Problem/Motivation

Version 3.13.6 is a security release.

https://github.com/PHPCSStandards/PHP_CodeSniffer/security/advisories/GH...

Steps to reproduce

checkout main branch, run composer install and composer audit.

Proposed resolution

Update to 3.13.6.

Remaining tasks

User interface changes

-

Introduced terminology

-

API changes

-

Data model changes

-

Release notes snippet

-

Issue fork drupal-3615396

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

Comments

tobiasb created an issue. See original summary.

tobiasb’s picture

Assigned: tobiasb » Unassigned
Status: Active » Needs review

There are more sec releases for other dependencies.

I believe it is better to just update all with one issue.

smustgrave’s picture

Status: Needs review » Reviewed & tested by the community

Already got a bunch of other things being reviewed. Sure once one of those land these will need rebasing but fine with the update.

  • catch committed 19d6fd24 on 11.3.x
    task: #3615396 Update PHP_CodeSniffer to 3.13.6
    
    By: tobiasb
    

  • catch committed 39134c65 on 11.4.x
    task: #3615396 Update PHP_CodeSniffer to 3.13.6
    
    By: tobiasb
    

  • catch committed 1f7a9e5d on 11.x
    task: #3615396 Update PHP_CodeSniffer to 3.13.6
    
    By: tobiasb
    

  • catch committed abf844ea on main
    task: #3615396 Update PHP_CodeSniffer to 3.13.6
    
    By: tobiasb
    

  • catch committed f0b8c746 on 10.6.x
    task: #3615396 Update PHP_CodeSniffer to 3.13.6
    
    By: tobiasb
    
catch’s picture

Version: main » 10.6.x-dev
Status: Reviewed & tested by the community » Fixed

Committed/pushed to main/11.x/11.4.x/11.3.x and 10.6.x, thanks!

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.