8f3fed674b
Clean up md5/sha1 usages, upgrade algos where possible ( #12088 )
...
* Clean up md5/sha1 usages, upgrade algos where possible
* Fully qualify PHP_VERSION_ID constant usages
* Fix 7.2 build
2024-08-21 17:06:42 +02:00
48d345ac3e
Update deps, fix some phpstan issues
...
Update baseline (1484, 84)
2024-08-21 14:47:44 +02:00
eeff1c79ba
Fix addressability of branches containing # characters ( #12042 )
...
Fixes #12029
2024-07-25 16:46:57 +02:00
7504685a2e
Update phpstan and add composer/pcre extensions ( #12045 )
...
* Update phpstan and add composer/pcre extensions
* Update baseline (1516)
2024-07-25 16:28:25 +02:00
685add70ec
Refactor the BasePackage::$stabilities into a constant
2024-07-12 11:28:26 +02:00
b2832867e6
Fix some edge cases of tilde constraints in bump command ( #12038 )
...
* Fix: Add test case for not dropping patch version for tilde
* Fix some edge cases of tilde constraints in bump command, fixes #11218
---------
Co-authored-by: Matthias Vogel <git@kanti.de>
2024-07-10 09:47:37 +02:00
dffa0a73a7
Fix typo for IO tests ( #12027 )
2024-07-02 00:30:29 +02:00
5aa7b03b9d
Fix test
2024-06-10 15:09:06 +02:00
6bd43dff85
Merge pull request from GHSA-v9qv-c7wm-wgmf
2024-06-10 14:56:13 +02:00
fa3b9582c3
Fix secure-http check to avoid bypass using emojis
2024-06-10 14:48:02 +02:00
9dfcf62335
Fix new platform requirements from composer.json not being checked when composer.lock is outdated, fixes #11989 ( #12001 )
2024-05-31 17:53:52 +02:00
dc857b4f91
Fixed PSR violations for classes not matching the namespace of a rule being hidden, fixes #11957
2024-05-31 17:52:05 +02:00
c1be804a0c
Fix UX when a non-required plugin is still present in vendor dir ( #12000 )
...
Composer now skips it and does not prompt if it is not allowed to run, fixes #11944
2024-05-31 10:29:56 +02:00
37d722e73c
PHPStan/tests updates ( #11996 )
...
* Remove a bunch of inline ignores and migrate all PHPUnit assertions to static calls
* Update baseline (1573, 93)
* Update commit hash
2024-05-29 23:12:06 +02:00
dd8af946fd
Fix tests
2024-05-29 22:08:42 +02:00
3773f77527
Fix perforce arg not being escaped correctly
2024-05-29 15:03:59 +02:00
f83b6b1026
Enable new phpstan option
2024-05-27 17:11:31 +02:00
5bb30ca170
Update PHPStan ( #11976 )
...
* Update PHPStan
* Update inline ignores to `@phpstan-ignore` with error identifier
2024-05-22 09:09:04 +02:00
4d7476ca30
composer#11852 fix: ability to remove autoload* keys ( #11967 )
2024-05-08 11:19:05 +02:00
80631d2fc8
Fix one more case of unsetting a key in an object
2024-04-29 11:19:52 +02:00
232f4e7a5c
Fix config command issue handling objects in some conditions, fixes #11945
2024-04-29 10:59:35 +02:00
b0ec0f96ad
Update phpstan deps and fix a few array_filter issues
2024-04-19 17:00:50 +02:00
3cc490d4c4
Refactor proxy handling to require https_proxy ( #11915 )
...
Composer has always allowed a single http_proxy (or CGI_HTTP_PROXY)
environment variable to be used for both HTTP and HTTPS requests. But
many other tools and libraries require scheme-specific values.
The landscape is already complicated by the use of and need for upper
and lower case values, so to bring matters inline with current practice
https_proxy is now required for HTTPS requests.
The new proxy handler incorporates a transition mechanism, which allows
http_proxy to be used for all requests when https_proxy is not set and
provides a `needsTransitionWarning` method for the main application.
