Skip to content

Release: dependency update - #54

Merged
StanBarrows merged 2 commits into
productionfrom
main
Oct 28, 2026
Merged

StanBarrows merged 2 commits into
productionfrom
main

Conversation

@StanBarrows

Copy link
Copy Markdown
Contributor

Summary

  • composer update and npm update on main, verified locally with npm run build.
  • Includes symfony/mime 8.1.10: CVE-2026-45070 (email header injection via non-token characters in MIME parameter names), which the Oh Dear Security Advisories health check reported.
  • phpunit/phpunit stays at 13.4.3 until Pest supports 13.4.4+ (PKSA-qhjm-rpqc-qkn6); production installs use --no-dev, so it isn't deployed.

Test plan

  • CI green (Pest, coverage, Larastan, Pint, browser)
  • Deploy and smoke-test the main pages

🤖 Generated with Claude Code

Sebastian BURGIN-FIX (ext) and others added 2 commits October 28, 2026 20:31
Includes symfony/mime 8.1.10 (CVE-2026-45070, email header injection via
non-token characters in MIME parameter names).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@StanBarrows
StanBarrows merged commit 0ab16a3 into production Oct 28, 2026
18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant