Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package php-composer2 for openSUSE:Factory checked in at 2026-01-15 16:49:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/php-composer2 (Old) and /work/SRC/openSUSE:Factory/.php-composer2.new.1928 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "php-composer2" Thu Jan 15 16:49:03 2026 rev:33 rq:1327394 version:2.9.3 Changes: -------- --- /work/SRC/openSUSE:Factory/php-composer2/php-composer2.changes 2025-12-22 22:55:59.109707427 +0100 +++ /work/SRC/openSUSE:Factory/.php-composer2.new.1928/php-composer2.changes 2026-01-15 16:50:06.721806884 +0100 @@ -1,0 +2,17 @@ +Thu Jan 15 13:17:09 UTC 2026 - Petr Gajdos <[email protected]> + +- version update to 2.9.3 + * Security: Fixed ANSI sequence injection (GHSA-59pp-r3rg-353g / CVE-2025-67746) + * Fixed COMPOSER_NO_SECURITY_BLOCKING env var not being respected (#12677) + * Fixed update --lock / update mirrors not working when locked packages contain vulnerabilities (#12645) + * Fixed client-certificate authentication implementation (#12667) + * Fixed php-ext schema not being validated in ValidatingArrayLoader (#12694) + * Fixed crash when --bump-after-update is used and the lock file is disabled (#12660) + * Fixed support for SecureTransport + LibreSSL on macOS (#12615) + * Fixed display of reasons for why advisories are ignored (#12668) + * Fixed compatibility issues when git has log.showSignature enabled (#12666) + * Fixed curl downloader not retrying when a timeout (err 28) failure occurs (#12662) + * Fixed EventDispatcher requiring a full Composer instance to function (#12629) +- fixes [bsc#1255768] + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ php-composer2.spec ++++++ --- /var/tmp/diff_new_pack.49co0U/_old 2026-01-15 16:50:07.497839170 +0100 +++ /var/tmp/diff_new_pack.49co0U/_new 2026-01-15 16:50:07.497839170 +0100 @@ -1,7 +1,7 @@ # # spec file for package php-composer2 # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2026 SUSE LLC # Copyright (c) 2025 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties @@ -18,7 +18,7 @@ Name: php-composer2 -Version: 2.9.2 +Version: 2.9.3 Release: 0 Summary: Dependency Management for PHP License: MIT ++++++ composer.phar ++++++ Binary files /var/tmp/diff_new_pack.49co0U/_old and /var/tmp/diff_new_pack.49co0U/_new differ ++++++ composer.phar.asc ++++++ Binary files /var/tmp/diff_new_pack.49co0U/_old and /var/tmp/diff_new_pack.49co0U/_new differ
