Update dependency composer/composer to v2.8.9 #908

Merged

renovate-bot merged 1 commit from renovate/composer-composer-2.8.x into main 2025-05-13 13:04:33 +00:00

Conversation 0 Commits 1 Files changed 4 +4 -4

renovate-bot commented 2025-05-13 13:04:24 +00:00

Collaborator

Copy link

This PR contains the following updates:

Package	Update	Change
composer/composer	patch	2.8.8 -> 2.8.9

---

Release Notes

composer/composer (composer/composer)

v2.8.9

Compare Source

• Fixed json schema issues with version validation (#​12376)
  • Fixed bump-after-update triggering after an update --lock, which makes no sense (#​12371)
  • Fixed zip bomb false positives when unpacking using ZipArchive (#​12409)
  • Fixed creation of empty archives (#​12408)
  • Removed output of script being run when running via composer <script-name> (#​12383)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [composer/composer](https://github.com/composer/composer) | patch | `2.8.8` -> `2.8.9` | --- ### Release Notes <details> <summary>composer/composer (composer/composer)</summary> ### [`v2.8.9`](https://github.com/composer/composer/blob/HEAD/CHANGELOG.md#289-2025-05-13) [Compare Source](https://github.com/composer/composer/compare/2.8.8...2.8.9) - Fixed json schema issues with version validation ([#&#8203;12376](https://github.com/composer/composer/issues/12376)) - Fixed `bump-after-update` triggering after an `update --lock`, which makes no sense ([#&#8203;12371](https://github.com/composer/composer/issues/12371)) - Fixed zip bomb false positives when unpacking using `ZipArchive` ([#&#8203;12409](https://github.com/composer/composer/issues/12409)) - Fixed creation of empty archives ([#&#8203;12408](https://github.com/composer/composer/issues/12408)) - Removed output of script being run when running via `composer <script-name>` ([#&#8203;12383](https://github.com/composer/composer/issues/12383)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xMS43IiwidXBkYXRlZEluVmVyIjoiNDAuMTEuNyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

renovate-bot added 1 commit 2025-05-13 13:04:25 +00:00

Update dependency composer/composer to v2.8.9 4800767f11

renovate-bot scheduled this pull request to auto merge when all checks succeed 2025-05-13 13:04:25 +00:00

renovate-bot merged commit 4800767f11 into main 2025-05-13 13:04:33 +00:00

renovate-bot deleted branch renovate/composer-composer-2.8.x 2025-05-13 13:04:33 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: mwalbeck/docker-composer#908

No description provided.