10667db1ba
Only override ist url if it is not handled gracefully already
2024-01-10 13:42:01 +01:00
547a635287
Fix build
2024-01-10 13:34:56 +01:00
042a8c2128
Ensure dist url/type/checksum remain the same when doing lock hash updates, refs #11787
2024-01-10 13:33:49 +01:00
284821543a
Merge branch '2.6'
2024-01-08 16:10:20 +01:00
44f02a5c86
Add COMPOSER_FUND=0 env var to disable calls for funding ( #11779 )
2024-01-08 15:10:49 +01:00
be71bf056e
Fix support for versions with 4 components in VersionSelector, fixes #11716
2024-01-08 14:56:08 +01:00
071fbcf347
Fix warnings incorrectly being shown when using require with upper bound ignored on platform requirements, fixes #11722 ( #11786 )
2024-01-08 14:48:24 +01:00
534bc20beb
Add support for combining show --self with --installed or --locked ( #11785 )
2024-01-08 14:14:44 +01:00
d00e38a038
[11744] handle missing hyphen when attempting to run self-update… ( #11775 )
...
* [11744] handle missing hyphen when attempting to run self-update command
* fix: [1744] silently fix the "self update" command
2024-01-04 17:02:34 +01:00
8246892d48
Fix PackageInterface parameter comments ( #11777 )
2024-01-04 14:49:27 +01:00
efe6e44883
Perform audit on Composer and its dependencies during diagnose, fixes #11216 ( #11761 )
2024-01-04 10:55:59 +01:00
12ed21705d
Check for non-platform requirements before warning that no deps are installed on show command, fixes #11760
2023-12-22 17:48:47 +01:00
8e62977cb5
Exposing GitLab's project metadata ( #11734 )
...
* Exposing GitLab's project metadata
* Fixed check about GitLab project's metadata initialization
2023-12-20 16:50:24 +01:00
53a1f32061
Add --sort-by-age to show/outdated commands, and also release date for latest package in --latest mode ( #11762 )
2023-12-20 15:37:27 +01:00
c8f1028ef9
Fix minor error msg issue
2023-12-20 15:16:12 +01:00
86cd364901
Audit: add severity to plain and table output ( #11702 )
2023-12-19 19:11:50 +01:00
9b0f9b40a4
Show package source in very verbose updates, fixes #11733 ( #11763 )
2023-12-19 17:17:48 +01:00
4a209b7d3d
Fix bump command not bumping versions with a v prefix e.g. ^v2.4, fixes #11723 ( #11764 )
2023-12-19 17:17:32 +01:00
3cfd9bf51b
Ensure composer.json gets deleted after a dry run require, fixes #11747
2023-12-19 15:51:39 +01:00
e0f75276a2
Switch default audit.abandoned to fail for 2.7 release
2023-12-18 15:02:10 +01:00
bf6c7f8ea2
Merge branch '2.6'
2023-12-18 10:12:45 +01:00
e14d28baec
Update deps
2023-12-18 10:11:33 +01:00
eaa7dd46f5
Reverting release version changes
2023-12-08 18:32:27 +01:00
683557bd24
Release 2.6.6
2023-12-08 18:32:26 +01:00
aefa46dfba
Add support for "scripts-aliases" in composer.json ( #11666 )
2023-10-27 11:36:59 +02:00
cc653161c3
Merge branch '2.6'
2023-10-26 11:39:41 +02:00
8c0f1e10dc
Display error instead of throwing exception when unable to update with temporary constraint ( #11692 )
2023-10-26 11:38:02 +02:00
81b662d388
Suggest running 'require' not 'update' if a root req fails to update ( #11691 )
2023-10-26 11:08:03 +02:00
03085c8181
Fix Git Driver to use supported Git VCS driver URL
...
Otherwise the URL may not be supported since 3bb191a46fixes #11409 (#11453 ), 2023-05-07)
2023-10-26 11:06:11 +02:00
899dcedf66
Add --minimal-changes mode to perform partial updates --with-dependencies while changing only what is necessary in other dependencies ( #11665 )
2023-10-26 10:25:04 +02:00
7a09e05560
Bump wildcard constraints to >=current ( #11694 )
2023-10-25 18:04:52 +02:00
c66894278c
Bump dev version to 2.7, fix issues with symfony 7
2023-10-25 17:13:36 +02:00
c827c93b62
Use global constant if available for libpq version ( #11684 )
2023-10-11 14:19:31 +02:00
d2bd9836a6
Reverting release version changes
2023-10-06 10:11:53 +02:00
4b0fe89db9
Release 2.6.5
2023-10-06 10:11:52 +02:00
3e22e1ceda
Fix error when vendor dir contains broken symlinks ( #11670 )
2023-10-06 09:53:39 +02:00
cb363b0e84
Fix autoload generator dump() non-BC signature change in 2.6.4
2023-10-06 09:34:10 +02:00
64c5bdd55b
Reverting release version changes
2023-09-29 10:54:48 +02:00
d75d17c16a
Release 2.6.4
2023-09-29 10:54:47 +02:00
b608b8e87e
feat: improve Composer's output reproducibility ( #11663 )
...
