7d887621e6
Release 2.4.2
2022-09-14 16:11:15 +02:00
a75fbf0e6a
Fix handling of plugin activation when running as root
...
When running without `COMPOSER_ALLOW_SUPERUSER` set so it always happens after prompting, or does not happen if input is non-interactive.
Also fixed support for bash completions hanging when running as root
Fixes #11024
2022-09-14 15:42:10 +02:00
ef018748eb
Merge branch '2.4'
2022-09-14 14:02:28 +02:00
fc75efd711
`require` command: allow `—fixed` option for library dev dependencies
2022-09-14 14:01:51 +02:00
ec8bbe9056
Fix package filter on bump command, fixes #11053
2022-09-14 14:00:27 +02:00
564f8bec24
Fix type error, fixes #11052
2022-09-14 13:23:17 +02:00
29d8eaf45d
Merge branch '2.4'
2022-09-14 10:51:03 +02:00
21045b942e
Fix type errors and update baseline (1854, 99)
2022-09-14 10:50:52 +02:00
d63218c568
Fix type error
2022-09-14 09:48:44 +02:00
c9973cf5a8
Merge branch '2.4'
2022-09-13 16:47:09 +02:00
dbdf6af886
Fix type error
2022-09-13 16:46:18 +02:00
adc16bf0af
Fix phpstan error
2022-09-13 16:28:15 +02:00
93bfe73b52
Merge branch '2.4'
2022-09-13 16:12:56 +02:00
fb3cae4448
Fix type error in validating array loader when name is not set
2022-09-13 16:12:28 +02:00
02082905a3
Merge branch '2.4'
2022-09-13 15:17:04 +02:00
e94eff5412
Fix typo in remove command
2022-09-13 15:09:28 +02:00
d2f37b5680
Add hint as to why a package is suggested to be added to require-dev, fixes #11040
2022-09-13 15:08:37 +02:00
ab29ed5f97
Fix handling of upper-bound platform req ignores to not act on conflicts ( #11037 )
...
* Fix handling of upper-bound platform req ignores to not act on conflicts, fixes #11020
* Optimization
2022-09-13 14:50:27 +02:00
4164b30236
Fix show --platform regression failing if no composer.json exists, fixes #11046
2022-09-13 14:49:25 +02:00
9bb436ec28
Update PHPStan
2022-09-01 21:51:49 +02:00
7ff288f081
Merge branch '2.4'
2022-08-31 12:42:29 +02:00
c10854d3f3
Remove extra lines
2022-08-31 12:42:26 +02:00
d0ac10ca6a
Merge branch '2.4'
2022-08-31 12:41:52 +02:00
5b754c797e
Remove extra lines
2022-08-31 12:26:58 +02:00
39de9899a7
Lock down include wrappers to avoid abuse from third parties ( #11015 )
2022-08-31 12:07:23 +02:00
9306eebf0c
Update gitlab fetch failure message with new path ( #11038 )
...
`https://gitlab.com/-/profile/personal_access_token ` is not correct, the current URL for personal access token settings is `https://gitlab.com/-/profile/personal_access_tokens `. This is the only occurrence of the bad URL, we use the proper URL elsewhere.
2022-08-31 10:43:54 +02:00
c5932d810f
Merge branch '2.4'
2022-08-31 09:50:30 +02:00
3177b21324
Fix handling for double-zero prefix, refs #11032
2022-08-31 09:47:59 +02:00
7e0ac53fc4
Merge branch '2.4'
2022-08-30 20:47:34 +02:00
2d48c7dbb0
Fix handling of zero-major versions in outdated --major-only flag, fixes #11032
2022-08-30 20:45:07 +02:00
13421f7d66
Config - always respect COMPOSER_DISCARD_CHANGES
2022-08-30 14:04:30 +02:00
cd71cf47b3
Bump main to target 2.5
2022-08-20 13:13:59 +02:00
afeaabe089
Reverting release version changes
2022-08-20 11:44:51 +02:00
777d542e3a
Release 2.4.1
2022-08-20 11:44:50 +02:00
ceb8bef778
Adding hint what "Direct dependencies" means ( #11013 )
2022-08-20 09:24:25 +02:00
d2d8474013
Do not apply non-array package links in ArrayLoader ( #11008 )
2022-08-20 08:58:17 +02:00
51774693c7
Do not apply non-string package link constraints in ArrayLoader ( #11009 )
2022-08-20 08:34:38 +02:00
7ccf230390
Fix cache invalidation issue when a git tag gets created on an old ref after the cache is populated, fixes #11002 ( #11004 )
2022-08-20 07:42:20 +02:00
cad5dc5b8b
Match default choice to actual default ( #11010 )
...
