Composer 2.11's Cooldown in a Laravel App: Safer Updates, Except When the Update Is the Security Fix

<blockquote> <p><strong>Originally published at <a href="https://hafiz.dev/blog/composer-2-11-cooldown-laravel" rel="noopener noreferrer">hafiz.dev</a></strong></p> </blockquote> <p>On 31 October I turned on Composer 2.11's new cooldown in a Laravel 13 project, set it to seven days, and ran <code>composer update</code>. It failed. Three days earlier Symfony had shipped a fix for CVE-[phone] in

Читать первоисточник →