public-mirrors
/
composer
mirror of https://github.com/composer/composer
1
0
Fork 0
Code

Update changelog

pull/10729/head
Jordi Boggiano 2022-04-13 16:21:50 +02:00
parent 615530f0a1
commit 65f4dde32a
No known key found for this signature in database
GPG Key ID: 7BBD42C429EC80BC
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
CHANGELOG.md
View File

@ -1,3 +1,12 @@
### [2.3.5] 2022-04-13
* Security: Fixed command injection vulnerability in HgDriver/GitDriver (GHSA-x7cr-6qr6-2hh6 / CVE-2022-24828)
* Added warning when downloading a file with `verify_peer[_name]` disabled (#10722)
* Fixed curl downloader not retrying when a DNS resolution failure occurs (#10716)
* Fixed composer.lock file still being used/read when the `lock` config option is disabled (#10726)
* Fixed `validate` command checking the lock file even if the `lock` option is disabled (#10723)
* Fixed detection of default branch name when it changed since a git repo was mirrored in cache dir (#10701)
### [2.3.4] 2022-04-07
* Fixed the generated autoload.php to support running on PHP 5.6+ (down from 7.0+) and warn clearly on older PHP versions (#10714)
@ -1491,6 +1500,7 @@
* Initial release
[2.3.5]: https://github.com/composer/composer/compare/2.3.4...2.3.5
[2.3.4]: https://github.com/composer/composer/compare/2.3.3...2.3.4
[2.3.3]: https://github.com/composer/composer/compare/2.3.2...2.3.3
[2.3.2]: https://github.com/composer/composer/compare/2.3.1...2.3.2