Skip to content

fix(deps-dev): bump composer/composer from 2.2.29 to 2.2.30 in /plugins/wp-graphql - #4282

Merged
jasonbahl merged 1 commit into
mainfrom
dependabot/composer/plugins/wp-graphql/composer/composer-2.2.30
Sep 9, 2026
Merged

jasonbahl merged 1 commit into
mainfrom
dependabot/composer/plugins/wp-graphql/composer/composer-2.2.30

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026 •

Copy link
Copy Markdown
Contributor

Bumps composer/composer from 2.2.29 to 2.2.30.

Release notes

Sourced from composer/composer's releases.

2.2.30

  • Security: Validate package bin paths against path traversal using symlinks (GHSA-96h3-5x6v-m776, CVE-2026-59944)
  • Security: Fixed command injection via malicious Perforce url (GHSA-rvx4-ffvw-m9q3, CVE-2026-84361)
  • Security: Sanitize URL-embedded usernames/token in a few more places (#13045)
  • Security: Fixed matching of gitlab URLs to avoid possible credential leak to the wrong domain (#13042)

Full Changelog: composer/composer@2.2.29...2.2.30

Changelog

Sourced from composer/composer's changelog.

[2.2.30] 2026-08-27

  • Security: Validate package bin paths against path traversal using symlinks (GHSA-96h3-5x6v-m776, CVE-2026-59944)
  • Security: Fixed command injection via malicious Perforce url (GHSA-rvx4-ffvw-m9q3)
  • Security: Sanitize URL-embedded usernames/token in a few more places (#13045)
  • Security: Fixed matching of gitlab URLs to avoid possible credential leak to the wrong domain (#13042)
Commits

@dependabot
dependabot Bot requested a review from jasonbahl as a code owner September 8, 2026 22:50
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Sep 8, 2026
@vercel

vercel Bot commented Sep 8, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
wpgraphql-com Skipped Skipped Sep 9, 2026 2:46am UTC

Request Review

@jasonbahl

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps [composer/composer](https://github.com/composer/composer) from 2.2.29 to 2.2.30.
- [Release notes](https://github.com/composer/composer/releases)
- [Changelog](https://github.com/composer/composer/blob/2.2.30/CHANGELOG.md)
- [Commits](composer/composer@2.2.29...2.2.30)

---
updated-dependencies:
- dependency-name: composer/composer
  dependency-version: 2.2.30
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/composer/plugins/wp-graphql/composer/composer-2.2.30 branch from 13a0c0e to ac14f04 Compare September 9, 2026 02:45
@jasonbahl
jasonbahl enabled auto-merge (squash) September 9, 2026 02:51
@jasonbahl
jasonbahl merged commit 318af34 into main Sep 9, 2026
58 checks passed
@jasonbahl
jasonbahl deleted the dependabot/composer/plugins/wp-graphql/composer/composer-2.2.30 branch September 9, 2026 02:54

This branch was previously deployed

1 inactive deployment
Preview — ac14f047 Deployed Sep 9, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant