diff --git a/src/Composer/Package/Locker.php b/src/Composer/Package/Locker.php index f832e797c..6c3dfa604 100644 --- a/src/Composer/Package/Locker.php +++ b/src/Composer/Package/Locker.php @@ -431,6 +431,14 @@ class Locker $spec = $this->dumper->dump($package); unset($spec['version_normalized']); + // remove `transport-options.ssl` from lock file to prevent storing + // local-filesystem repo config paths in the lock file as that makes it less portable + if (isset($spec['transport-options']['ssl'])) { + unset($spec['transport-options']['ssl']); + if (\count($spec['transport-options']) === 0) { + unset($spec['transport-options']); + } + } // always move time to the end of the package definition $time = $spec['time'] ?? null;