-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 29 Oct 2026 15:08:59 +0100
Source: composer
Architecture: source
Version: 2.11.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Changes:
composer (2.11.0-1) unstable; urgency=medium
.
* Upload release to unstable
.
[ Jordi Boggiano ]
* Fix svn password redaction in debug output (#13171)
* Sanitize URLs in hg and fossil error output (#13172)
* Escape additional arguments passed to @composer scripts (#13169)
* Release 2.11.0
+ Fixed package names in `vendor/composer/installed.json`
being able to escape the vendor directory during install
and reinstall (GHSA-c968-33g3-wh7p)
+ Fixed inline repository HTTP headers, such as API tokens,
being written into `composer.lock` (GHSA-fm2w-xgf2-f9fh)
.
[ Srayuth Kamma ]
* Ignore OS/editor metadata entries when locating a package
archive top-level directory (#13168)
* Fix composer config corrupting composer.json when extra/scripts
is a JSON array (#13167)
.
[ Daniel Pinto ]
* PoolOptimizer: Reduce Intervals::compactConstraint() calls (#13174)
Checksums-Sha1:
ca0a064af2097658e921b7dc639c8781d99fd07c 2313 composer_2.11.0-1.dsc
a6f4ae93eab5278b5b83c6e2b15ed1cc8825d800 858844 composer_2.11.0.orig.tar.xz
872eab6dbb22b61754647b00063f6df70635b983 65868 composer_2.11.0-1.debian.tar.xz
24958ec4bff54ac8755a96d393bb9d22ebb48d4c 9520 composer_2.11.0-1_amd64.buildinfo
Checksums-Sha256:
051fb154e1806db83184baaca13394431a42ed26ab9382ce579c6080f2e5112f 2313 composer_2.11.0-1.dsc
cc8f382c8ae81d2ff4da9e0c58402a029fb3c9c7ef5562aaf8224185496298cf 858844 composer_2.11.0.orig.tar.xz
4daf410e0c95ac60d8098b85a0a87170bbd6c466a8c7f5e7f002f51fa73b5780 65868 composer_2.11.0-1.debian.tar.xz
e45eeefe763adef52e1a521e0854fa4b5342542e26a93bb633868bd0683641b1 9520 composer_2.11.0-1_amd64.buildinfo
Files:
ef094264f01f896325e19a8ea9142cdf 2313 php optional composer_2.11.0-1.dsc
e8e8ee1caabd72fd44a62567d72b17c6 858844 php optional composer_2.11.0.orig.tar.xz
9e50d05b74ecd35e90c97a304946e000 65868 php optional composer_2.11.0-1.debian.tar.xz
d996a468ca63ff1acbe7ee5066a1c2d7 9520 php optional composer_2.11.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFGBAEBCgAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmrjV4ESHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r089m8H/0fi8/PTUamkRfgkJ5u+gWbYX0cnehVV
IVAvlkOszrthqSPvMgfELQCWOfgVAEDq8WHAknJL+YupbXb+LMnJXB8E0vAPpxqU
XW3YHHZ1imANpsMuUd6TbUxqCKDD64m5p0kRRhmlbbze0w8mM+rFMf6yCwT8OSg1
jpEEY93fNGumbhsNOnmV9KRDjXj64Ct8nY0RL0asVu0fG/OoohQUisQPWNTy/exJ
V6VshslCraDl/X6SukOxfUUuIjNn9zo1XOxFmINRok0YhrkavfT5kyu6cph9lYxW
gG3+DxIRvHYqVepgmD0LseAswvBgHIHaRwHTRQa9+NI6ViGV1GcErmQ=
=YjPS
-----END PGP SIGNATURE-----
