[pkg-php-pear] composer_2.9.3-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 30 Dec 2025 16:00:43 +0100
Source: composer
Architecture: source
Version: 2.9.3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear at lists.alioth.debian.org>
Changed-By: David Prévot <taffit at debian.org>
Changes:
 composer (2.9.3-1) unstable; urgency=medium
 .
   * Security: Fixed ANSI sequence injection [CVE-2025-67746]
 .
   [ Jordi Boggiano ]
   * Remove requirement that a full Composer instance be passed to
     EventDispatcher (#12629)
   * Fix update --lock / update mirrors not working when locked packages
     contain vulnerabilities, fixes #12634 (#12645)
   * Retry on curl timeouts (28) (#12662)
   * Use git rev-list instead of log to avoid issues with
     log.showSignature being enabled (#12666)
   * Fix regression in showing reasons for ignoring advisories (#12668)
   * Fix no-security-blocking / COMPOSER_NO_SECURITY_BLOCKING not working
     on updates done via the install command
   * Validate php-ext schema in ValidatingArrayLoader (#12694)
   * Fix support for securetransport + libressl
   * Release 2.9.3
 .
   [ ಠ_ಠ ]
   * fix crash bumping version with composer update and disabled lockfile
 .
   [ Ilia Urvachev ]
   * fix(AuthHelper): misplaced `username` and `password` (#12667)
 .
   [ David Prévot ]
   * Update Standards-Version to 4.7.3
   * Convert d/watch to version 5
Checksums-Sha1:
 ae7765ba1e91445474270d474f660248ee068d8b 2299 composer_2.9.3-1.dsc
 15470d9d3fdf83fb07d96c18190c8ff7fce1757d 715496 composer_2.9.3.orig.tar.xz
 4cf52ce54496694d967ce1df6a47f8c1ab3176ca 52056 composer_2.9.3-1.debian.tar.xz
 2273cb7de2c18871785791ad3539c2be09b45ccc 9657 composer_2.9.3-1_amd64.buildinfo
Checksums-Sha256:
 b647be13dfd719bdc369b96a2a592eff2fe9c570aaae86ef486c627b8804b509 2299 composer_2.9.3-1.dsc
 3c416bd929754278832e814c4bc0ef1de9f95cf1484c407a9388c0a5a448cb5f 715496 composer_2.9.3.orig.tar.xz
 0bc5bffe8f741920d8ca2c552b36c9f44bab2c3b513817f50bbb6a6f28fea9ac 52056 composer_2.9.3-1.debian.tar.xz
 054842804e696c63992fb8525ce285b7b0225f0ab59dc0a9373bc0af40ee6e1f 9657 composer_2.9.3-1_amd64.buildinfo
Files:
 6d4ef047ab19356cd1b2f5d2c7aed97a 2299 php optional composer_2.9.3-1.dsc
 5d8d00be2b512325890fd99e594ed1df 715496 php optional composer_2.9.3.orig.tar.xz
 24f58adc11fbbc32d8cc66001aaac19b 52056 php optional composer_2.9.3-1.debian.tar.xz
 a87bca6a32b710aa8c7e7e0ee6a0f6b2 9657 php optional composer_2.9.3-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmlT7uASHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08s6UH/iC5B0sQEZDulM+ckodHTpXifHt/jEui
1sx3yKlKkWp7WksR+oIkdFijoGhr3x4enwAIK5cS5AVjHREnE8Fwrtdg18eG4O0B
quDFpPV7KwiO2f/AP90lAEVYBl4w4XofprpHKgl2MZoOk/fS97MWckfVmSZWEQ0J
e2ygXdGqmcleRRZOY8UZcMJZ9MAT5vKoTa2nicdyq9UVxtFySQITYwixY60dVxMj
hUQXBYUSIOK1zG+BeR4sQIynlNAVx0llZ84r6e3FkDXA7zRK4zeX43s1MrR8VGGh
lF66ebtSTBy4lLtZgXLC4jf8MT/TvVU2sZAiC04uff8SSwso3r4mhQ8=
=sn41
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-php-pear/attachments/20251230/73a4c7f3/attachment.sig>