- Issue created by @rbrownell
There is a security update available for Firebase PHP-JWT. It appears that the version that this module references in its composer.json file is not going to receive the appropriate the security patch. See https://github.com/advisories/GHSA-8xf4-w7qw-pjjw
This security update is causing deployment pipelines to break that include checks for security updates for third party composer dependencies.
Update the module and its dependencies to make use of firebase/php-jwt:^6.0.
Active
5.0
salesforce_jwt.module