Commit d9c36391602 for php.net

commit d9c36391602860315917e4da28e21ffcb06c24b9
Author: Alexandre Daubois <alex.daubois@gmail.com>
Date:   Mon Sep 14 11:29:35 2026 +0200

    [skip ci] lexbor: Reference upstream commits as lexbor/lexbor@<sha> in NEWS

diff --git a/NEWS b/NEWS
index 1176aba9c44..4bdca4fd447 100644
--- a/NEWS
+++ b/NEWS
@@ -17,9 +17,9 @@ PHP                                                                        NEWS
     (Ilia Alshanetsky)

 - Lexbor:
-  . Merge patches 8a14bc0 and f67ce4b, fixing a heap buffer overflow in
-    :lexbor-contains() parsing and buffer overflows in malformed decode
-    replay. (alexandre-daubois)
+  . Merge patches lexbor/lexbor@8a14bc0 and lexbor/lexbor@f67ce4b, fixing a
+    heap buffer overflow in :lexbor-contains() parsing and buffer overflows
+    in malformed decode replay. (alexandre-daubois)

 - MBString:
   . Fixed bug GH-23106 (mb_strpos() reads past the end of a haystack ending in