Skip to content

build(deps): bump phpxmlrpc/phpxmlrpc from 4.9.0 to 4.9.2#1474

Merged
github-actions[bot] merged 1 commit intomasterfrom
dependabot/composer/phpxmlrpc/phpxmlrpc-4.9.2
Dec 19, 2022
Merged

build(deps): bump phpxmlrpc/phpxmlrpc from 4.9.0 to 4.9.2#1474
github-actions[bot] merged 1 commit intomasterfrom
dependabot/composer/phpxmlrpc/phpxmlrpc-4.9.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Dec 19, 2022

Bumps phpxmlrpc/phpxmlrpc from 4.9.0 to 4.9.2.

Release notes

Sourced from phpxmlrpc/phpxmlrpc's releases.

4.9.2

  • security fix: removed the possibility of an XSS attack in the debugger. Since the debugger is not designed to be exposed to end users but only to the developers using this library, and in the default configuration it is not exposed to requests from the web, the severity of this issue can be considered low.

  • improved: the debugger now uses jsxmlrpc lib version 0.6. It loads it from a cdn rather than locally. It also can make use of a 2nd constant to help telling it where the visual-editor form the jsxmlrpc lib is located, in case its path on disk relative to the debugger and its url relative to the web root do not match.

4.9.1

  • fixed: php warnings on php 8.2. This includes preferring usage of mbstring for converting between Latin1 and UTF8

  • improved: CI tests now also run on php 8.2

Commits
  • 805d727 docs
  • 28458b1 update docs; bump version nr
  • 25666d6 give greater flexibility in locating the jsxmlrpc visualeditor
  • 132ea51 debugger: load jsxmlrpc from cdn; drop xhtml for html5; move http/https switch
  • d2f7414 improve phpdoc comment in code generated by wrapper
  • 055fc36 fix xss in debugger; move to pure-js version of visualeditor
  • 76b05c7 small improvement in doc gen tollchain
  • 9c851ab go .yaml
  • c7ee2a7 NEWS
  • 78a1961 prefer not to use utf8_encode and utf8_decode
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [phpxmlrpc/phpxmlrpc](https://github.com/gggeek/phpxmlrpc) from 4.9.0 to 4.9.2.
- [Release notes](https://github.com/gggeek/phpxmlrpc/releases)
- [Changelog](https://github.com/gggeek/phpxmlrpc/blob/master/doc/ChangeLog)
- [Commits](gggeek/phpxmlrpc@4.9.0...4.9.2)

---
updated-dependencies:
- dependency-name: phpxmlrpc/phpxmlrpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Dec 19, 2022
@github-actions github-actions Bot merged commit 4bda870 into master Dec 19, 2022
@github-actions github-actions Bot deleted the dependabot/composer/phpxmlrpc/phpxmlrpc-4.9.2 branch December 19, 2022 11:24
@glensc glensc added this to the 3.10.12 milestone Dec 19, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Development

Successfully merging this pull request may close these issues.

1 participant