5d2d513f97
Follow-up for #5205 : fix high concurrency race condition
...
Composer would fail with an
```
PHP temp directory (/tmp) does not exist or is not writable to Composer. Set sys_temp_dir in your php.ini
```
error when used in parallel. Because it is checking if a file with `md5(microtime())` can be created, which is not sufficiently unique when used in parallel.
Since each Composer instance runs in its own process, this can easily be mitigated by not just partitioning based on time of use, but also based on process ID.
Original investigation: https://www.drupal.org/project/automatic_updates/issues/3338789#comment-14961390
2023-03-17 13:55:30 +01:00
3b16937bae
Pick higher revision number to guarantee successful file retrieval ( #11350 )
2023-03-17 10:23:02 +01:00
32366bc37d
Fix basic auth infinite loop ( #11320 )
2023-03-17 09:13:11 +01:00
1a3f98601f
Merge branch '2.5'
2023-03-15 22:56:15 +01:00
b8f82b244c
Escape % chars in user input before passing to sprintf, fixes #11359
2023-03-15 22:53:29 +01:00
0ba7e0dcbd
Exit with non-zero code if post-install audit fails ( #11362 )
2023-03-15 22:11:23 +01:00
cd137ee29b
Add security to support options ( #11271 )
...
This support option allows projects to specify a URL to the project's
vulnerability disclosure policy (VDP).
2023-03-10 22:28:10 +01:00
d1ab1255b5
Add rm alias to composer remove command ( #11367 )
...
* rm alias
* review
2023-03-10 22:27:20 +01:00
acc1869742
Clarify readme docs
2023-03-10 17:51:56 +01:00
de3698f535
Clarify possible credential storage locations ( #11358 )
2023-03-10 14:13:56 +01:00
efc105eac1
Add proxy value to bin-compat validator ( #11353 )
...
Fix #11352
2023-02-27 16:02:50 +01:00
1f164244ab
Add note about issue with caret operator in PowerShell ( #11351 )
...
Refers to #11288
2023-02-27 13:34:21 +01:00
fe741e0ffe
Merge branch '2.5'
2023-02-24 17:42:18 +01:00
b5aad9ec0d
Fix type error when upgrading composer
2023-02-24 17:41:59 +01:00
1ff942bb44
Fix type errors in key updating logic
2023-02-24 17:41:47 +01:00
ecb69eaa4a
Merge branch '2.5'
2023-02-15 13:10:37 +01:00
b0a110f164
Reverting release version changes
2023-02-15 13:10:06 +01:00
6b67eeea4d
Release 2.5.4
2023-02-15 13:10:06 +01:00
774f04108b
Update changelog
2023-02-15 13:09:51 +01:00
d35cb21749
Match plugin-optional more strictly
2023-02-10 21:13:30 +01:00
b781031413
Added optional plugin check in PluginInstaller ( #11318 )
2023-02-10 21:12:30 +01:00
0dd5811583
Ensure we have a bool for plugin-optional
2023-02-10 14:19:02 +01:00
d8221bd443
PHPStan: Fixed handling of union types in ConfigReturnTypeExtension ( #11312 )
...
Co-authored-by: Markus Staab <m.staab@complex-it.de>
2023-02-10 14:00:33 +01:00
933ca81d6b
Removed unused private `Solver::enableDisableLearnedRules` method ( #11311 )
2023-02-10 13:45:54 +01:00
a9b79ba470
Merge branch '2.5'
2023-02-10 13:24:19 +01:00
c92485a3fb
Reverting release version changes
2023-02-10 13:23:53 +01:00
607a4c0400
Release 2.5.3
2023-02-10 13:23:52 +01:00
6876958083
Update changelog
2023-02-10 13:23:31 +01:00
4b94e55b03
Add extra.plugin-optional to auto-disable plugins in non-interactive mode ( #11315 )
2023-02-10 13:19:41 +01:00
7499d93653
Update lock hash
2023-02-04 15:09:21 +01:00
2484602f8d
Update target version to 2.6
2023-02-04 14:57:31 +01:00
e6ef9eb332
Reverting release version changes
2023-02-04 14:33:23 +01:00
c76c013c55
Release 2.5.2
2023-02-04 14:33:22 +01:00
70ba5c90ba
Update changelog
2023-02-04 14:26:44 +01:00
6e3e801c6a
Update deps
2023-02-03 23:07:37 +01:00
2f2d6c9de7
Fix package sorting logic, fixes #11287
2023-02-03 22:48:18 +01:00
50cded331c
Default exclude patterns for the "archive" command ( #11239 )
...
* Issue #11235 - Adds default exclude patterns for the "archive" command based on the target file name
2023-01-27 17:16:33 +01:00
ad7bc18028
Fix self.version requirements failing the lock file integrity check if on a different version, fixes #11274 ( #11283 )
2023-01-27 16:54:45 +01:00
0a2846cb24
Fix autoloading on PHP 5.6 ( #11285 )
...
* Add a CI check to ensure the autoloader can run on php5.6+
* Fix autoloading on PHP 5.6
2023-01-27 16:26:04 +01:00
5165792f9c
Fix security advisory parsing when filter repo is used, fixes #11281
2023-01-27 11:09:34 +01:00
f6f972a699
Fix require regression with --fixed, fixes #11247
2023-01-19 21:42:22 +01:00
0d96fd8149
Warn when require ends up auto-selecting a feature branch, fixes #11264 ( #11270 )
2023-01-19 21:42:09 +01:00
c7f32820d7
Allow v2 metadata target to provide security advisories without releases. ( #11257 )
2023-01-13 22:20:03 +01:00
70b1863480
Update deps
2023-01-13 14:19:18 +01:00
2431b12230
Test home command ( #11254 )
...
Co-authored-by: alex.theobold <alex.theobold@sykescottages.co.uk>
2023-01-13 09:34:03 +01:00
f21cc3ab25
Merge pull request #11162 from yesdevnull/feat-more-tests
...
Tests for Audit/Remove/Suggests Commands
2023-01-13 08:49:05 +01:00
ca9fb64691
Added tests for the Suggests command
2023-01-06 12:38:47 +11:00
7560873740
Added tests for the Remove command
2023-01-06 12:38:47 +11:00
29ae7b632a
Add "missing lockfile" test for the Audit command
2023-01-06 12:38:40 +11:00
b2304d0b12
Exclude PHPStan extensions from PHPUnit coverage
2023-01-03 18:57:00 +11:00
Wim Leers