21:41:25 - Root composer.json requires symfony/process 6.4.31 (exact version match: 6.4.31 or 6.4.31.0), found symfony/process[v6.4.31] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-rkkf-636k-qjb3") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.Description
Details
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| Upgrade symfony/* | mediawiki/vendor | master | +139 -134 | |
| Upgrade symfony/* | mediawiki/vendor | wmf/1.46.0-wmf.13 | +139 -134 | |
| Upgrade symfony/* | mediawiki/vendor | wmf/1.46.0-wmf.12 | +139 -134 |
Related Objects
Event Timeline
Change #1234511 had a related patch set uploaded (by Reedy; author: Reedy):
[mediawiki/vendor@master] Upgrade symfony/*
Example CI failure: https://integration.wikimedia.org/ci/job/quibble-vendor-mysql-php83-selenium/14745/console (for https://gerrit.wikimedia.org/r/c/mediawiki/extensions/VisualEditor/+/1234430)
Previous Composer automatic-security-blocking related tasks:
Change #1234516 had a related patch set uploaded (by Reedy; author: Reedy):
[mediawiki/vendor@wmf/1.46.0-wmf.12] Upgrade symfony/*
Change #1234517 had a related patch set uploaded (by Reedy; author: Reedy):
[mediawiki/vendor@wmf/1.46.0-wmf.13] Upgrade symfony/*
Per https://libup.wmcloud.org/library/composer/symfony/process it looks like we're done once those three land?
Change #1234516 merged by jenkins-bot:
[mediawiki/vendor@wmf/1.46.0-wmf.12] Upgrade symfony/*
Change #1234517 merged by jenkins-bot:
[mediawiki/vendor@wmf/1.46.0-wmf.13] Upgrade symfony/*
Mentioned in SAL (#wikimedia-operations) [2026-01-28T22:16:17Z] <brennen@deploy2002> Started scap sync-world: Backport for [[gerrit:1234517|Upgrade symfony/* (T415834)]], [[gerrit:1234516|Upgrade symfony/* (T415834)]]
Mentioned in SAL (#wikimedia-operations) [2026-01-28T22:20:24Z] <brennen@deploy2002> brennen, reedy: Backport for [[gerrit:1234517|Upgrade symfony/* (T415834)]], [[gerrit:1234516|Upgrade symfony/* (T415834)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.
Mentioned in SAL (#wikimedia-operations) [2026-01-28T22:28:31Z] <brennen@deploy2002> Finished scap sync-world: Backport for [[gerrit:1234517|Upgrade symfony/* (T415834)]], [[gerrit:1234516|Upgrade symfony/* (T415834)]] (duration: 12m 15s)