The 'Y' is capital, so Yes should be the default choice and is what most people would want, but No was the default.
2022-08-20 07:41:14 +02:00
c529087631
performance: Do not create a local cache repo for local repos ( #11001 )
2022-08-17 15:11:34 +02:00
31f9cc3b49
Clean up unused types
2022-08-17 15:03:14 +02:00
d48acda485
Add RuleReasonDataReturnTypeExtension to resolve ReasonData types where possible in PHPStan
2022-08-17 14:59:24 +02:00
131da999ac
Fix CS ( #11003 )
2022-08-17 14:20:07 +02:00
f95471f221
Show/outdated command fixes ( #11000 )
...
* Fix show command showing the split of direct/transitive deps from outdated, fixes #10999
* Fix a few minor edge cases in show command, add tests for show and outdated commands
2022-08-17 12:08:59 +02:00
9b6d27f810
Environment variable for `--no-audit`. ( #10998 )
...
Fixes #10997
2022-08-17 11:44:18 +02:00
55990a48a9
Reverting release version changes
2022-08-16 16:10:48 +02:00
026d6de6ea
Release 2.4.0
2022-08-16 16:10:48 +02:00
cc33db9257
Only fetch remote default branch for mirrored git repos, not local ones, refs #10949 ( #10996 )
2022-08-16 15:53:57 +02:00
82e3059c6e
Fix plugin output to indicate when plugins are globally installed even while running global commands, fixes #10978
2022-08-16 15:16:56 +02:00
058beef20a
CheckPlatformReqs: Add json format output ( #10979 )
...
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2022-08-16 14:19:53 +02:00
e82050b05d
Fix remove command suggestions to only suggest required packages, fixes #10964
2022-08-16 13:40:50 +02:00
41d6467b3b
Added token refresh for GitLab to support GitLab 15+ ( #10988 )
...
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2022-08-16 13:34:18 +02:00
e34c31dd8b
Merge branch '2.2'
2022-08-16 11:50:01 +02:00
104bf0d75d
Handle 404s gracefully when loading providers in ComposerRepo, fixes #10974
2022-08-16 11:44:21 +02:00
07c3a63fa3
Fix phpstan error
2022-08-16 11:40:14 +02:00
f1877afc0b
Merge branch '2.3'
2022-08-16 11:27:40 +02:00
550fc3d321
Merge branch '2.2' into 2.3
2022-08-16 11:27:34 +02:00
598c1c7573
Fix phpstan error
2022-08-16 11:19:20 +02:00
6457a88aa1
Fix COMPOSER_NO_DEV to work with --update-no-dev for require/remove commands as well, refs #10995
2022-08-16 11:15:52 +02:00
1f0bd51f55
GitHubDriver: stricter URL validation to avoid issues with undefined index owner ( #10985 )
2022-08-16 11:08:03 +02:00
7377d1f003
Uniformize command description format, fixes #10971
2022-08-16 10:41:07 +02:00
a3f7c31ea7
Add json format to Audit command ( #10965 )
2022-07-25 13:13:32 +02:00
f0ab518c46
Ensure signalHandler is kept around and unregistered
2022-07-22 10:37:48 +02:00
6cb5576a32
Fix root package being part of package name suggestions where it should not be
2022-07-21 16:30:01 +02:00
f8ac872c9f
Reverting release version changes
2022-07-21 15:46:32 +02:00
c08cac5f67
Release 2.4.0-RC1
2022-07-21 15:46:32 +02:00
e59812c439
Add prompt suggesting using --dev when require command is used with dev packages ( #10960 )
...
* Add prompt suggesting using --dev when require command is used with packages which appear to be dev, fixes #10939
2022-07-21 14:40:21 +02:00
d0b60f115b
Merge pull request #10958 from Seldaek/signal_fixes
...
