Update guzzlehttp/psr7 constraint

Created on 3 May 2023, over 1 year ago
Updated 4 May 2023, over 1 year ago

Problem/Motivation

Follow-up for 📌 Update guzzlehttp/psr7 Fixed dealing with https://github.com/advisories/GHSA-wxmh-65f7-jcvw

If I'm not mistaken only core-recommended constraints were updated and not core constraints.

Isn't the current policy still to also up core constraints (caret) for security updates? Meaning not just core-recommended constraints (tilde)?

Like for example when twig/twig was upped in core from ^2.15.0 to ^2.15.3 in 9.4.7. (https://git.drupalcode.org/project/drupal/-/commit/82a7d4dd3077ef16b69f2...)

I think there are more recent examples out there, but not able to give one right now.

Steps to reproduce

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes

Release notes snippet

📌 Task
Status

Fixed

Version

10.0

Component
Base 

Last updated about 16 hours ago

Created by

🇳🇱Netherlands Eric_A

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024