Hi there again :)
I just realized that OroPlatform has hardcoded dependency to symfony version 2.3.6 in composer.json. Current version of symfony 2.3.* is 2.3.18 including security fixes. Shouldn’t this dependency be updated? Are there any issues in those versions that stop oro from updating?
Also most of other depending vendor libraries configured in composer.json even the patch version is fix in most cases. Will those be checked/updated on a more or less regular basis? We ran into the issues with knp-menu for example not that long ago…
You must be logged in to reply to this topic.