This repository was archived by the owner on May 26, 2023. It is now read-only.
🚨 [security] Update drupal/core: 9.4.8 → 9.4.14 (patch) #6
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![depfu[bot]](https://avatars.githubusercontent.com/in/715?s=60&v=4){kind=small}
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
🚨 Your current dependencies have known security vulnerabilities 🚨
This dependency update fixes known security vulnerabilities. Please see the details below and assess their impact carefully. We recommend to merge and deploy this as soon as possible!
Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.
What changed?
Security Advisories 🚨
🚨 Access bypass in Drupal core
Commits
See the full diff on Github. The new version differs by more commits than we can show here.
✳️ drupal/core-recommended (9.4.8 → 9.4.14) · Repo
Commits
See the full diff on Github. The new version differs by 12 commits:
Drupal 9.4.14Drupal 9.4.13Merged 9.4.12.Drupal 9.4.12Back to dev.Drupal 9.4.11Issue #3338301 by catch, longwave, benjifisher, jungle: Update Symfony to v6.2.6 / v4.4.50Merged 9.4.10.Drupal 9.4.10Back to dev.Drupal 9.4.9Back to dev.Release Notes
3.2.5
3.2.4
3.2.2
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 10 commits:
GitHub Actions (#348)Allow doctrine/lexer 2 (#345)CHANGELOG: Fix typo “Breacking” (#333)Update LICENSENullable type declaration for default null value (#328)Visibility required (#329)Single blank line at eof (#330)No superfluous elseif (#331)No unused imports (#332)Bump guzzlehttp/guzzle from 7.4.3 to 7.4.5 (#326)Security Advisories 🚨
🚨 Improper header name validation in guzzlehttp/psr7
Release Notes
1.9.1
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 5 commits:
Release 1.9.1Release 1.9.1Patch header validation issueRemove branch aliasUpdate CI workflows (#552)Commits
See the full diff on Github. The new version differs by 3 commits:
Deprecations for PHP 8.1fix: typo in _parseFeaturesHeaderFileFix: Creation of dynamic property PEAR_Error::$callback is deprecatedRelease Notes
1.0.2
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
Merge pull request #17 from ghostwriter/feature/http-message-v2Support `psr/http-message` v2Update url to HTTPS (#15)Release Notes
1.0.2
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 9 commits:
Merge pull request #13 from ghostwriter/feature/http-message-v2Support `psr/http-message` v2Merge pull request #12 from TimWolla/patch-1Add .gitattributes setting `export-ignore`Merge pull request #11 from J0WI/patch-1Update url to HTTPSMerge pull request #9 from gnumoksha/patch-1Update README.mddocs: Standardize the READMESecurity Advisories 🚨
🚨 Symfony storing cookie headers in HttpCache
Release Notes
4.4.50
4.4.49
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
Prepare for v1.27Update changelogUpdate CHANGELOG.mdCommits
See the full diff on Github. The new version differs by 3 commits:
Prepare for v1.27Update changelogUpdate CHANGELOG.mdCommits
See the full diff on Github. The new version differs by 4 commits:
Prepare for v1.27CS fixUpdate changelogUpdate CHANGELOG.mdCommits
See the full diff on Github. The new version differs by 4 commits:
Prepare for v1.27CS fixUpdate changelogUpdate CHANGELOG.mdCommits
See the full diff on Github. The new version differs by 5 commits:
Prepare for v1.27CS fixUpdate changelogUpdate CHANGELOG.mdPassing null to preg_split() throws deprecation on PHP 8.1Commits
See the full diff on Github. The new version differs by 2 commits:
Prepare for v1.27CS fixCommits
See the full diff on Github. The new version differs by 1 commit:
Prepare for v1.27Commits
See the full diff on Github. The new version differs by 4 commits:
Prepare for v1.27CS fixUpdate CHANGELOG.mdUpdate READMECommits
See the full diff on Github. The new version differs by 2 commits:
Prepare for v1.27CS fixRelease Notes
2.1.4
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 4 commits:
minor #110 Add PHP 8.2 to CI (derrabus)Add PHP 8.2 to CIbug #109 perf: ensure timely flush stream buffers (cidosx)perf: ensure timely flush stream buffersCommits
See the full diff on Github. The new version differs by 13 commits:
[VarDumper] Disable links for IntelliJ platform[VarDumper] Fixed dumping of CutStub[VarDumper] Add a bit of test coverage[VarDumper] Fix error when reflected class has default Enum parameter in constructorFix phpdocs in componentsCS fixMigrate to `static` data providers using `rector/rector`Update license years (last time)[VarDumper] Fix JS to expand / collapseBump license year to 2023Use static methods inside data providersFix getting the name of closures on PHP 8.1.11+[VarDumper] Ignore \Error in __debugInfo()Commits
See the full diff on Github. The new version differs by 26 commits:
Prepare the 2.15.4 releaseUpdate CHANGELOGbug #3738 do not clean up whitespace text nodes inside if tags (xabbuh)do not clean up whitespace text nodes inside if tagsBump version of actions/cachechore: Included githubactions in the dependabot configFix testsbug #3769 Updates CoreExtension::twig_constant to check for definition first to avoid hard crash (Alex Henderson-Roche)Updates CoreExtension::twig_constant to check for definition first to avoid hard crashDo more Github actions updatesUse checkout actions v3Add PHP 8.2 to the testsRemove a test that was a regression test for the C extensionminor #3779 Cycle function: Add output to example code (kathi-at-datrycs)Add outputminor #3780 Add missing argument for the cycle function (stof)minor #3781 Fix the drupal testing script (stof)Fix the drupal testing scriptAdd missing argument for the cycle functionbug #3777 Fix optimizing closures callbacks (nicolas-grekas)Fix optimizing closures callbacksminor #3759 Update templates.rst (Francoscopic)Update templates.rstminor #3751 Update michelf/php-markdown require-dev to allow v2 (bobvandevijver)Update michelf/php-markdown require-dev to allow v2Bump versionDepfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with
@depfu rebase.All Depfu comment commands