Skip to content

chore(deps-dev): bump sympress/qa from 0.1.2 to 0.1.3 - #30

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/sympress/qa-0.1.3
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/sympress/qa-0.1.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 17, 2026 •

Copy link
Copy Markdown
Contributor

Bumps sympress/qa from 0.1.2 to 0.1.3.

Release notes

Sourced from sympress/qa's releases.

qa v0.1.3

QA 0.1.3

Require Symfony Process 8.0.5 or newer to exclude CVE-2026-24739 from consumer dependency resolution. The command and strict-mode contracts are unchanged.

Update sympress/qa with Composer and review the resulting lockfile. This fixes the package's allowed dependency range; it does not establish that an installed consumer was vulnerable.

Commits
  • 80015ae fix: require patched Symfony Process releases
  • e2258a1 chore: update Composer author email and format manifest
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Oct 17, 2026
Bumps [sympress/qa](https://github.com/SymPress/qa) from 0.1.2 to 0.1.3.
- [Release notes](https://github.com/SymPress/qa/releases)
- [Commits](SymPress/qa@v0.1.2...v0.1.3)

---
updated-dependencies:
- dependency-name: sympress/qa
  dependency-version: 0.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/composer/sympress/qa-0.1.3 branch from efe8672 to ba1ec6c Compare October 19, 2026 21:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants