Problem/Motivation

The scheduled CI pipeline fails at the composer stage because .gitlab-ci.yml hardcodes DRUPAL_CORE: "10.3.6". Drupal 10.3.6 has been flagged by Packagist security advisories, and Composer's block-insecure audit feature refuses to install it.

Proposed resolution

Remove the composer job override that pins DRUPAL_CORE to 10.3.6. The CI pipeline will now use the default core version provided by the GitLab CI templates, which tracks the latest stable release. This prevents future breakage when specific versions receive security advisories.

User interface changes

None

API changes

None

Data model changes

None

Issue fork entity_change_default_language-3580840

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

facine created an issue. See original summary.

facine opened merge request !14

  • facine committed a63ea69c on 1.x 
    Resolve #3580840 "Ci scheduled pipeline"
facine’s picture

facine commented
Status: Active » Fixed

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.