composer audit fix firebase/php-jwt

[Tuğrul Topuz (tugrul)]

Error:

composer require paypayopa/php-sdk
./composer.json has been updated
Running composer update paypayopa/php-sdk
Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

Problem 1
- Root composer.json requires paypayopa/php-sdk * -> satisfiable by paypayopa/php-sdk[0.3.0, ..., 0.9.2, 1.0.0, ..., 1.0.5, 2.0.0, ..., 2.0.7].
- paypayopa/php-sdk[0.3.0, ..., 0.9.2, 1.0.0, ..., 1.0.5, 2.0.0] require firebase/php-jwt ^5.2 -> found firebase/php-jwt[v5.2.0, ..., v5.5.1] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-y2cr-5h3j-g3ys", "PKSA-2kqm-ps5x-s4f5") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.
- paypayopa/php-sdk[2.0.1, ..., 2.0.3] require firebase/php-jwt ^5.5 -> found firebase/php-jwt[v5.5.0, v5.5.1] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-y2cr-5h3j-g3ys", "PKSA-2kqm-ps5x-s4f5") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.
- paypayopa/php-sdk[2.0.4, ..., 2.0.7] require firebase/php-jwt ^5.5 || ^6.0 -> found firebase/php-jwt[v5.5.0, v5.5.1, v6.0.0, ..., v6.11.1] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-y2cr-5h3j-g3ys") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.

You can also try re-running composer require with an explicit version constraint, e.g. "composer require paypayopa/php-sdk:*" to figure out if any version is installable, or "composer require paypayopa/php-sdk:^2.1" if you know which you need.

Installation failed, reverting ./composer.json and ./composer.lock to their original content.

All Submissions:

• Have you followed the guidelines in our Contributing document?
• Have you read and signed the automated Contributor's License Agreement?
• Have you checked to ensure there aren't other open Pull Requests for the same update/change?

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}