Skip to content

IBX-11808: Configured composer audit for 3.3 nightly regressions#140

Open
alongosz wants to merge 5 commits into
mainfrom
ibx-11808-reuse-composer-audit-ignore
Open

IBX-11808: Configured composer audit for 3.3 nightly regressions#140
alongosz wants to merge 5 commits into
mainfrom
ibx-11808-reuse-composer-audit-ignore

Conversation

@alongosz
Copy link
Copy Markdown
Member

@alongosz alongosz commented Jun 1, 2026

Caution

  • Drop TMP commit before merging
🎫 Issue IBX-11808, IBX-11825

Related PRs:

Description:

  1. Extracted composer audit ignore logic from the previous PRs and ec78428 release-time hotfix to a common function.
    Browser Tests download prepare_project_edition.sh script on-the-fly, so using normal bash include is not possible. Instead, downloading it via curl the same way as Browser Tests are doing.

  2. Resolved also IBX-11825 while at it - there are 5 new advisories to be added.

For QA:

Review.

Regression:

Documentation:

No documentation required.

@alongosz alongosz force-pushed the ibx-11808-reuse-composer-audit-ignore branch from 9257ec2 to bbd378f Compare June 1, 2026 16:15
fi

# Configure composer audit for unresolvable advisories
echo "> Adding composer audit.ignore script, if applies"
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

for 3.3 it seems that php7.3 was handled here
https://github.com/ibexa/ci-scripts/pull/140/changes#diff-cb5c522d3ee36f43a72ce86aab48e9740e4a50118ccdd1b8efd92bbc582ccc07L94

shouldnt new composer_audit_ignore.sh reflect that in anyway?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

for 3.3 it seems that php7.3 was handled here https://github.com/ibexa/ci-scripts/pull/140/changes#diff-cb5c522d3ee36f43a72ce86aab48e9740e4a50118ccdd1b8efd92bbc582ccc07L94

shouldnt new composer_audit_ignore.sh reflect that in anyway?

Good catch, added it via ac22ac4.

Co-Authored-By: Dawid Parafiński <ViniTou@users.noreply.github.com>
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Jun 2, 2026

@alongosz alongosz requested a review from ViniTou June 2, 2026 12:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants