One entryMerged PR· Claudavel· PHP
PR #57 merged: chore(deps): refresh composer.lock to clear security advisories
additions
+526
deletions
-467
files changed
1
Why
The nightly Security Check workflow has failed every day since ~13 Jul: composer audit reports 19 advisories across 10 packages in the committed lock, including highs in laravel/framework, symfony/http-kernel and symfony/mime (the recent coordinated Symfony/Laravel security release).
What
Lock refresh only — no constraint changes. Headlines:
- laravel/framework v13.5.0 → v13.20.0
- Symfony components 7.4.x → 8.1.x (allowed by existing constraints; Laravel 13.20 supports Symfony 8)
- guzzle 7.10.0 → 7.15.1, psr7 2.9.0 → 2.13.0
Verification
composer audit --locked→ 0 advisories- Full pest suite on the new lock: 63 passed (243 assertions)