Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(security): allow paragraphs_table to be upgraded #137

Merged
merged 1 commit into from
Oct 22, 2024

Conversation

millnut
Copy link
Member

@millnut millnut commented Oct 18, 2024

What does this change?

Fixes #134, drupal/paragraphs_table has two versions:

  • 1.23 which supports Drupal ^8.8 || ^9 || ^10.1 and locks to 10.1 in composer
    • The previous release 1.21 allowed Drupal ^8.8 || ^9 || ^10
    • The release 1.22 introduced locking to 10.1 in composer
  • 2.0 which supports Drupal ^10.2 || ^11

This fixes a security issue if you are currently on Drupal 10.3 and are using <1.23 as there is no way to get the security fix, so this change allows using either 1.23 or 2.0 of paragraphs_table depending on the Drupal core used.

How to test

composer require --with-all-dependencies localgovdrupal/localgov_elections:"dev-fix/1.x/fix-paragraphs-table-security-update as 1.0.1"

@millnut millnut marked this pull request as ready for review October 18, 2024 18:57
@millnut millnut changed the title fix: allow paragraphs_table to be upgraded fix(security): allow paragraphs_table to be upgraded Oct 18, 2024
@finnlewis finnlewis merged commit 06e8478 into 1.x Oct 22, 2024
4 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

composer.json restrictions prevents updating drupal/paragraphs_table
2 participants