public-mirrors
/
composer
mirror of https://github.com/composer/composer
1
0
Fork 0
Code

fix(Locker): don't store transport-options.ssl within the lock-file (#12019)

pull/12043/head
Ilya Urvachev 2024-07-10 10:35:26 +02:00 committed by GitHub
parent b2832867e6
commit 03bbfdd8f4
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/Composer/Package/Locker.php
View File

@ -431,6 +431,14 @@ class Locker
$spec = $this->dumper->dump($package);
unset($spec['version_normalized']);
// remove `transport-options.ssl` from lock file to prevent storing
// local-filesystem repo config paths in the lock file as that makes it less portable
if (isset($spec['transport-options']['ssl'])) {
unset($spec['transport-options']['ssl']);
if (\count($spec['transport-options']) === 0) {
unset($spec['transport-options']);
}
}
// always move time to the end of the package definition
$time = $spec['time'] ?? null;