* AutoloadGenerator: add `Locker` parameter to the `dump` method
* AutoloadGenerator: do not create a random hash, re-use the one from the lock file if it exists
* FileSystem: make sure `safeCopy` copy also the file time metadata
2023-09-28 11:43:52 +02:00
892eaacedf
Optimize show -a by loading only the requested package ( #11659 )
...
Fixes #11648
2023-09-27 11:28:33 +02:00
f6ce8349c5
Use CompilingMatcher in DefaultPolicy for performance reasons ( #11638 )
...
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2023-09-27 09:08:29 +02:00
755de04bf5
Fix abandoned package list JSON serialization ( #11647 )
...
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2023-09-26 14:23:45 +02:00
39faacbca9
Reverting release version changes
2023-09-15 09:38:22 +02:00
ff477832e6
Release 2.6.3
2023-09-15 09:38:22 +02:00
e3484c8581
Add audit.abandoned warnings for abandoned packages, fixes #11623 ( #11639 )
2023-09-14 11:30:09 +02:00
3bc72f75cb
Fix build, update deps
2023-09-13 18:17:28 +02:00
e2f5afd4cd
Add warning when duplicate "files" autoload rules are detected ( #11109 )
...
Co-authored-by: Wout Gevaert <wout@wikibase.nl>
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2023-09-13 14:11:00 +02:00
5474dc9b5b
Fixed replaced packages being incorrectly missing when unlocked by an old version ( #11629 )
...
Co-authored-by: Nils Adermann <naderman@naderman.de>
2023-09-13 10:42:47 +02:00
1e4966c313
Get realpath for `ZipArchive` ( #11636 )
2023-09-13 09:59:22 +02:00
1ac0ea8739
Retry curl receive errors when connection reset by peer, fixes #11622
2023-09-12 10:10:53 +02:00
755e89fc91
Fix loading of root aliases on path repo packages when doing partial updates, fixes #11630 ( #11632 )
2023-09-11 17:45:19 +02:00
087b21d687
Fix the promise resolution for the cleanup logic ( #11620 )
2023-09-11 17:40:43 +02:00
75ae504b2c
Reverting release version changes
2023-09-03 14:09:16 +02:00
623e5e1de0
Release 2.6.2
2023-09-03 14:09:15 +02:00
40244dc228
Revert "Set $_SERVER['SCRIPT_NAME'] within proxy command ( #11562 )" ( #11617 )
...
This reverts commit 9c25633d6d
2023-09-03 13:39:48 +02:00
98a588eb90
Avoid COMPOSER env being set if not necessary as it can cause issues with scripts, fixes #11613 , refs #11493
2023-09-03 11:13:54 +02:00
90cbb144b2
Fix exit code 5 on composer require/create-project command ( #11616 )
2023-09-03 10:54:07 +02:00
d221d5c69a
Reverting release version changes
2023-09-01 13:53:09 +02:00
ee851d6b6b
Release 2.6.1
2023-09-01 13:53:08 +02:00
5fae76ce67
Revert "Allow executing binaries which are not marked executable via shell proxies ( #11557 )"
...
This reverts commit c1f2964105
2023-09-01 13:50:20 +02:00
9ab8ef5a71
Reverting release version changes
2023-09-01 10:07:51 +02:00
ea4222fad9
Release 2.6.0
2023-09-01 10:07:50 +02:00
7dc5666f33
Avoid failing the require command if the audit step failed
2023-09-01 10:05:13 +02:00
0ab4dfba7c
Change audit.ignore behavior before 2.6.0 ( #11605 )
...
* Still report ignored security advisories
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2023-09-01 10:04:31 +02:00
1a2bd38764
allow bumping for patch level version constraints fixes #11579 ( #11590 )
2023-08-31 11:05:49 +02:00
1c4ac1c437
Add `dumpautoload --dry-run` option ( #11608 )
2023-08-31 10:35:02 +02:00
6fd145f01e
Allow --strict-psr in `DumpAutoloadCommand` also with --classmap-authoritative ( #11607 )
2023-08-30 21:43:16 +02:00
db53c65986
COMPOSER_DISABLE_NETWORK aware `diagnose` checks; SKIP output ( #11597 )
...
Make `diagnose` checks aware of COMPOSER_DISABLE_NETWORK (true) and skip
Composer network operations that would otherwise spill stack traces into
diagnostic messages and taint the result as error while the check itself
is not applicable/useful within the environment.
`COMPOSER_DISABLE_NETWORK` was released with [2.0.0-alpha1] and intro-
duced in fc03ab9bbhttps://getcomposer.org/changelog/2.0.0-alpha1 > "released 2020-06-03"
2023-08-30 21:35:59 +02:00
83771ce9ba
Fix the mtime of the vendor folder when running composer install ( #11593 )
...
When splitting the logic between the lock file management and the vendor
folder management in composer 2.0, the logic playing nice with make was
broken by running the logic based on operations performed in the lock
file instead of operations performed in the vendor folder.
