-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 14 May 2025 08:37:55 +0200 Source: composer Architecture: source Version: 2.8.9-1 Distribution: experimental Urgency: medium Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org> Changed-By: David Prévot <taffit@debian.org> Changes: composer (2.8.9-1) experimental; urgency=medium . * Upload to experimental during the freeze . [ Jordi Boggiano ] * Do not output script being run when running via composer <script-name> (#12383) * Check the whole archive if a file looks like a zipbomb (#12409) * Fix creation of empty archives (#12408) * Update changelog * Release 2.8.9 . [ Christian Flothmann ] * ensure that version suffixes are case-insensitive (#12376) . [ HypeMC ] * Don't run bump after update with `--lock` (#12371) Checksums-Sha1: 403e3fe291d5ea19a2f327d8863af0eac4954ab2 2222 composer_2.8.9-1.dsc 14c67ea9da1b02ebbc0a84c4ad9aad59895c49f6 682744 composer_2.8.9.orig.tar.xz dd3b548721d94a37df1b688c006c096e138d78fa 47936 composer_2.8.9-1.debian.tar.xz 06b28cbeec07da66f22f622cec7013109094c678 9546 composer_2.8.9-1_amd64.buildinfo Checksums-Sha256: 82bcc77b54bc5d33e61637394d4f328d212fdad76ae14002439b93ba7830abb3 2222 composer_2.8.9-1.dsc c85dc25950dcada57c0a8e6c34ebbe7eb40762f4df18e02a4e5bb66a271e1db4 682744 composer_2.8.9.orig.tar.xz e4b62f7999728c78707727d624ec4849e5d1af812fc63f1a5ae590b9647b2368 47936 composer_2.8.9-1.debian.tar.xz 5da62dc233acb4207b0c72690130af72ec58daf1a5268b83d68546e3342f0910 9546 composer_2.8.9-1_amd64.buildinfo Files: a1141dcae0a4e72fab96d6c9d7bd6148 2222 php optional composer_2.8.9-1.dsc 7e9deea1720a24882db43ce474e45e30 682744 php optional composer_2.8.9.orig.tar.xz 14fdb82d9e90a5624f4ef1d88868958d 47936 php optional composer_2.8.9-1.debian.tar.xz 6f26f8f266577f74cbd4c1f343dd0155 9546 php optional composer_2.8.9-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmgkPs8SHHRhZmZpdEBk ZWJpYW4ub3JnAAoJEAWMHPlE9r08KQgIAId3ql3tP5EXM9tNX1Xr9xKd14DDrrFg dIYuNqir+US9edHG1Wz9w0kJaAw1P7nqAlN/kRfYYH7jvjl8T//tMeEohEVbQeHY SXWMaFaqCRrHIQjndnYd/JyOwWX3rHc7Wc61R4QqE3YTkssJ/leXFIC67WArAiGC Ie2Ttp7IPq7ghwnSCS09qPcMPSppic9fQo/PD40zAqNpgiXBKgBs07TDaqW8pIme Q6SdFv199WsF8R5s3WS5KscFtIPFD1y7VNyKiZ94N7dslQ9waUd0ih3Xb7sE21bu LtF18YWHo1345dHbJRXkh10RGBwqLh9EmxvMOvFSWhz/EiE4hJS1wB4= =Y9gl -----END PGP SIGNATURE-----