Signal handling improvements
2022-07-21 11:09:30 +02:00
9fbc386a7b
Fix package selector warnings to only show for versions that were actually skipped, #10942
2022-07-21 11:06:13 +02:00
03e4d19266
Merge branch '2.3'
2022-07-20 22:47:44 +02:00
e815e0113a
Merge branch '2.2' into 2.3
2022-07-20 22:47:36 +02:00
623f903d62
Add support for +meta in hg version number, fixes #10955
2022-07-20 22:47:27 +02:00
734cbeb610
Fix type declarations
2022-07-20 22:42:57 +02:00
07645b9895
Capture signals and wait until child process exits to also exit, fixes #6059
2022-07-20 22:32:09 +02:00
1a4f2174e4
Add seld/signal-handler dependency
2022-07-20 22:32:09 +02:00
26e01abfae
Fix handling of .mdown files in phar compiler
2022-07-20 22:31:59 +02:00
e43cae6231
Add COMPOSER_PREFER_STABLE and COMPOSER_PREFER_LOWEST env vars, fixes #10919
2022-07-20 22:29:27 +02:00
8c488b9b08
Add "r" alias for require ( #10953 )
...
Co-authored-by: a.dmitryuk <a.dmitryuk@movavi.com>
2022-07-18 13:04:49 +02:00
3595666e6e
Merge branch '2.3'
2022-07-17 13:07:44 +02:00
3c68b579ed
Merge branch '2.2' into 2.3
2022-07-17 13:06:43 +02:00
8d5bdaf443
Fixes #10938 : Do not display duplicate ignore extension hints
2022-07-17 13:02:12 +02:00
740af2bdb1
Add warning if constraint appears too narrow, refs #10943
2022-07-17 10:29:56 +02:00
93eb19e756
For custom composer.json paths the default cwd should be that files directory, fixes ergebnis/composer-normalize#865, refs #10935
2022-07-17 10:22:07 +02:00
37d3e2f44a
Merge branch '2.3'
2022-07-13 15:49:55 +02:00
80a0d3236d
Reverting release version changes
2022-07-13 15:48:23 +02:00
ebac357c0a
Release 2.3.10
2022-07-13 15:48:23 +02:00
e1e29bf698
Merge branch '2.2' into 2.3
2022-07-13 15:35:01 +02:00
c5ff1e1fc6
Reverting release version changes
2022-07-13 15:27:38 +02:00
a8ab5070fb
Release 2.2.17
2022-07-13 15:27:38 +02:00
b195f383f2
Always clone root package before adding it to a RootPackageRepo to avoid issues with plugins, fixes #10940
2022-07-13 15:10:15 +02:00
336a0d20c6
Add hint in create-project when it fails due to a missing allow-plugins in project, refs #10928
2022-07-13 14:38:54 +02:00
0e59fbb46e
Fix #10935 in a more generic way which fixes the issue for all Factory::create usages
2022-07-13 14:13:02 +02:00
37a788932d
Fix phpdoc issue
2022-07-13 13:35:03 +02:00
55fe12bd65
Allow disabling only local or global plugins internally to fix #10935 without side-effects
2022-07-13 13:23:27 +02:00
a481dfce3f
Fix disk_free_space being called even when not available, fixes #10936
2022-07-13 10:35:32 +02:00
f600ea46c7
Fix syntax error
2022-07-13 10:09:33 +02:00
32a7ceac2f
Improve exception message when a package cannot be added in another repo, refs #10940
2022-07-13 10:06:00 +02:00
c6a2142dc4
Merge branch '2.3'
2022-07-12 20:57:16 +02:00
03cebc2490
Clean up types with conditional return types
2022-07-12 20:56:23 +02:00
cecdc0cbd1
Merge branch '2.2' into 2.3
2022-07-12 20:52:51 +02:00
75ef4903ef
Ensure plugins from CWD/vendor do not get loaded when running create-project, fixes #10935
2022-07-12 16:25:12 +02:00
12e15b7f60
Merge branch '2.3'
2022-07-12 13:25:12 +02:00
e29bff2727
Merge branch '2.2' into 2.3
2022-07-12 13:25:03 +02:00
8323e85bc8
Fix allow-plugins check to not check plugins which are anyway incompatible with the current Composer version, refs #10928
2022-07-12 13:24:21 +02:00
8536a2ca80
Merge branch '2.3'
2022-07-05 22:21:44 +02:00
d60ffc3b82
Merge branch '2.2' into 2.3
2022-07-05 22:21:37 +02:00
dcd7f2180d
Avoid checking for allowed plugins if plugins are disabled entirely, fixes #10925
2022-07-05 22:20:33 +02:00
70b78137a9
Merge branch '2.3'
2022-07-05 16:54:43 +02:00
4cd8787c88
Reverting release version changes
2022-07-05 16:52:11 +02:00
015f524c99
Release 2.3.9
2022-07-05 16:52:11 +02:00
2759d8b545
Reverting release version changes
2022-07-05 16:50:29 +02:00
8c0ee53ff6
Release 2.2.16
2022-07-05 16:50:29 +02:00
fca92faed8
Fix type error
2022-07-05 16:26:46 +02:00
8304ea0695
Fix type error with null descriptions, fixes #10924
2022-07-05 16:23:53 +02:00
9a6d63f0f4
Fix build regressions
2022-07-05 16:22:29 +02:00
3764073b43
Merge branch '2.2' into 2.3
2022-07-05 16:08:35 +02:00
3ebd66b851
Fix deprecation notice ( #10921 )
...
