From 26e7e5eed9e633adadb5ee1af25de1812b546716 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 18 Feb 2026 11:52:39 +0000 Subject: [PATCH 1/2] Bump dawidd6/action-download-artifact from 14 to 15 Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 14 to 15. - [Release notes](https://github.com/dawidd6/action-download-artifact/releases) - [Commits](https://github.com/dawidd6/action-download-artifact/compare/5c98f0b039f36ef966fdb7dfa9779262785ecb05...fe9d59ce33ce92db8a6ac90b2c8be6b6d90417c8) --- updated-dependencies: - dependency-name: dawidd6/action-download-artifact dependency-version: '15' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/test-results.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test-results.yml b/.github/workflows/test-results.yml index 844e4af9..1d746d12 100644 --- a/.github/workflows/test-results.yml +++ b/.github/workflows/test-results.yml @@ -25,7 +25,7 @@ jobs: steps: - name: Download and Extract Artifacts - uses: dawidd6/action-download-artifact@5c98f0b039f36ef966fdb7dfa9779262785ecb05 + uses: dawidd6/action-download-artifact@fe9d59ce33ce92db8a6ac90b2c8be6b6d90417c8 with: run_id: ${{ github.event.workflow_run.id }} path: artifacts From 7ed7cdd0e84c98fc6ec62150395cb9c417a3708d Mon Sep 17 00:00:00 2001 From: El RIDO Date: Wed, 18 Feb 2026 18:59:27 +0100 Subject: [PATCH 2/2] ignore CVE that breaks unit tests in Github actions see: https://github.com/firebase/php-jwt/issues/620 --- composer.json | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/composer.json b/composer.json index fa1bdb98..92a0b996 100644 --- a/composer.json +++ b/composer.json @@ -43,6 +43,11 @@ } }, "config" : { + "audit": { + "ignore": { + "CVE-2025-45769": "disputed on the basis that key lengths are expected to be set by an application, not by this library" + } + }, "autoloader-suffix" : "DontChange", "optimize-autoloader": true, "preferred-install": "dist",