Build/Test Tools: Ignore PHPCS Security Advisory CVE-2026-67434

Add an ignore for GHSA-hmqg-cxww-wqhq (CVE-2026-67434), under both its GitHub and Packagist advisory IDs.

WordPress tooling does not use the vulnerable `Gitblame`, `Hgblame` or `Svnblame` report formats, so the pinned version poses no practical risk.

Merges [63037] to the 5.0 branch.

Props johnbillion, joedolson, jonsurrell, sergeybiryukov.
Fixes #65822.


git-svn-id: https://develop.svn.wordpress.org/branches/5.0@63058 602fd350-edb4-49c9-b593-d223f7449a82

Author: jeremyfelt

composer.json

@@ -14,6 +14,7 @@
 		"wp-coding-standards/wpcs": "~1.0.0"
 	},
 	"config": {
+		"audit": { "ignore": [ "GHSA-hmqg-cxww-wqhq", "PKSA-rdkp-vv9z-mjkg" ] },
 		"allow-plugins": {
 			"dealerdirect/phpcodesniffer-composer-installer": true
 		}