| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| composer.phar | < 11 hours ago | 3.3 MB | |
| composer.phar.asc | < 11 hours ago | 589 Bytes | |
| 2.9.3 source code.tar.gz | < 11 hours ago | 526.1 kB | |
| 2.9.3 source code.zip | < 11 hours ago | 747.3 kB | |
| README.md | < 11 hours ago | 1.1 kB | |
| Totals: 5 Items | 4.6 MB | 0 | |
- Security: Fixed ANSI sequence injection (GHSA-59pp-r3rg-353g / CVE-2025-67746)
- Fixed
COMPOSER_NO_SECURITY_BLOCKINGenv var not being respected forupdatesdone via theinstallcommand, and added--no-security-blockingflag toinstallas well (#12677) - Fixed
update --lock/update mirrorsnot working when locked packages contain vulnerabilities (#12645) - Fixed
client-certificateauthentication implementation (#12667) - Fixed
php-extschema not being validated in ValidatingArrayLoader (#12694) - Fixed crash when
--bump-after-updateis used and the lock file is disabled (#12660) - Fixed support for SecureTransport + LibreSSL on macOS (#12615)
- Fixed display of reasons for why advisories are ignored (#12668)
- Fixed compatibility issues when git has log.showSignature enabled (#12666)
- Fixed curl downloader not retrying when a timeout (err 28) failure occurs (#12662)
- Fixed EventDispatcher requiring a full Composer instance to function (#12629)
Full Changelog: https://github.com/composer/composer/compare/2.9.2...2.9.3