Update monorepo to Composer 2.7.1 (#35574)

Apparently 2.7.0 fixed a security bug, so people want this updated sooner rather than later. Fortunately there's no API version change this time around so no lock files need updating.
Automattic · Feb 9, 2024 · 2aa6a63 · 2aa6a63
1 parent 818b261
commit 2aa6a63
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/actions/tool-setup/action.yml b/.github/actions/tool-setup/action.yml
@@ -20,7 +20,7 @@ runs:
 
         if [[ "${INPUT_PHP:-$PHP_VERSION}" == 7.[01] ]]; then
           printf "Downgrading composer for PHP %s\n\n" "${INPUT_PHP:-$PHP_VERSION}"
-          COMPOSER_VERSION=2.2.12
+          COMPOSER_VERSION=2.2.23
         fi
 
         printf "\n\e[1mSelected tool versions\e[0m\n"

diff --git a/.github/versions.sh b/.github/versions.sh
@@ -1,6 +1,6 @@
 # Versions of tools to use in CI.
 PHP_VERSION=8.2
-COMPOSER_VERSION=2.6.5
+COMPOSER_VERSION=2.7.1
 NODE_VERSION=20.8.1
 PNPM_VERSION=8.6.8