Deprecation Notice: trim(): Passing null to parameter #1 ($string) of type string is deprecated in phar:///usr/bin/composer/src/Composer/Util/GitHub.php:103
2022-07-05 15:51:07 +02:00
92e1c26c3b
Disallow plugins by throwing an exception if non-interactive to avoid half-broken runtime states ( #10920 )
...
* Disallow plugins by throwing an exception if non-interactive to avoid half-broken runtime states, fixes #10912
* Also allow BC mode for lock files older than 2.2.0 to keep plugins working there
* Allow locker to be accessed by plugin manager at init time
* Update allow-plugins docs
Co-authored-by: Damien Tournoud <damien@platform.sh>
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2022-07-05 15:44:30 +02:00
796d2bae08
Merge branch '2.3'
2022-07-01 12:15:30 +02:00
726669084b
Reverting release version changes
2022-07-01 12:10:47 +02:00
f69e63262d
Release 2.3.8
2022-07-01 12:10:47 +02:00
618fcb800b
Merge branch '2.2' into 2.3
2022-07-01 12:05:18 +02:00
f14b02b9c9
Reverting release version changes
2022-07-01 12:01:26 +02:00
509dcbd4f8
Release 2.2.15
2022-07-01 12:01:26 +02:00
c3bb27960b
Fix other issues with readonly caches, refs #10906
2022-07-01 11:55:43 +02:00
f8324e0524
Fix support for read-only caches where the filesystem is not writable ( fixes #10906 )
2022-07-01 11:50:26 +02:00
7ab4306c78
Fix TypeError ( #10904 )
...
Fix string type requirement in case of NULL value:
[TypeError]
Composer\Command\InitCommand::parseAuthorString(): Argument #1 ($author) must be of type string, null given, called in phar:///composer.phar/src/Composer/Command/InitCommand.php on line 345
2022-07-01 11:15:29 +02:00
424547bb70
Correctly merge boolean flag of allow-plugin config ( #10909 )
2022-07-01 11:08:35 +02:00
1812862d5e
Update phpstan to latest, update baseline (1909, 103)
2022-06-30 17:07:18 +02:00
efd426f8bb
Extract some common logic for filtering away dev requirements into a RepositoryUtils
2022-06-30 15:05:34 +02:00
de9996d4c4
Output exception class when audit fails
2022-06-30 14:28:16 +02:00
f9db69ae1f
Merge pull request #10898 from Seldaek/meta_advisories
...
Move security advisory loading to repositories
2022-06-28 20:31:03 +02:00
d880ab68cf
Allow use of --locked with depends and prohibits ( #10834 )
...
