Skip to content

Bump the jane group across 1 directory with 2 updates - #114

Merged
qdequippe merged 1 commit into
mainfrom
dependabot/composer/jane-80545cc4c9
Jul 13, 2026
Merged

Bump the jane group across 1 directory with 2 updates#114
qdequippe merged 1 commit into
mainfrom
dependabot/composer/jane-80545cc4c9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the jane group with 2 updates in the / directory: jane-php/open-api-runtime and jane-php/open-api-2.

Updates jane-php/open-api-runtime from 7.11.1 to 7.12.0

Commits

Updates jane-php/open-api-2 from 7.11.1 to 7.12.0

Commits
  • 0b6375e Validate $ref resolution to prevent SSRF, LFI, and path traversal (#961)
  • 15c9ad2 Sanitize PHPDoc to prevent instantiation RCE via */ breakout (#960)
  • 2591349 fix: Fix missing InvalidArgumentException import in generated BaseEndpoint (#...
  • 9214ee9 feat: add validation for array items via ChainValidator delegation (#920)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels May 1, 2026
@qdequippe

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps the jane group with 2 updates in the / directory: [jane-php/open-api-runtime](https://github.com/janephp/open-api-runtime) and [jane-php/open-api-2](https://github.com/janephp/open-api-2).


Updates `jane-php/open-api-runtime` from 7.11.1 to 7.12.0
- [Release notes](https://github.com/janephp/open-api-runtime/releases)
- [Commits](janephp/open-api-runtime@v7.11.1...v7.12.0)

Updates `jane-php/open-api-2` from 7.11.1 to 7.12.0
- [Commits](janephp/open-api-2@v7.11.1...v7.12.0)

---
updated-dependencies:
- dependency-name: jane-php/open-api-2
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: jane
- dependency-name: jane-php/open-api-runtime
  dependency-version: 7.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: jane
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the jane group with 2 updates Bump the jane group across 1 directory with 2 updates Jul 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/composer/jane-80545cc4c9 branch from a8430d3 to 70aea85 Compare July 13, 2026 16:51
@qdequippe
qdequippe merged commit ea815fa into main Jul 13, 2026
2 checks passed
@qdequippe
qdequippe deleted the dependabot/composer/jane-80545cc4c9 branch July 13, 2026 16:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant