-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 01 Jun 2026 10:33:28 +0200
Source: composer
Architecture: source
Version: 2.10.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
composer (2.10.0-1) unstable; urgency=medium
.
* Upload release to unstable
.
[ Jordi Boggiano ]
* Sanitize urls everywhere in output (#12882)
* Disable source-fallback by default, mark it deprecated and remove
env/flags to override
* Fix issues checking URLs with uppercase URL schemes
* Relax token validation on input, and hide more things on output (#12886)
* Update changelog
* Release 2.10.0
.
[ PrinsFrank ]
* Return non-zero exit code for "composer audit" when audit couldn't be
performed due to missing required packages (#12880)
Checksums-Sha1:
8ef250ad9c54977df76eee49a5c1293926a6432a 2306 composer_2.10.0-1.dsc
e03812e1faa5e901d542252a1d1d400c5d59ac33 766664 composer_2.10.0.orig.tar.xz
82ce12ec4328856e3fb062e6ccdc23256619ef61 56552 composer_2.10.0-1.debian.tar.xz
37330d442a367359d1658ae5ae0f91fe0f986117 9606 composer_2.10.0-1_amd64.buildinfo
Checksums-Sha256:
79362bc67e716d33b5de65ad559777acdafd8867b7c08cf90ba4feea1cb9db76 2306 composer_2.10.0-1.dsc
2043e42a153a11d8ff66ee06522cf68797996e4f511410251550782d6c6796b3 766664 composer_2.10.0.orig.tar.xz
24e89cc25e61bbe6757be247b1f481f0649ccf733d6ff37dcf5d2045e81c6415 56552 composer_2.10.0-1.debian.tar.xz
f3c9c9d284fb5c7fdcc0e0200e13ff7326e0261d364d1eaf9d102d75bbfb05a7 9606 composer_2.10.0-1_amd64.buildinfo
Files:
013e890730abdc16b11ccff331a4441c 2306 php optional composer_2.10.0-1.dsc
a73fbc8c0514235a5f70761e7ce535a2 766664 php optional composer_2.10.0.orig.tar.xz
560948368e9a7513a0760e8c942b34fb 56552 php optional composer_2.10.0-1.debian.tar.xz
76325f4ee19e5a1fd712a01df1c10766 9606 php optional composer_2.10.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmodRx4SHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08ma0IAIl7xluZuN0ZOdeYayew+huP9Yal5fCS
CU/QtKFCpSYJ7vJT7v9ZPG7VRmyO3hwl1av0EF3BadH7SPoQ3qGXAfgMhGpsdMIx
XBEimwrl9c1c3jnSDh+OYFhn+FQcK5BUjBmtF+c8K3kyWAqz4ylt7xzOBJMdIHDr
xFJgufv/wJQglBTaCJlla3bKfyTjjs4JDEJIysFVGwMXJ///YaXxp9n1Ggjg9qx9
R6Pg8mclpKKjTfa+CbJkbANY8gl5Mwzy0CbaxtSbt7+lMsNuS6usayBHxSCSgvNa
vx70+1cJHDX05ikGB0iTZ15T261zS4LyaUegGPNzO/dOKQdrza+D68A=
=e48V
-----END PGP SIGNATURE-----