Joomla! Issue Tracker - CMS

Download
Launch
Feeling Lucky

[#46565] - [6.1] Update composer dependencies

RTC Composer Dependency Changed PR-6.1-dev Pending

User tests: Successful: Unsuccessful:

avatar HLeithner
HLeithner
12 Dec 2025

This PR updates composer dependencies within minor versions.

I did a code review for suspicious code on the following 3rd party extensions

  • altcha-org/altcha (v1.2.0 => v1.3.0)
  • dragonmantank/cron-expression (v3.4.0 => v3.6.0)
  • lcobucci/clock (3.3.1 => 3.5.0)
  • phpseclib/phpseclib (3.0.46 => 3.0.47)
  • spomky-labs/cbor-php (3.1.1 => 3.2.2)
  • spomky-labs/pki-framework (1.3.0 => 1.4.0)
  • theseer/tokenizer (1.2.3 => 1.3.1)
  • web-token/jwt-library (3.4.8 => 3.4.9)

Other dependencies like symfony has not been checked because I expect enough other people reviewing the code bases or are trustworthy for other reasons.

I also added the Webauthn library to the audit ignore list, we are well aware of this outdated version, but I our Webauthn plugin needs to be updated to use a newer version, which has not been done yet.

avatar HLeithner HLeithner - open - 12 Dec 2025
avatar HLeithner HLeithner - change - 12 Dec 2025
Status New ⇒ Pending
avatar joomla-cms-bot joomla-cms-bot - change - 12 Dec 2025
Category ⇒ External Library Composer Change
avatar brianteeman
brianteeman - comment - 12 Dec 2025

Thanks

avatar brianteeman brianteeman - test_item - 12 Dec 2025 - Tested successfully
avatar brianteeman
brianteeman - comment - 12 Dec 2025

I have tested this item ✅ successfully on ee28b4d

This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/46565.

avatar tecpromotion tecpromotion - test_item - 12 Dec 2025 - Tested successfully
avatar tecpromotion
tecpromotion - comment - 12 Dec 2025

I have tested this item ✅ successfully on ee28b4d

This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/46565.

avatar tecpromotion tecpromotion - change - 12 Dec 2025
Status Pending ⇒ Ready to Commit
Labels Added: Composer Dependency Changed PR-6.1-dev
avatar tecpromotion
tecpromotion - comment - 12 Dec 2025

RTC

This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/46565.

avatar tecpromotion tecpromotion - change - 12 Dec 2025
Status Ready to Commit ⇒ Fixed in Code Base
Closed_Date 0000-00-00 00:00:00 ⇒ 2025-12-12 16:49:40
Closed_By ⇒ tecpromotion
Labels Added: RTC
avatar tecpromotion tecpromotion - close - 12 Dec 2025
avatar tecpromotion tecpromotion - merge - 12 Dec 2025
avatar tecpromotion
tecpromotion - comment - 12 Dec 2025

Thanks @brianteeman for testing

Add a Comment

Login with GitHub to post a comment