2023-08-30 18:05:58 +02:00
094fb6cd70
Fix support for react/promise 2.x
2023-08-30 11:38:36 +02:00
bbd2c9613e
Fix uncaught promises when doing synchronous file downloads that fail, fixes #11563
2023-08-30 11:19:47 +02:00
83792838c9
Fix problem output bug when purely numeric versions are condensed
2023-08-30 10:45:57 +02:00
5062338079
Audit: ignores configured repository options ( #11173 )
...
* Audit: ignores configured repository options
* ComposerRepository: add test case to assert that repo http options are used to make security advisory POST request
2023-08-29 15:16:34 +02:00
95dca79fc2
Output error message in verbose mode before asking for credentials, fixes #11570
2023-08-04 11:06:00 +02:00
7ffcaacd08
Fix ignored config merging when audit is present but ignored isnt
2023-08-04 11:05:59 +02:00
9c25633d6d
Set $_SERVER['SCRIPT_NAME'] within proxy command ( #11562 )
2023-08-02 11:55:24 +02:00
f4738d97b7
Add support for Application::setCatchErrors in symfony 6.4+, refs symfony/symfony#50420
2023-07-28 19:33:33 +02:00
0cdabcc4ee
Add audit.ignored config setting to ignore security advisories by id or CVE id, fixes #11298 ( #11556 )
2023-07-21 14:36:38 +02:00
a6c7b0b327
Retry download if curl error 55 is encountered ( #11543 )
2023-07-21 14:29:56 +02:00
3e9c148b63
Fix trailing whitespace in 'composer show -N' ( #11536 )
...
The name column was always padded to maximum width, even if no other columns were printed.
This makes it difficult to use the output e.g. in pipelines.
Fixed for all possible columns, and with tests for two cases (regular show and show outdated).
2023-07-21 11:29:38 +02:00
07f706e57d
Fix 'composer show --platform <package>' erroring if no composer.json is present ( #11533 )
...
Sort of related to #11046 (although this is not a regression, but didn't work before, either)
2023-07-21 11:28:36 +02:00
cf8ea3c70e
GitHubDriver: better handle empty composer.json file ( #11552 )
2023-07-21 11:09:32 +02:00
8f49166ec6
Fix lib-curl-openssl parsing for SecureTransport ( #11534 )
...
On macOS, if libcurl is built against SecureTransport, the platform repository will contain an invalid package name:
% composer show --platform | grep curl
ext-curl 8.2.7 The curl PHP extension
lib-curl 8.1.2 The curl library
lib-curl-(securetransport) openssl 3.1.1 curl (securetransport) openss...
lib-curl-libssh2 1.11.0 curl libssh2 version
lib-curl-zlib 1.2.11 curl zlib version
This change fixes it:
% bin/composer show --platform | grep curl
lib-curl 8.1.2 The curl library
lib-curl-libssh2 1.11.0 curl libssh2 version
lib-curl-securetransport 3.1.1 curl (securetransport) openssl ...
lib-curl-zlib 1.2.11 curl zlib version
(second column width difference comes from the Composer dev version number)
2023-07-21 11:06:03 +02:00
ce876e7a6f
Fix broken junctions leading to installation failure on Windows ( #11550 )
2023-07-21 10:59:59 +02:00
e7016b00a9
Upgrade to react/promise 3.0.0 ( #10429 )
2023-07-20 12:52:28 +02:00
c1f2964105
Allow executing binaries which are not marked executable via shell proxies ( #11557 )
2023-07-19 17:38:21 +02:00
82bc8cf94e
Update deps
2023-07-19 14:57:22 +02:00
1c9fbeb978
Preserve indentation when writing JSON files ( #11390 )
...
Refs #11341
2023-07-19 14:13:06 +02:00
16d1b11c26
Add homepage links in why/why-not commands ( #11308 )
2023-07-19 11:28:17 +02:00
68b7a07187
Feature: Allow local directory paths in repository of type composer ( #11526 )
...
Fixes : #11519
2023-07-18 11:44:53 +02:00
2b18799c44
Fix problem output of exact constraints to state more clearly that only those versions are matched ( #11521 )
...
Fixes #11479
2023-06-23 13:13:20 +02:00
1db0a47080
Add prompt to require command if a package name is not found but there are similar names that could be used ( #11284 )
...
fixes #11279
2023-06-23 11:15:03 +02:00
196ac10505
Remove dead code
2023-06-23 10:57:56 +02:00
06b4923c47
Add fallback dist type extension to temp archive files for URLs without extension, fixes #11513 ( #11520 )
2023-06-22 16:30:48 +02:00
bbea3e5284
Merge branch '2.5'
2023-06-09 17:13:53 +02:00
7b03fa1ba3
Reverting release version changes
2023-06-09 17:13:22 +02:00
4c51614616
Release 2.5.8
2023-06-09 17:13:21 +02:00
3f385d466f
Update types some more, refs #11500
2023-06-09 17:13:09 +02:00
c12b551d3a
Update type declarations on ClassLoader, fixes #11482 ( #11500 )
2023-06-08 16:30:13 +02:00
Jordi Boggiano