0ab4dfba7c
Change audit.ignore behavior before 2.6.0 ( #11605 )
...
* Still report ignored security advisories
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2023-09-01 10:04:31 +02:00
25f4854ad7
Fix typo 03-cli.md ( #11587 )
2023-08-30 18:03:12 +02:00
388485b98a
Update 05-repositories.md ( #11603 )
2023-08-30 11:46:40 +02:00
c5baa37cdf
Update Silverstripe casing ( #11565 )
2023-08-03 11:28:29 +02:00
f752a9e358
Unify wording in docs ( #11545 )
2023-07-21 14:47:54 +02:00
0cdabcc4ee
Add audit.ignored config setting to ignore security advisories by id or CVE id, fixes #11298 ( #11556 )
2023-07-21 14:36:38 +02:00
69746f699f
docs: add binary dependencies ( #11505 )
2023-07-01 14:20:19 +02:00
d05f4791cd
Fix outdated package name regex pattern in documentation ( #11523 )
2023-07-01 14:04:02 +02:00
6b146f5195
Update plugins testing info
...
Refs https://github.com/composer/composer/issues/6485#issuecomment-1525807064
2023-06-21 13:54:24 +02:00
24361ae654
Merge branch '2.5'
2023-05-23 16:25:24 +02:00
6111ff5cda
Update 05-repositories.md ( #11459 )
...
The verb phrase is 'internally' is an adverb describing the sort of seeing that Composer is doing. IE: Composer internally sees. The sentence _is_ much clearer when the adverb is moved earlier in the sentence, but this mutation necessitates a comma separating the adverb from the noun.
2023-05-18 23:11:15 +02:00
3a48e39375
Return null for install path for metapackages instead of an empty path which then resolves to the root package's path ( #11455 )
...
Fixes #11389
2023-05-14 13:46:46 +02:00
9555ae13a6
Clarifies COMPOSER_NO_DEV documentation. ( #11447 )
...
COMPOSER_NO_DEV applies to composer require as well.
2023-05-02 22:44:29 +02:00
c23beac9c5
Fix markdown: Move headline out of quote ( #11363 )
...
This was caused by
> Add note about issue with caret operator in PowerShell (#11351 )
Related: #11288 , #11351
2023-03-17 14:12:52 +01:00
cd137ee29b
Add security to support options ( #11271 )
...
This support option allows projects to specify a URL to the project's
vulnerability disclosure policy (VDP).
2023-03-10 22:28:10 +01:00
d1ab1255b5
Add rm alias to composer remove command ( #11367 )
...
* rm alias
* review
2023-03-10 22:27:20 +01:00
acc1869742
Clarify readme docs
2023-03-10 17:51:56 +01:00
de3698f535
Clarify possible credential storage locations ( #11358 )
2023-03-10 14:13:56 +01:00
1f164244ab
Add note about issue with caret operator in PowerShell ( #11351 )
...
Refers to #11288
2023-02-27 13:34:21 +01:00
4b94e55b03
Add extra.plugin-optional to auto-disable plugins in non-interactive mode ( #11315 )
2023-02-10 13:19:41 +01:00
7290f5b437
Document recovering from invalid merges on composer.lock and composer.json ( #11154 )
2022-12-21 10:16:02 +01:00
5f1ec99e4a
Update how-to-install-untrusted-packages-safely.md ( #11187 )
2022-11-16 13:42:58 +01:00
b44e39cc8c
Update 05-repositories.md ( #11180 )
...
* Update 05-repositories.md
consistency with previous example
* Update 05-repositories.md
2022-11-13 15:27:23 +01:00
7dfe4a38c8
Use binary-only images for installing Composer ( #11170 )
...
Document optimal way of copying Composer binary using `COPY --from` in Dockerfiles by using binary-only image.
2022-11-03 21:50:22 +01:00
6e55cb36d8
Add support for adding Command classes as scripts, ( #11151 )
...
* Add support for adding Command classes as scripts, fixes #11134
* Allow all options to be forwarded and allow using references to other scripts with args
* Fix build
* Add more checks
* Ensure exceptions are not swallowed, and remove naming restriction by using a single-command app
* Update docs
* Add tests, fix issue merging params when combining nested scripts and CLI params
2022-10-28 14:24:55 +02:00
bc29ffa500
Add network timeout issue to troubleshooting docs, fixes #11036
2022-10-27 16:58:21 +02:00
96e88cf84d
Merge branch '2.4'
2022-10-13 16:54:55 +02:00
4faa8c03ce
Update docs about root usage, refs #11093
2022-10-13 16:53:33 +02:00
1c669428da
Update link text to runtime page in documentation ( #11115 )
2022-10-13 15:57:19 +02:00
52f91b2dd9
Add test and documentation regarding audit command when no packages are required ( #11092 )
2022-10-13 10:53:26 +02:00
632f63a9a3
Fix typo in "WordPress" ( #11082 )
2022-10-12 17:02:26 +02:00
8ed7c46179
Add download-only mode ( #11041 )
...
