Download Latest Version 2.9.3 source code.tar.gz (526.1 kB)
Email in envelope

Get an email when there's a new version of Composer

Home / 2.9.3
Name Modified Size InfoDownloads / Week
Parent folder
composer.phar < 11 hours ago 3.3 MB
composer.phar.asc < 11 hours ago 589 Bytes
2.9.3 source code.tar.gz < 11 hours ago 526.1 kB
2.9.3 source code.zip < 11 hours ago 747.3 kB
README.md < 11 hours ago 1.1 kB
Totals: 5 Items   4.6 MB 0
  • Security: Fixed ANSI sequence injection (GHSA-59pp-r3rg-353g / CVE-2025-67746)
  • Fixed COMPOSER_NO_SECURITY_BLOCKING env var not being respected for updates done via the install command, and added --no-security-blocking flag to install as well (#12677)
  • Fixed update --lock / update mirrors not working when locked packages contain vulnerabilities (#12645)
  • Fixed client-certificate authentication implementation (#12667)
  • Fixed php-ext schema not being validated in ValidatingArrayLoader (#12694)
  • Fixed crash when --bump-after-update is used and the lock file is disabled (#12660)
  • Fixed support for SecureTransport + LibreSSL on macOS (#12615)
  • Fixed display of reasons for why advisories are ignored (#12668)
  • Fixed compatibility issues when git has log.showSignature enabled (#12666)
  • Fixed curl downloader not retrying when a timeout (err 28) failure occurs (#12662)
  • Fixed EventDispatcher requiring a full Composer instance to function (#12629)

Full Changelog: https://github.com/composer/composer/compare/2.9.2...2.9.3

Source: README.md, updated 2025-12-30