[W0rma]

The "Auto-publish website" CI job is currently broken:

Problem 1
- Root composer.json requires codeception/module-ftp * -> satisfiable by codeception/module-ftp[1.0.0, 1.0.1, 1.0.2, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 3.0.0].
- codeception/module-ftp[1.0.0, ..., 1.0.1] require php >=5.6.0 <8.0 -> your php version (8.2.35) does not satisfy that requirement.
- codeception/module-ftp[1.0.2, 2.0.0] require codeception/codeception ^4.0 -> found codeception/codeception[4.0.0, ..., 4.2.2] but it conflicts with your root composer.json require (^5.0).
- codeception/module-ftp[2.0.1, ..., 2.0.3] require codeception/codeception ^4.1 -> found codeception/codeception[4.1.0, ..., 4.2.2] but it conflicts with your root composer.json require (^5.0).
- codeception/module-ftp 3.0.0 requires phpseclib/phpseclib ^2.0.35 -> found phpseclib/phpseclib[2.0.35, ..., 2.0.56]

but these were not loaded, because they are affected by security advisories ("PKSA-12sz-bcny-pk4m", "PKSA-432p-hv1d-chf7", "PKSA-smrh-yx37-92ws", "PKSA-zh4j-by9m-7mz8", "PKSA-km2b-zc3b-mjm3", "PKSA-4p7m-np8m-fq35", "PKSA-t5xz-td8w-f35v", "PKSA-jsh4-f6tg-bwyq"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add their IDs to the "policy.advisories.ignore-id" config or add the package to "policy.advisories.ignore". To turn the feature off entirely, you can set "policy.advisories.block" to false.

The most recent composer versions block the installation of packages which are affected by security advisories.

Dependencies in this repository are only used locally to build the docs and are never deployed, so advisories are reported instead of blocking composer update. Malware blocking keeps its default.

Regarding codeception/module-ftp there is already Codeception/module-ftp#12 which allows the installation of newer phpseclib versions.

However, it might still be a good idea to not block the auto-publish job just because of security advisories.