Bump phpspreadsheet versions

terminal42 / contao-leads

Leads extension for Contao Open Source CMS; Store and manage form data with ease!

GNU Lesser General Public License v3.0

35 stars 24 forks source link

Bump phpspreadsheet versions #161

Closed zoglo closed 2 months ago

zoglo commented 2 months ago

Description

Bumps versions of PHPOffice/PhpSpreadsheet to fix the following security issues:

https://github.com/advisories/GHSA-ghg6-32f9-2jp7
https://github.com/advisories/GHSA-wgmf-q9vr-vww6

They did backport the security patch to version 1 as well. https://github.com/PHPOffice/PhpSpreadsheet/releases/tag/1.29.1

aschempp commented 2 months ago

I don't see a point in raising the dependencies, since we do not require a new API. The user/Composer is responsible for making sure the latest version that has no security issues is installed.