We all know how it goes... our PHP Composer dependencies get out of date and we forget to update them, and that's not good if we want to keep shipping safe apps. I'd recommend using an automated dependency update bot: Pmbot.
All you need to do is to use our latest CLI v1.9.0 and use our
composer plugin in your
version: '1' packageManagers: - packageManager: name: composer
If you haven't done it yet, install Pmbot with Docker in a couple of minutes: instructions here.
Ruby/Gem lovers, stay tuned !