From f1290896cfded52be33df674b8e0100f558516f1 Mon Sep 17 00:00:00 2001 From: Markus Staab Date: Sat, 18 Apr 2026 09:16:15 +0200 Subject: [PATCH 1/4] COMPOSER_NO_SECURITY_BLOCKING:1 for tests with old PHPUnit --- .github/workflows/tests.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index bdd01803733..5daad3bf37c 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -219,6 +219,8 @@ jobs: name: "Tests with old PHPUnit" runs-on: ${{ matrix.operating-system }} timeout-minutes: 60 + env: + COMPOSER_NO_SECURITY_BLOCKING: 1 strategy: fail-fast: false From c1ce86ad588aa86365eb75912ab230d8aa36e6ae Mon Sep 17 00:00:00 2001 From: Markus Staab Date: Sat, 18 Apr 2026 09:29:42 +0200 Subject: [PATCH 2/4] Update composer.json --- composer.json | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/composer.json b/composer.json index f03530eb81d..54d6ca1179d 100644 --- a/composer.json +++ b/composer.json @@ -86,6 +86,12 @@ "cweagans/composer-patches": true, "ondrejmirtes/composer-attribute-collector": true, "vaimo/composer-patches": true + }, + "audit": { + "ignore": { + "PKSA-5jz8-6tcw-pbk4": "PHPUnit argument injection - no fix in 11.x line", + "PKSA-z3gr-8qht-p93v": "PHPUnit security advisory - no fix in 11.x line" + } } }, "extra": { From fa1ff99404dc9d446ea84c8a6ecf35090c70c4d3 Mon Sep 17 00:00:00 2001 From: Markus Staab Date: Sat, 18 Apr 2026 09:30:27 +0200 Subject: [PATCH 3/4] Update tests.yml --- .github/workflows/tests.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 5daad3bf37c..bdd01803733 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -219,8 +219,6 @@ jobs: name: "Tests with old PHPUnit" runs-on: ${{ matrix.operating-system }} timeout-minutes: 60 - env: - COMPOSER_NO_SECURITY_BLOCKING: 1 strategy: fail-fast: false From 494afa5cb3696af0b3d162c4c6976b0ddac3f24a Mon Sep 17 00:00:00 2001 From: Markus Staab Date: Sat, 18 Apr 2026 09:46:03 +0200 Subject: [PATCH 4/4] fix --- composer.json | 6 ------ tests/composer.json | 6 ++++++ 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/composer.json b/composer.json index 54d6ca1179d..f03530eb81d 100644 --- a/composer.json +++ b/composer.json @@ -86,12 +86,6 @@ "cweagans/composer-patches": true, "ondrejmirtes/composer-attribute-collector": true, "vaimo/composer-patches": true - }, - "audit": { - "ignore": { - "PKSA-5jz8-6tcw-pbk4": "PHPUnit argument injection - no fix in 11.x line", - "PKSA-z3gr-8qht-p93v": "PHPUnit security advisory - no fix in 11.x line" - } } }, "extra": { diff --git a/tests/composer.json b/tests/composer.json index 46b7fefdb4e..3fc431ec4da 100644 --- a/tests/composer.json +++ b/tests/composer.json @@ -8,6 +8,12 @@ "config": { "platform": { "php": "8.2.99" + }, + "audit": { + "ignore": { + "PKSA-5jz8-6tcw-pbk4": "PHPUnit argument injection - no fix in 11.x line", + "PKSA-z3gr-8qht-p93v": "PHPUnit security advisory - no fix in 11.x line" + } } } }