* Allow use of --locked with depends and prohibits
* Only include other repos if not --locked
* Move logic to appease PHPStan
* Load a PlatformRepository when reading lock file
2022-06-25 17:06:58 +02:00
0196690ab3
Disable automatic audit at the end of install step to keep things fast, switch --no-audit to an opt-in --audit flag
2022-06-24 16:54:30 +02:00
8c9f82dc1e
Move security advisory loading to repositories, allows others to provider them and reduces load on packagist.org for summary advisory reports
2022-06-24 16:26:57 +02:00
978037fbfa
Fix build
2022-06-24 11:12:57 +02:00
4229c2c641
Merge branch '2.3' into main
2022-06-24 11:10:07 +02:00
f7e88099af
Merge branch '2.2' into 2.3
2022-06-24 11:09:45 +02:00
6776cef441
Fix: ValidatingArrayLoader [TypeError]: strcasecmp(): Argument #1() must be of type string, int given ( #10897 )
2022-06-24 10:30:33 +02:00
ddecd5e328
Add hint to why-not that calling update with a temporary constraint can also help elucidate an issue
2022-06-23 21:16:12 +02:00
eba49147e7
Add warning when the latest version of a package cannot be auto-selected in require/init/create-project, fixes #10884 ( #10896 )
2022-06-23 14:37:04 +02:00
a5fdc00de1
Remove duplicate function in RootPackageInterface, fixes #10895
2022-06-23 13:39:39 +02:00
658f56ff13
Fix audit command to exit with amount of advisories matched
2022-06-23 12:31:09 +02:00
e3c46cb2b2
Audit locked packages if update is called with --no-install, fixes #10894
2022-06-22 16:36:54 +02:00
611b215896
Fix PHPStan issues and a couple minor bugs in audit functionality, refs #10798
2022-06-22 15:39:51 +02:00
d93239ddd9
Add audit command to check for security issues ( #10798 )
...
Closes #10329
2022-06-22 15:15:01 +02:00
4131f7cf4c
Static lambda ( #10854 )
...
Lambdas not (indirect) referencing $this must be declared static.
2022-06-22 14:19:18 +02:00
b627816781
Merge branch '2.3' into main
2022-06-22 13:49:30 +02:00
30a8b82b15
Merge branch '2.2' into 2.3
2022-06-22 13:49:11 +02:00
690ab5166a
Ignoring passed arguments for @putenv, closes #10846
2022-06-22 13:40:35 +02:00
5730c24c92
Rethrow path repo init failures with path information, closes #10845
2022-06-22 13:30:39 +02:00
d132b9e6fd
Fixup
2022-06-22 13:11:28 +02:00
53680afb85
Merge branch '2.3' into main
2022-06-22 13:09:06 +02:00
81043c5691
Add git version to diagnose command, and warn if <2.24, closes #10832
2022-06-22 13:05:35 +02:00
567423e9f7
Removed blank line in missing extensions hint when having no php.ini loaded file ( #10839 )
2022-06-22 12:29:36 +02:00
bad3eb2cd9
Update deps, update baseline (1958, 103)
2022-06-22 09:49:09 +02:00
16ee2e479f
Merge branch '2.2' into 2.3
2022-06-22 09:16:23 +02:00
5c68c2c86d
Fix case where branches cannot be listed in GitDownloader, fixes #10888
2022-06-22 08:50:55 +02:00
b025971bb8
Add missing strict type decl, closes #10863
2022-06-22 08:17:18 +02:00
279b518518
No useless sprintf ( #10878 )
...
There must be no sprintf calls with only the first argument.
2022-06-21 21:19:09 +02:00
4714fd5a7b
No useless return ( #10877 )
...
There should not be an empty return statement at the end of a function.
2022-06-21 21:17:47 +02:00
805b7f12f9
No alias functions ( #10864 )
...
Primary functions shall be used instead of aliases.
2022-06-21 21:16:04 +02:00
e8530699c3
Add --strict-psr flag to dump-autoload to fail the process if psr violations were detected, fixes #10241 ( #10886 )
2022-06-20 13:57:20 +02:00
c2046566fc
Merge pull request #10885 from Seldaek/classmapgen
...
Make use of composer/class-map-generator and deprecate ClassMapGenerator class
2022-06-20 13:47:26 +02:00
7d4d941392
Make use of new composer/class-map-generator package and build up BC layer
2022-06-19 14:02:24 +02:00
3e844cc48f
`composer bump` - Fix typo in the warning message ( #10841 )
...
Change warning text 'Alternatively you can use --dev-only to only bump dependencies within "require-dev"'
that said `--dev` instead of `--dev-only`.
