security/core#113 Apply patch from Mathieu to fix SQLI in participant import

[civicrm-core.git] / composer.json

diff --git a/composer.json b/composer.json
index 43cda9b47eea5d0ccc2b2fcd68cc873603f4cd58..ee14ec3d602cb6d6f8557c924194982664f98d13 100644 (file)
--- a/composer.json
+++ b/composer.json
@@ -39,6 +39,11 @@
   "config": {
     "platform": {
       "php": "7.2"
+    },
+    "allow-plugins": {
+      "civicrm/composer-compile-plugin": true,
+      "civicrm/composer-downloads-plugin": true,
+      "cweagans/composer-patches": true
     }
   },
   "require": {
@@ -80,7 +85,7 @@
     "tplaner/when": "~3.0.0",
     "xkerman/restricted-unserialize": "~1.1",
     "typo3/phar-stream-wrapper": "^2 || ^3.0",
-    "brick/money": "~0.4",
+    "brick/money": "~0.5",
     "ext-intl": "*",
     "pear/mail_mime": "~1.10",
     "pear/db": "1.11",
@@ -172,7 +177,7 @@
         "ignore": [".*", "node_modules", "docs", "Gruntfile.js", "index.html", "package.json", "test"]
       },
       "ckeditor": {
-        "url": "https://github.com/ckeditor/ckeditor-releases/archive/4.17.1.zip"
+        "url": "https://github.com/ckeditor/ckeditor-releases/archive/4.18.0.zip"
       },
       "crossfilter-1.3.x": {
         "url": "https://github.com/crossfilter/crossfilter/archive/1.3.14.zip",
@@ -230,7 +235,7 @@
         "url": "https://github.com/civicrm/jquery/archive/1.12.4-civicrm-1.2.zip"
       },
       "jquery-ui": {
-        "url": "https://github.com/components/jqueryui/archive/1.12.1.zip"
+        "url": "https://github.com/civicrm/jqueryui/archive/1.13.1-civicrm.zip"
       },
       "jquery-validation": {
         "url": "https://github.com/jquery-validation/jquery-validation/archive/1.19.3.zip",