From 693f29985ecac1bc83c444a0e2b8e67982cc3be4 Mon Sep 17 00:00:00 2001 From: Cyril MERY Date: Mon, 9 Nov 2020 00:48:22 +0100 Subject: [PATCH] fix(security): fix CVE-2019-10912 Update symfony/phpunit-bridge dependency to fix vulnerability see https://github.com/advisories/GHSA-w2fr-65vp-mxw3 for more infos --- .travis.yml | 2 +- composer.json | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.travis.yml b/.travis.yml index 45b836d..d87c85d 100644 --- a/.travis.yml +++ b/.travis.yml @@ -18,7 +18,7 @@ matrix: - php: 7.2 env: COMPOSER_FLAGS="--prefer-stable --prefer-lowest" SYMFONY_DEPRECATIONS_HELPER="weak_vendors" - php: 7.4 - env: COMPOSER_FLAGS="--prefer-stable --prefer-lowest" SYMFONY_DEPRECATIONS_HELPER="weak_vendors" + env: SYMFONY_PHPUNIT_VERSION=8 COMPOSER_FLAGS="--prefer-stable --prefer-lowest" SYMFONY_DEPRECATIONS_HELPER="weak_vendors" # Test the latest stable release - php: 7.4 diff --git a/composer.json b/composer.json index de32a1e..e9936f9 100644 --- a/composer.json +++ b/composer.json @@ -34,9 +34,9 @@ "coffreo/js-translation-extractor": "^0.1" }, "require-dev": { - "symfony/phpunit-bridge": "^3.4 || ^4.0", + "symfony/phpunit-bridge": "^3.4.26 || ^4.1.12", "coffreo/php-cs-fixer-config": "^2.2", - "matthiasnoback/symfony-dependency-injection-test": "^4.2" + "matthiasnoback/symfony-dependency-injection-test": "^3.1 || ^4.2" }, "autoload": { "psr-4": {