Opened dunglas/mercure#1352 asking to bump getkin/kin-openapi to >=0.144.0 (GHSA-r277-6w6q-xmqw, Critical 9.1) — Mercure is bundled into FrankenPHP and currently pins kin-openapi v0.114.0 as an indirect dependency.
Once that's patched upstream, could you bump the vendored Mercure version here and cut a new release?
Thanks so much
Opened dunglas/mercure#1352 asking to bump getkin/kin-openapi to >=0.144.0 (GHSA-r277-6w6q-xmqw, Critical 9.1) — Mercure is bundled into FrankenPHP and currently pins kin-openapi v0.114.0 as an indirect dependency.
Once that's patched upstream, could you bump the vendored Mercure version here and cut a new release?
Thanks so much