Moving to scheme-specific environment variables means that a user may
set a single proxy for either HTTP or HTTPS requests. To accomodate this
situation during the transition period, an https_proxy value can be set
to an empty string which will prevent http_proxy being used for HTTPS
requests.
2024-04-17 14:34:26 +02:00
92f641ac3d
Fix show command output to remove v prefixes on versions, making for more uniform output, fixes #11925
2024-04-15 13:23:25 +02:00
b12a88b7f3
Fix call
2024-03-22 09:29:43 +01:00
54870a78c4
Add a new test to confirm that show --direct <name> works with direct dependents/dev-dependents
2024-03-21 16:59:41 +01:00
07fa4255d6
Add support for php extension packages ( #11795 )
...
* Update schema
* Validate php-ext is only set for php-ext or php-ext-zend packages
* Make sure the pool builder excludes php-ext/php-ext-zend
2024-03-20 22:04:58 +01:00
94fe294545
Fix self-update tests on releases
2024-03-11 17:32:50 +01:00
66acb84c12
Fix update --lock to avoid updating all metadata except dist/source urls and mirrors ( #11850 )
...
We now update the existing package instead of reverting changes in the updated package to ensure we keep all metadata intact, fixes #11787
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2024-03-05 11:32:40 +01:00
d7cdb28b28
Try to fix CI
2024-02-23 10:54:34 +01:00
a0d474f75c
Add a warning message when Composer is not able to guess the root package version ( #11858 )
...
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2024-02-23 10:47:36 +01:00
1b7a71f7e7
Add tests for SelfUpdateCommand ( #11816 )
...
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2024-02-21 20:59:50 +01:00
64e4eb356b
Merge pull request from GHSA-7c6p-848j-wh5h
...
* Fix usage of possibly compromised installed.php/InstalledVersions.php at runtime, refs GHSA-7c6p-848j-wh5h
* Fix InstalledVersionsTest regression
2024-02-08 14:33:59 +01:00
7a6bb18e21
Adds a test for no dev ( #11833 )
2024-02-08 11:06:34 +01:00
67d80e1c9d
Fix php7.2
2024-02-07 22:44:22 +01:00
df8f9f05a3
Update tests
2024-02-07 22:37:22 +01:00
7cb92a90c8
Introduce COMPOSER_AUDIT_ABANDONED env var ( #11794 )
...
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2024-02-07 22:13:36 +01:00
338bc16a11
test: Covers audit of pkg with no sec advisories ( #11789 )
2024-02-07 11:40:29 +01:00
9a656854ad
ValidatingArrayLoader: fix link validation with missing name ( #11830 )
2024-02-06 17:18:41 +01:00
0f70c0a9c9
Add detection of constraints which do not match anything in validate command, fixes #11802 ( #11829 )
2024-02-06 12:57:52 +01:00
55db88f51b
Add error when composer show --direct <transient-dependency> is used to show a dependency which is not direct, fixes #11728
2024-01-11 09:53:00 +01:00
284821543a
Merge branch '2.6'
2024-01-08 16:10:20 +01:00
44f02a5c86
Add COMPOSER_FUND=0 env var to disable calls for funding ( #11779 )
2024-01-08 15:10:49 +01:00
be71bf056e
Fix support for versions with 4 components in VersionSelector, fixes #11716
2024-01-08 14:56:08 +01:00
071fbcf347
Fix warnings incorrectly being shown when using require with upper bound ignored on platform requirements, fixes #11722 ( #11786 )
2024-01-08 14:48:24 +01:00
534bc20beb
Add support for combining show --self with --installed or --locked ( #11785 )
2024-01-08 14:14:44 +01:00
3be0ca8467
Adds a test for invalid arg combo ( #11783 )
2024-01-08 11:03:34 +01:00
53a1f32061
Add --sort-by-age to show/outdated commands, and also release date for latest package in --latest mode ( #11762 )
2023-12-20 15:37:27 +01:00
86cd364901
Audit: add severity to plain and table output ( #11702 )
2023-12-19 19:11:50 +01:00
9b0f9b40a4
Show package source in very verbose updates, fixes #11733 ( #11763 )
2023-12-19 17:17:48 +01:00
Jordi Boggiano