Skip to content

chore: bump oauth2-apple to allow php-jwt 7.x#2135

Open
MrYamous wants to merge 1 commit into
tempestphp:3.xfrom
MrYamous:update-dependency-for-phpjwt
Open

chore: bump oauth2-apple to allow php-jwt 7.x#2135
MrYamous wants to merge 1 commit into
tempestphp:3.xfrom
MrYamous:update-dependency-for-phpjwt

Conversation

@MrYamous
Copy link
Copy Markdown
Contributor

I suggests to update patrickbussmann/oauth2-apple dependency to 0.4

Why ?

While running a composer update, Composer reported a security vulnerability advisory about firebase/php-jwt package
See Github advisory

A composer why later, I found this package was stick to firebase/php-jwt 6.0 but 0.4 solves this without introducing BC

@brendt
Copy link
Copy Markdown
Member

brendt commented May 26, 2026

Perfect, can you rebase on 3.x though?

@MrYamous
Copy link
Copy Markdown
Contributor Author

Perfect, can you rebase on 3.x though?

I'll check that I've probably created my branch from another one by mistake

@MrYamous MrYamous force-pushed the update-dependency-for-phpjwt branch from 8ae8620 to bb200ab Compare May 26, 2026 18:45
@MrYamous MrYamous changed the title Bump oauth2-apple to allow php-jwt 7.x chore: bump oauth2-apple to allow php-jwt 7.x May 26, 2026
@MrYamous
Copy link
Copy Markdown
Contributor Author

Perfect, can you rebase on 3.x though?

Done @brendt
And i've update title for CI and consistency

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants