diff --git a/composer.json b/composer.json index 190465a..b474c38 100644 --- a/composer.json +++ b/composer.json @@ -41,7 +41,7 @@ "nunomaduro/collision": "^7.0", "pestphp/pest": "^2.33.2", "phpstan/phpstan": "^1.10.38", - "symfony/var-dumper": "^5.4.29" + "symfony/var-dumper": "^5.4.29|^6.2" }, "autoload": { "psr-4": { @@ -72,6 +72,16 @@ "preferred-install": "dist", "allow-plugins": { "pestphp/pest-plugin": true + }, + "policy": { + "advisories": { + "ignore-id": { + "PKSA-zwc5-qtrz-zm1n": { + "reason": "CVE-2026-48019 has no patched illuminate/mail 9.x or 10.x release. This only stops the install block; composer audit still reports it. Remove at the Laravel 12.69+ upgrade.", + "on-audit": false + } + } + } } }, "scripts": {