I noticed that the module is currently locked to PHPOffice/PhpSpreadsheet version 2.2.1: https://git.drupalcode.org/project/xls_serialization/-/blob/2.0.x/compos....
We noticed that there are some security issues in the PHP package that are backported to 2.3.0 version: https://github.com/PHPOffice/PhpSpreadsheet/releases/tag/2.3.0.
Latest 2.3.x release is 2.3.3.
Would it make sense to update the package to the supported 2.3.3 version? I noticed there is an on going issue ✨ Compatibility with phpoffice/phpspreadsheet:^3 Active to support the 3.x major version of the package but that still needs work so I wonder if it would make sense to update to the minor version first?
TBD
Update the composer.json version requirement to ^2.3.3.
Update composer.json and test that everything works.
None.
None.
None.
Active
2.0
Code
The 2.2.1 is only a minimum requirement, it works perfectly fine with 2.3.3 version.
We could uplift that minimum version requirement on the 2.1.x development branch.
Automatically closed - issue fixed for 2 weeks with no activity.