2.3.4
sebastian/version 3.0.2
seboettg/citeproc-php v2.2.5
seboettg/collection v2.1.1
-seld/jsonlint 1.8.3
-seld/phar-utils 1.1.2
+seld/jsonlint 1.9.0
+seld/phar-utils 1.2.0
silex/silex v2.3.0
simplesamlphp/assert v0.0.13
simplesamlphp/composer-module-installer v1.1.8
@@ -271,7 +272,7 @@ stomp-php/stomp-php 4.6.1
symfony-cmf/routing 2.3.3
symfony/browser-kit v4.4.37
symfony/cache v5.3.4
-symfony/cache-contracts v2.5.0
+symfony/cache-contracts v2.5.1
symfony/config v4.4.27
symfony/console v4.4.25
symfony/css-selector v4.4.37
@@ -282,8 +283,8 @@ symfony/dom-crawler v4.4.39
symfony/error-handler v4.4.25
symfony/event-dispatcher v4.4.25
symfony/event-dispatcher-contracts v1.1.9
-symfony/filesystem v4.4.27
-symfony/finder v4.4.37
+symfony/filesystem v4.4.39
+symfony/finder v4.4.41
symfony/framework-bundle v4.4.27
symfony/http-client-contracts v2.4.0
symfony/http-foundation v4.4.25
@@ -310,7 +311,7 @@ symfony/routing v4.4.25
symfony/security v4.4.29
symfony/serializer v4.4.35
symfony/service-contracts v2.4.0
-symfony/string v5.4.3
+symfony/string v5.4.8
symfony/translation v4.4.25
symfony/translation-contracts v2.4.0
symfony/validator v4.4.25 
DonRichards
Bumps composer/composer from 2.1.6 to 2.2.12.
Release notes
Sourced from composer/composer's releases.
... (truncated)
Changelog
Sourced from composer/composer's changelog.
... (truncated)
Commits
ba61e76Release 2.2.12a1f9baaFix 5.3/5.4 builds2ba8758Update changelog2c40c53Merge pull request from GHSA-x7cr-6qr6-2hh6915b97fFix docsd64e32cMerge remote-tracking branch 'ktomk/patch-validate-no-check-lock' into 2.20a8dfe6Clarify that autoloader-suffix should be a non-empty-string, fixes #10720 (#1...bb0edceFixed lock file being used when lock:false is in config, refs #10715 (#10726)939c998validate lock-file if configured (#10715, --check-lock)9bfd059Fix curl downloader to retry in case of DNS resolution failure, fixes #10716Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/jhu-idc/idc-isle-dc/network/alerts).