Skip to content

Update composer/composer from 2.10.2 to 2.10.3 - #751

Merged
eiriksm merged 1 commit into
mainfrom
composercomposer21022103
Aug 27, 2026
Merged

Update composer/composer from 2.10.2 to 2.10.3#751
eiriksm merged 1 commit into
mainfrom
composercomposer21022103

Conversation

@violinist-bot

Copy link
Copy Markdown
Member

If you have a high test coverage index, and your tests for this pull request are passing, it should be both safe and recommended to merge this update.

Updated packages

Some times an update also needs new or updated dependencies to be installed. Even if this branch is for updating one dependency, it might contain other installs or updates. All of the updates in this branch can be found here:

  • composer/ca-bundle: 1.5.14 (updated from 1.5.12)
  • composer/composer: 2.10.3 (updated from 2.10.2)
  • justinrainbow/json-schema: 6.11.0 (updated from 6.10.0)
  • seld/phar-utils: 1.2.2 (updated from 1.2.1)

Release notes

Here are the release notes for all versions released between your current running version, and the version this PR updates the package to.

List of release notes

Changed files

Here is a list of changed files between the version you use, and the version this pull request updates to:

List of changed files
  .github/workflows/autoloader.yml
  .github/workflows/close-stale-support.yml
  .github/workflows/conductor.yaml
  .github/workflows/continuous-integration.yml
  .github/workflows/lint.yml
  .github/workflows/php32bit.yml
  .github/workflows/phpstan.yml
  .github/workflows/release.yml
  .github/workflows/zizmor.yml
  CHANGELOG.md
  README.md
  composer.json
  composer.lock
  doc/04-schema.md
  doc/06-config.md
  doc/articles/plugins.md
  phpstan/baseline.neon
  src/Composer/Advisory/Auditor.php
  src/Composer/Autoload/AutoloadGenerator.php
  src/Composer/Composer.php
  src/Composer/DependencyResolver/LockTransaction.php
  src/Composer/DependencyResolver/Pool.php
  src/Composer/DependencyResolver/PoolBuilder.php
  src/Composer/DependencyResolver/PoolOptimizer.php
  src/Composer/DependencyResolver/Problem.php
  src/Composer/DependencyResolver/Request.php
  src/Composer/DependencyResolver/Solver.php
  src/Composer/DependencyResolver/Transaction.php
  src/Composer/Downloader/FileDownloader.php
  src/Composer/EventDispatcher/EventDispatcher.php
  src/Composer/FilterList/FilterListApiClient.php
  src/Composer/Installer/BinaryInstaller.php
  src/Composer/Package/Loader/ValidatingArrayLoader.php
  src/Composer/Repository/ArrayRepository.php
  src/Composer/Repository/ComposerRepository.php
  src/Composer/Repository/PlatformRepository.php
  src/Composer/Repository/Vcs/ForgejoDriver.php
  src/Composer/Util/Filesystem.php
  src/Composer/Util/Git.php
  src/Composer/Util/Http/CurlDownloader.php
  src/Composer/Util/Perforce.php
  src/Composer/Util/ProcessExecutor.php
  src/Composer/Util/RemoteFilesystem.php
  src/Composer/Util/Url.php
  tests/Composer/Test/Advisory/AuditorTest.php
  tests/Composer/Test/Command/DumpAutoloadCommandTest.php
  tests/Composer/Test/DependencyResolver/PoolOptimizerTest.php
  tests/Composer/Test/DependencyResolver/ProblemTest.php
  tests/Composer/Test/Downloader/FileDownloaderTest.php
  tests/Composer/Test/FilterList/FilterListApiClientTest.php
  tests/Composer/Test/Fixtures/installer/install-policy-malware-block-direct-dependency.test
  tests/Composer/Test/Fixtures/installer/install-policy-malware-block-scope-install.test
  tests/Composer/Test/Fixtures/installer/install-policy-malware-block-transitive-dependency.test
  tests/Composer/Test/Fixtures/installer/partial-update-policy-malware-block-locked-package.test
  tests/Composer/Test/Fixtures/installer/update-mirrors-policy-malware-block-locked-package.test
  tests/Composer/Test/Fixtures/installer/update-mirrors-policy-malware-block-scope-install-locked-package.test
  tests/Composer/Test/Fixtures/installer/update-policy-malware-entry-ignore-source-not-matching.test
  tests/Composer/Test/Fixtures/installer/update-policy-malware-entry-matching-direct-dependency.test
  tests/Composer/Test/Installer/BinaryInstallerTest.php
  tests/Composer/Test/Package/Loader/ValidatingArrayLoaderTest.php
  tests/Composer/Test/Repository/ComposerRepositoryTest.php
  tests/Composer/Test/Repository/PlatformRepositoryTest.php
  tests/Composer/Test/Util/GitTest.php
  tests/Composer/Test/Util/PerforceTest.php
  tests/Composer/Test/Util/UrlTest.php

