Skip to content

Update phpstan/phpstan requirement from 1.5.4 to 1.7.12#76

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/composer/phpstan/phpstan-1.7.12
Closed

Update phpstan/phpstan requirement from 1.5.4 to 1.7.12#76
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/composer/phpstan/phpstan-1.7.12

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Jun 10, 2022

Updates the requirements on phpstan/phpstan to permit the latest version.

Release notes

Sourced from phpstan/phpstan's releases.

1.7.12

Improvements 🔧

Bleeding edge 🔪

If you want to see the shape of things to come and adopt bleeding edge features early, you can include this config file in your project's phpstan.neon:

includes:
	- vendor/phpstan/phpstan/conf/bleedingEdge.neon

Of course, there are no backwards compatibility guarantees when you include this file. The behaviour and reported errors can change in minor versions with this file included. Learn more

Bugfixes 🐛

Commits
  • 32f1077 PHPStan 1.7.12
  • cff589a Update Nextras ORM baseline
  • b580538 Update Rector baseline
  • a8c66d3 Update Larastan baseline
  • ff6e0fc Updated PHPStan to commit 98a3b07916bfba5ac0cbf79a1e7ea6417b8a656b
  • 47d0962 Updated PHPStan to commit ef8c7c37f2ab3def07860a4cdc20c7ed56758a8c
  • 5244583 Update variadic callable phpdoc example
  • f2ecfa5 Updated PHPStan to commit 0b5253d36331567b581eac3a4a3b68f9b47dd30c
  • d063973 Updated PHPStan to commit db3863aec75f2cb3d7582aade86e3a9b054a664e
  • 6433545 Updated PHPStan to commit 778308d6d5433221064a6f2c50998069eae87274
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [phpstan/phpstan](https://github.com/phpstan/phpstan) to permit the latest version.
- [Release notes](https://github.com/phpstan/phpstan/releases)
- [Changelog](https://github.com/phpstan/phpstan/blob/1.7.x/CHANGELOG.md)
- [Commits](phpstan/phpstan@1.5.4...1.7.12)

---
updated-dependencies:
- dependency-name: phpstan/phpstan
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 10, 2022
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Jun 15, 2022

Superseded by #77.

@dependabot dependabot bot closed this Jun 15, 2022
@dependabot dependabot bot deleted the dependabot/composer/phpstan/phpstan-1.7.12 branch June 15, 2022 10:38
lchrusciel pushed a commit that referenced this pull request Jul 29, 2024
This PR was merged into the 1.12 branch.

Discussion
----------

| Q               | A
|-----------------|-----
| Branch?         | 1.12
| Bug fix?        | yes
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets | n/a
| License         | MIT

Fixes potential xss in admin panel (Taxons and Products)

Commits
-------

d4812f9 Fix potential xss in admin panel
29d18a3 Use function from UIBundle
c11c424 Fix product-auto-complete
a17de6d Test adding new taxon
d25edf3 Test adding new simple product
63c3cf7 Test adding similar products
679e793 Fixes after CR
lchrusciel pushed a commit that referenced this pull request Jul 29, 2024
…t, Address Book and Admin Panel (GSadee)

This PR was merged into the 1.12 branch.

Discussion
----------

| Q               | A
|-----------------|-----
| Branch?         | 1.12
| Bug fix?        | yes
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets | 
| License         | MIT

This PR aims to solve 2 issues:

- Potential Cross Site Scripting (XSS) via the "Province" field in the Checkout and Address Book (https://github.com/r2tunes/Reports/blob/main/Sylius.md)
- Potential Cross Site Scripting (XSS) via the "Name" field (Taxons, Products, Options, Variants) in the Admin Panel


Commits
-------
  Fix potential xss in admin panel
  Use function from UIBundle
  Fix product-auto-complete
  Add js sanitizeInput function
  Add sanitizer function to UIBundle
  Use function from UIBundle
  [AddressBook] Add scenario for preventing from a potential XSS attack
  [Checkout] Add scenario for preventing from a potential XSS attack
  [Behat] Minor scenarios improvements after code review
  Test adding new taxon
  Test adding new simple product
  Test adding similar products
  Fixes after CR
  bug #69 Fix potential xss in AdressBook and Checkout (mpysiak, GSadee)
  bug #76 Fix potential xss in admin panel (mpysiak)
  [Behat] Minor scenarios improvements
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants