Changeset 63037 for trunk/composer.json

Timestamp:

08/06/2026 12:47:56 PM (4 days ago)

Author:

jeremyfelt

Message:

Build/Test Tools: Ignore PHPCS Security Advisory CVE-2026-67434

Add an ignore for GHSA-hmqg-cxww-wqhq (CVE-2026-67434), under both its GitHub and Packagist advisory IDs.

WordPress tooling does not use the vulnerabile Gitblame, Hgblame or Svnblame report formats, so the pinned version poses no practical risk.

Props johnbillion, joedolson, jonsurrell, sergeybiryukov.
Fixes #65822.

File:

• trunk/composer.json (modified) (1 diff)

trunk/composer.json

@@ -57 +57 @@
         },
         "config": {
+                "audit": { "ignore": [ "GHSA-hmqg-cxww-wqhq", "PKSA-rdkp-vv9z-mjkg" ] },
                 "allow-plugins": {
                         "dealerdirect/phpcodesniffer-composer-installer": true