2022-06-12 21:44:03 +02:00
03fbcdbf07
Fix exported path with space in binary installer proxy ( #10836 )
2022-06-10 21:56:11 +02:00
6186d0c1d5
Add --gc flag to cache-cache command and ability to GC vcs/repo caches, fixes #7834 ( #10826 )
2022-06-09 11:46:00 +02:00
0fd845eeaf
Add --major-only flag to outdated/show commands to restrict the list to packages with major updates available, fixes #10439 ( #10827 )
2022-06-09 11:45:32 +02:00
70f2dd6edd
Add bump command to bump requirements to the currently installed version, fixes #7273 ( #10829 )
2022-06-09 11:43:59 +02:00
73fd0f22e8
Fix phpstan 8.1 build
2022-06-08 20:03:59 +02:00
367012513d
Merge branch '2.3' into main
2022-06-06 16:49:52 +02:00
b39608753b
Reverting release version changes
2022-06-06 16:43:28 +02:00
10cd375cf8
Release 2.3.7
2022-06-06 16:43:28 +02:00
cb76394800
Merge branch '2.2' into 2.3
2022-06-06 16:34:34 +02:00
ba2ce37cd9
Reverting release version changes
2022-06-06 16:32:51 +02:00
8c7a2d200b
Release 2.2.14
2022-06-06 16:32:50 +02:00
fbc85dede8
allow chained proxy-binary php-inclusions ( #10823 )
...
* allow chained proxy-binary php-inclusion by skipping redundant “phpvfscomposer” stream-wrapper registration
2022-06-06 16:14:54 +02:00
e3527ea37f
Detect broken symlinks when checking for a package's presence, fixes #6708
2022-06-06 15:22:49 +02:00
a76a1c9fc2
Fix parsing of multi-line arrays in funding yml, fixes #10784
2022-06-06 14:49:37 +02:00
8792163676
Merge branch '2.3' into main
2022-06-06 10:23:04 +02:00
a0b7896231
Fix processing null config value in DiagnoseCommand
...
Fixes #10814
2022-06-06 09:58:15 +02:00
1e9210f7b1
Fix TypeError when a JSON file can not be read ( #10818 )
2022-06-04 15:20:58 +02:00
3b204cb6f2
Specify optional array keys in `ConfigReturnTypeExtension`
2022-06-02 21:38:39 +02:00
15f7d24e7e
Parse openssl 3 versions cleaner
2022-06-02 21:17:44 +02:00
829fca0be1
Split direct/transitive dependencies in two groups in outdated command, fixes #10447 ( #10779 )
2022-06-01 22:14:01 +02:00
6f0ac07ebe
Include completion file for bash completion generation, refs #10320
2022-06-01 22:08:31 +02:00
ef06702e45
Merge pull request #10320 from GromNaN/command-completion
...
Add completion to commands options and arguments
2022-06-01 21:59:39 +02:00
f58b72a43b
Reverting release version changes
2022-06-01 21:57:14 +02:00
0f43aa1652
Release 2.3.6
2022-06-01 21:57:13 +02:00
556450b15b
Allow using temporary update constraints on all packages (incl non-root), fixes #10436 ( #10773 )
2022-05-27 14:51:46 +02:00
d971f2e37e
Merge branch '2.3' into main
2022-05-25 22:05:15 +02:00
5b067a1b29
Update phpstan to latest
2022-05-25 22:02:22 +02:00
202ef9031c
Merge branch '2.2' into 2.3
2022-05-25 21:44:40 +02:00
5d353716d3
Reverting release version changes
2022-05-25 21:37:26 +02:00
de11c9819a
Release 2.2.13
2022-05-25 21:37:25 +02:00
88e1f0f9b5
Make sure repos are always initialized with a repo manager if possible, and make sure async is always enabled on the process executor, fixes #10783 ( #10799 )
2022-05-24 21:32:36 +02:00
654ecc759a
Check that symlink function exists before using it in path repo, fixes #10786
2022-05-24 21:21:47 +02:00
b2006fbe9c
replace 'for' loop with 'str_repeat' function ( #10788 )
2022-05-24 21:12:10 +02:00
865886e5c5
Always show deprecation notices even if silenced
2022-05-24 17:35:50 +02:00
Jordi Boggiano