Skip to content

Upgrade drupal/core to 10.0.9

Motivation

Runing pipeline on 10.x branch produces 2 errors :

Drupal check

 [warning] One or more of your dependencies has an outstanding security update.
 [notice] Try running: composer require drupal/core --update-with-dependencies
 [notice] If that fails due to a conflict then you must update one or more root dependencies.
+-------------+-------------------+
| Name        | Installed Version |
+-------------+-------------------+
| drupal/core | 10.0.7            |
+-------------+-------------------+

PHP Check

 [warning] One or more of your dependencies has an outstanding security update.
 [notice] Run composer why guzzlehttp/psr7 to learn what module requires the package.
guzzlehttp/psr7:
  version: 2.4.4
  time: '2023-03-09T13:19:02+00:00'
  advisories:
    -
      title: 'Improper header validation'
      link: 'https://github.com/guzzle/psr7/security/advisories/GHSA-wxmh-65f7-jcvw'
      cve: CVE-2023-29197

Solution

Upgrading these modules :

-> require

"drupal/core-composer-scaffold": "10.0.9",
"drupal/core-recommended": "10.0.9",
"drupal/core-vendor-hardening": "10.0.9",

-> require-dev

"drupal/core-dev": "10.0.9",

And doing a composer update fixes both issues

composer update drupal/core-* -W

Edited by Guillaume Aveline

Merge request reports