From ea6a597c23fcfd6e3f71db25bb0fc3fd63412753 Mon Sep 17 00:00:00 2001 From: Vinayak Iyer Date: Fri, 25 Sep 2026 16:24:06 +0530 Subject: [PATCH 1/2] EE-282 Let the Symfony 3 and 4 jobs install with current Composer Co-Authored-By: Claude Opus 5.5 (1M context) --- .github/workflows/ci.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 31a3cd6..86c949d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -54,6 +54,15 @@ jobs: php-version: ${{ matrix.php }} tools: flex + # Composer refuses packages with security advisories by default since 2.9. The last Symfony 3.4 and 4.4 releases + # of several components the tests install have them, and so do the Symfony 6.0 releases PHP 8.0 installs and the + # PHPUnit 6.5 release PHP 7.2 installs. This only affects the test install here. The setting exists from Composer + # 2.10, which setup-php installs for PHP 7.2 and later; PHP 7.0 and 7.1 get Composer 2.2, which does not block + # advisories and does not know the setting. + - name: Allow packages with security advisories + if: matrix.php != '7.0' && matrix.php != '7.1' + run: composer config policy.advisories.block false + - name: Install dependencies uses: ramsey/composer-install@v2 env: From 102bde8b1b5cc35c5f72d07b87f1742011978e60 Mon Sep 17 00:00:00 2001 From: Vinayak Iyer Date: Fri, 25 Sep 2026 16:33:48 +0530 Subject: [PATCH 2/2] EE-282 Keep the advisory step's reasoning in the PR description Co-Authored-By: Claude Opus 5.5 (1M context) --- .github/workflows/ci.yml | 5 ----- 1 file changed, 5 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 86c949d..a913ce0 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -54,11 +54,6 @@ jobs: php-version: ${{ matrix.php }} tools: flex - # Composer refuses packages with security advisories by default since 2.9. The last Symfony 3.4 and 4.4 releases - # of several components the tests install have them, and so do the Symfony 6.0 releases PHP 8.0 installs and the - # PHPUnit 6.5 release PHP 7.2 installs. This only affects the test install here. The setting exists from Composer - # 2.10, which setup-php installs for PHP 7.2 and later; PHP 7.0 and 7.1 get Composer 2.2, which does not block - # advisories and does not know the setting. - name: Allow packages with security advisories if: matrix.php != '7.0' && matrix.php != '7.1' run: composer config policy.advisories.block false