Changelog

Here is a list of changes between the version you use, and the version this pull request updates to:

  • f0de0bf90 Release 2.10.3
  • f2477583b Update changelog
  • 0aac50528 Merge commit from fork
  • 53b8bb4c2 Merge commit from fork
  • 24e396b52 Make it possible to pass transport options to FilterListApiClient (#13040)
  • f383d2318 Do not use a conflicted content-hash as the autoloader suffix (#13048)
  • ada00550c Mask URL credentials anywhere in a string, not just at its start (#13044)
  • cd19785d7 Prevent curl SSL version parsing across lines (#13046)
  • eba7baa59 Fix Url::getOriginprefix-matching a host againstgitlab-domains (#12988)
  • 5e9f655ba Include the failed URL in max-file-size and content-length errors (#13041)
  • f600f9a1c Bump actions/attest from 4.2.1 to 4.2.2 (#13033)
  • ab70897ec Bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 (#13032)
  • 6987fe5a4 Replace deprecated spl_object_hash with spl_object_id, fixes #13027 (#13028)
  • c435d285c Bump actions/attest from 4.2.0 to 4.2.1 (#13020)
  • 7f3245b35 Bump actions/stale from 10.4.0 to 11.0.0 (#13019)
  • 6ffc11774 Update composer-plugin-api to 2.9.0 in documentation (#13016)
  • b73133523 Bump actions/checkout from 7.0.0 to 7.0.1 (#13008)
  • 70d07574b Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 (#13009)
  • a271c92ba feat: #13002 Improve logging of failed download URLs by adding filename to message (#13006)
  • bd9d7f343 Add sponsors section to README (#13004)
  • 1fcf79113 Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 (#12996)
  • 68dcf526b Bump actions/attest from 4.1.1 to 4.2.0 (#12995)
  • bb38c69ca Policies: show which source blocked a package version as part of the filter list pool filter (#12993)
  • 138899a08 Bump actions/stale from 10.3.0 to 10.4.0 (#12985)
  • 2ce09be45 Docs: add missing request/response example for custom policies (#12983)
  • 1f54358cf Avoid a race condition in ensureDirectoryExists (#12977)
  • f1d3ad1ae Bump actions/attest from 4.1.0 to 4.1.1 (#12979)
  • 8fbad1355 Clarify the limitations of pinning an explicit commit reference (#12965)
  • 8624fd506 Bump actions/cache from 5.0.5 to 6.1.0 (#12970)
  • cfe63554d Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 (#12969)
  • ada255622 Fix forgejo driver to handle empty repos better (#12968)
  • c6c9144f1 Add missing exts to the requirements
  • 118acf3cb Fix/ignore MB_ONIGURUMA_VERSION deprecation, fixes #12967
  • 15352a593 Reverting release version changes

Working with this branch

If you find you need to update the codebase to be able to merge this branch (for example update some tests or rebuild some assets), please note that violinist will force push to this branch to keep it up to date. This means you should not work on this branch directly, since you might lose your work. Read more about branches created by violinist.io here.


This is an automated pull request from Violinist: Continuously and automatically monitor and update your composer dependencies. Have ideas on how to improve this message? All violinist messages are open-source, and can be improved here.

------
violinist_metadata:
    source: violinist
    type: package
update_data:
    package: composer/composer
    from: 2.10.2
    to: 2.10.3
@eiriksm
eiriksm merged commit 9ac9963 into main Aug 27, 2026
7 checks passed
@eiriksm
eiriksm deleted the composercomposer21022103 branch August 27, 2026 17:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants