Changeset 62876

Timestamp:

07/28/2026 07:36:34 PM (33 hours ago)

Author:

lancewillett

Message:

Build/Test Tools: Ignore the WPCS security advisory to unblock 7.0 CI.

Scope a Composer audit exception for GHSA-3pwp-g2mj-5p3v so composer install resolves on the 7.0 branch. WPCS is a dev-only dependency, and this keeps it at 3.3.0 rather than bumping it and churning the coding standards on a release branch.

Developed in: ​https://github.com/WordPress/wordpress-develop/pull/12741

Reviewed by: jorbin.
Props johnbillion.
See #65739.

File:

• branches/7.0/composer.json (modified) (1 diff)

branches/7.0/composer.json

@@ -28 +28 @@
         },
         "config": {
+                "audit": { "ignore": [ "GHSA-3pwp-g2mj-5p3v" ] },
                 "allow-plugins": {
                         "dealerdirect/phpcodesniffer-composer-installer": true