From de67d5a3fbedd220e07e4f2edc421dcb85615402 Mon Sep 17 00:00:00 2001
From: Alain Schlesser <alain.schlesser@gmail.com>
Date: Fri, 30 Oct 2026 19:36:26 +0100
Subject: [PATCH] Remove roave/security-advisories

Composer 2.9+ blocks packages with known security advisories by default, which fully replaces this package. Since its latest update, the package also conflicts with every PHP version without the newest security release, so it can't be installed on the older PHP versions we test on.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 composer.json | 1 -
 1 file changed, 1 deletion(-)

diff --git a/composer.json b/composer.json
index c9b58c0..07b1e0a 100644
--- a/composer.json
+++ b/composer.json
@@ -21,7 +21,6 @@
         "php": ">= 7.2.24"
     },
     "require-dev": {
-        "roave/security-advisories": "dev-latest",
         "wp-cli/wp-cli-tests": "^5"
     },
     "extra": {