Yelto patch weird chars - #4
Open
yelto wants to merge 682 commits into
Open
Conversation
…tion stubs not receiving ucFirst; add option to force uppercasing of acronyms
…_config fix search config loading
…cate new SERIAL numbers, avoid resetting identifier on each merge. Eg. Rather than incrementing the identifier on each merge (E.1, E.2, E.3) maintain the original identifier (E.1)
…m:collectiveaccess/providence into dev/acl-access-inheritance-simplification
…r next/previous navigation
follow redirects for aat service
firebase/JWT now checks the length of the key and throws an error is it is less than 32 characters long. Make note of this for users wishing to use the graphQL API Due to: googleapis/php-jwt#605
Bumping version to 15 to solve security vulnerabilities reported in composer: ``` Found 3 security vulnerability advisories affecting 1 package: +-------------------+----------------------------------------------------------------------------------+ | Package | webonyx/graphql-php | | CVE | NO CVE | | Title | webonyx/graphql-php has unbounded recursion in parser that causes stack overflow | | | on crafted nested input | | URL | GHSA-r7cg-qjjm-xhqq | | Affected versions | <=15.32.2 | | Reported at | 2026-05-05T17:24:57+00:00 | +-------------------+----------------------------------------------------------------------------------+ +-------------------+----------------------------------------------------------------------------------+ | Package | webonyx/graphql-php | | CVE | NO CVE | | Title | webonyx/graphql-php has quadratic validation cost in OverlappingFieldsCanBeMerge | | | d via inline fragments | | URL | GHSA-fc86-6rv6-2jpm | | Affected versions | <15.32.2 | | Reported at | 2026-05-04T22:22:09+00:00 | +-------------------+----------------------------------------------------------------------------------+ +-------------------+----------------------------------------------------------------------------------+ | Package | webonyx/graphql-php | | CVE | CVE-2026-40476 | | Title | graphql-php is affected by a Denial of Service via quadratic complexity in Overl | | | appingFieldsCanBeMerged validation | | URL | GHSA-68jq-c3rv-pcrr | | Affected versions | <=15.31.4 | | Reported at | 2026-04-14T01:05:05+00:00 | +-------------------+----------------------------------------------------------------------------------+ ```
Update JWT token key length requirement in config
Bump version webonyx/graphql-php
pull request collectiveaccess#1735 was lost during a merge of master and dev/2.0.
reimplementing pull request collectiveaccess#1735
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
7 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Recent commit 96d5b9f popped these chars up in a few comments, likely as a side-effect. Also relevant (as far as this goes...) for other active branches.