-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 14 May 2026 10:37:40 +0200
Source: composer
Binary: composer
Architecture: all
Version: 2.8.8-1+deb13u3
Distribution: trixie
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: David Prévot <taffit@debian.org>
Description:
 composer   - dependency manager for PHP
Changes:
 composer (2.8.8-1+deb13u3) trixie; urgency=medium
 .
   * Fix regexp to support new GitHub installation tokens format
     (GHSA-f9f8-rm49-7jv2) [CVE-2026-45793]
Checksums-Sha1:
 30d9d5dad25401f1ef03ed7e901cbb088ff2d360 10152 composer_2.8.8-1+deb13u3_all-buildd.buildinfo
 3ef1579b99264269f3807cc8ac99d1a93ca99b85 533920 composer_2.8.8-1+deb13u3_all.deb
Checksums-Sha256:
 79104a5e73f265064b91491260ecc96bcc0614eef42647e43ff516ddc1e6240a 10152 composer_2.8.8-1+deb13u3_all-buildd.buildinfo
 a90074b32a9c24261234dbb246072f355a1329da506647d910efc6f39d0be0f9 533920 composer_2.8.8-1+deb13u3_all.deb
Files:
 e0fb71215d70dd1f06343b121f6e00f4 10152 php optional composer_2.8.8-1+deb13u3_all-buildd.buildinfo
 9848a607365a1970de0849ae213534eb 533920 php optional composer_2.8.8-1+deb13u3_all.deb

-----BEGIN PGP SIGNATURE-----
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=GYDZ
-----END PGP SIGNATURE-----