31109413976
95%

Ran 06 Aug 2026 02:10PM UTC

Jobs 1

Files 22

Run time 1min

Badge

Embed ▾

Committed 06 Aug 2026 02:09PM UTC coverage: 95.194%. Remained the same

Build # 31109413976

Build Type

push

github

Committed by

web-flow

Commit Message

chore(release): v2.15.5 (#60)

* chore(release): v2.15.5

* fix(deps): update php_codesniffer to 4.0.4 for CVE-2026-67434

GHSA-hmqg-cxww-wqhq, an OS command injection in PHP_CodeSniffer, was published
at 23:53 UTC on 2026-08-05 and affects <3.13.6 and >=4.0.0,<4.0.2. Every plugin
in the suite had 4.0.1 locked, so every one was affected.

The composer audit gate added earlier the same day caught it on the first build
after publication — this commit exists because CI went red, which is the gate
doing exactly the job it was added for.

Only composer.lock moves. The constraint was already ^4.0, which admits 4.0.4,
so composer.json is untouched and the lock stays in sync with it — checked,
since composer validate now gates on that.

Verified per repo after updating: composer audit --locked exits 0, composer
validate exits 0, and phpcs exits 0 — 4.0.4 reports no new findings against the
PSR-12 ruleset, so the fix is a version bump and nothing else.

Coverage Stats

2258 of 2372 relevant lines covered (95.19%)

4.08 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	31109413976.1	06 Aug 2026 02:10PM UTC	22	95.19	GitHub Action Run

bleedingdeacons / confur / 31109413976
95%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 31109413976

bleedingdeacons / confur / 31109413976 95%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 31109413976

bleedingdeacons / confur / 31109413976
95%

README BADGES
x