From 3c789be829f540afbf1bac1c624f47f0306d8c57 Mon Sep 17 00:00:00 2001
From: Olivier Gorzalka <olivier@amphibee.fr>
Date: Tue, 29 Sep 2026 15:58:01 +0200
Subject: [PATCH] ci: let composer audit pass over the abandoned symplify
 contracts

driftingly/rector-laravel (dev only, 2.6.2 is the latest) requires
symplify/rule-doc-generator-contracts, now marked abandoned on Packagist with
no replacement. composer audit fails on abandoned packages, so Code Quality
failed on every pull request. Only this package is ignored: any other
abandoned package, and every security advisory, still fail the job.
---
 composer.json | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/composer.json b/composer.json
index cc5db723..3113b246 100644
--- a/composer.json
+++ b/composer.json
@@ -91,6 +91,9 @@
             "pestphp/pest-plugin": true,
             "pollora/helper-overrider": true,
             "wikimedia/composer-merge-plugin": true
+        },
+        "audit": {
+            "ignore-abandoned": ["symplify/rule-doc-generator-contracts"]
         }
     },
     "require-dev": {