From 82491932775b0a2575fe55d3edda749beb888b76 Mon Sep 17 00:00:00 2001
From: Brad Jorsch <brad.jorsch@automattic.com>
Date: Mon, 2 Feb 2026 09:11:53 -0500
Subject: [PATCH] Update psysh

Update package for CVE-2026-25129

* Indirect dep in `projects/plugins/crm/composer.lock`
* Add `workflow_dispatch` to allow manually triggering Docker rebuilds.
  Although, for this case, adding that will already retrigger the build.
---
 .github/workflows/build-docker-monorepo.yml |  1 +
 .github/workflows/build-docker.yml          |  1 +
 projects/plugins/crm/changelog/update-psysh |  5 +++++
 projects/plugins/crm/composer.lock          | 12 ++++++------
 4 files changed, 13 insertions(+), 6 deletions(-)
 create mode 100644 projects/plugins/crm/changelog/update-psysh

diff --git a/.github/workflows/build-docker-monorepo.yml b/.github/workflows/build-docker-monorepo.yml
index 19d6a58d525d..ba30176735ce 100644
--- a/.github/workflows/build-docker-monorepo.yml
+++ b/.github/workflows/build-docker-monorepo.yml
@@ -13,6 +13,7 @@ on:
       - 'tools/docker/bin/monorepo'
       - '.github/versions.sh'
       - '.github/workflows/build-docker-monorepo.yml'
+  workflow_dispatch:
 concurrency:
   group: build-docker-monorepo-${{ github.event_name }}-${{ github.ref }}
   cancel-in-progress: true
diff --git a/.github/workflows/build-docker.yml b/.github/workflows/build-docker.yml
index 5cdc91ddd4a0..65c20e68acd3 100644
--- a/.github/workflows/build-docker.yml
+++ b/.github/workflows/build-docker.yml
@@ -15,6 +15,7 @@ on:
       - 'tools/docker/config/*'
       - '.github/versions.sh'
       - '.github/workflows/build-docker.yml'
+  workflow_dispatch:
 concurrency:
   group: build-docker-${{ github.event_name }}-${{ github.ref }}
   cancel-in-progress: true
diff --git a/projects/plugins/crm/changelog/update-psysh b/projects/plugins/crm/changelog/update-psysh
new file mode 100644
index 000000000000..47f5577b9214
--- /dev/null
+++ b/projects/plugins/crm/changelog/update-psysh
@@ -0,0 +1,5 @@
+Significance: patch
+Type: changed
+Comment: Update composer.lock.
+
+
diff --git a/projects/plugins/crm/composer.lock b/projects/plugins/crm/composer.lock
index b21b91106385..13324823faad 100644
--- a/projects/plugins/crm/composer.lock
+++ b/projects/plugins/crm/composer.lock
@@ -2894,16 +2894,16 @@
         },
         {
             "name": "psy/psysh",
-            "version": "v0.12.18",
+            "version": "v0.12.19",
             "source": {
                 "type": "git",
                 "url": "https://github.com/bobthecow/psysh.git",
-                "reference": "ddff0ac01beddc251786fe70367cd8bbdb258196"
+                "reference": "a4f766e5c5b6773d8399711019bb7d90875a50ee"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/bobthecow/psysh/zipball/ddff0ac01beddc251786fe70367cd8bbdb258196",
-                "reference": "ddff0ac01beddc251786fe70367cd8bbdb258196",
+                "url": "https://api.github.com/repos/bobthecow/psysh/zipball/a4f766e5c5b6773d8399711019bb7d90875a50ee",
+                "reference": "a4f766e5c5b6773d8399711019bb7d90875a50ee",
                 "shasum": ""
             },
             "require": {
@@ -2967,9 +2967,9 @@
             ],
             "support": {
                 "issues": "https://github.com/bobthecow/psysh/issues",
-                "source": "https://github.com/bobthecow/psysh/tree/v0.12.18"
+                "source": "https://github.com/bobthecow/psysh/tree/v0.12.19"
             },
-            "time": "2025-12-17T14:35:46+00:00"
+            "time": "2026-01-30T17:33:13+00:00"
         },
         {
             "name": "ralouphie/getallheaders",