composer install --download-only to prime the cache/download archives but not do any actual of the actual installing
Fixes #11035
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2022-10-12 13:56:35 +02:00
7df744531b
Merge branch '2.4'
2022-10-12 11:27:30 +02:00
f8435b6d10
Unify command names in the docs ( #11071 )
2022-10-12 10:55:57 +02:00
436a112651
Clarify temporary constraint usages and throw if an unresolvable constraint is provided
2022-10-11 13:34:45 +02:00
e870206c4a
Add "--dry-run" to bump command ( #11047 )
2022-09-19 08:45:49 +02:00
f1df7de727
Replace deprecated `PSR-2` with `PSR-12` ( #11058 )
...
At the top of https://www.php-fig.org/psr/psr-2/ , it says:
> Deprecated - As of 2019-08-10 PSR-2 has been marked as deprecated. PSR-12 is now recommended as an alternative.
Looking at the PSR-12 docs, the summary of changes implies that they mostly took PSR-2 and extended it to clarify new language features.
2022-09-14 12:51:36 +02:00
740de14a39
Fix the heading levels for the doc about composer repositories ( #11030 )
2022-08-30 14:10:28 +02:00
ceec6ff8e2
Documentation code syntax highlighting ( #11011 )
...
* Add newline at end of file.
* Create a uniformat in the code syntax highlighting by using the main syntax `shell` instead of the alias `bash`/`sh`.
* Added (of corrected) the missing code syntax highlighting.
* Split the shell commands from the text outputs.
* Fix JSON samples formatting.
* Checked the commands and updated the text output.
2022-08-20 12:23:00 +02:00
20b3e3e79c
Fix docs for issue composer/satis#656 ( #11005 )
2022-08-17 23:24:40 +02:00
9b6d27f810
Environment variable for `--no-audit`. ( #10998 )
...
Fixes #10997
2022-08-17 11:44:18 +02:00
058beef20a
CheckPlatformReqs: Add json format output ( #10979 )
...
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2022-08-16 14:19:53 +02:00
41a13fa0a1
Merge branch '2.2'
2022-08-16 11:50:56 +02:00
2152b20a94
Correct prohibits/why-not example command ( #10994 )
...
Running the example command `composer prohibits php:8` returns an error, "Not enough arguments (missing: "version")."
2022-08-16 11:45:35 +02:00
2fd4275e62
Update 03-cli.md ( #10995 )
...
Crosslink COMPOSER_NO_DEV
2022-08-16 11:28:46 +02:00
a3f7c31ea7
Add json format to Audit command ( #10965 )
2022-07-25 13:13:32 +02:00
4aa3258d19
Improve documentation about the new bash completion feature ( #10962 )
2022-07-22 10:16:22 +02:00
e59812c439
Add prompt suggesting using --dev when require command is used with dev packages ( #10960 )
...
* Add prompt suggesting using --dev when require command is used with packages which appear to be dev, fixes #10939
2022-07-21 14:40:21 +02:00
e43cae6231
Add COMPOSER_PREFER_STABLE and COMPOSER_PREFER_LOWEST env vars, fixes #10919
2022-07-20 22:29:27 +02:00
4182223762
Remove -p from --patch-only, --platform took it ( #10956 )
2022-07-20 21:06:14 +02:00
8c488b9b08
Add "r" alias for require ( #10953 )
...
Co-authored-by: a.dmitryuk <a.dmitryuk@movavi.com>
2022-07-18 13:04:49 +02:00
31c7474cde
Clarify that install path is absolute but not realpath'd, fixes #10945
2022-07-17 21:59:18 +02:00
70b78137a9
Merge branch '2.3'
2022-07-05 16:54:43 +02:00
3764073b43
Merge branch '2.2' into 2.3
2022-07-05 16:08:35 +02:00
92e1c26c3b
Disallow plugins by throwing an exception if non-interactive to avoid half-broken runtime states ( #10920 )
...
* Disallow plugins by throwing an exception if non-interactive to avoid half-broken runtime states, fixes #10912
* Also allow BC mode for lock files older than 2.2.0 to keep plugins working there
* Allow locker to be accessed by plugin manager at init time
* Update allow-plugins docs
Co-authored-by: Damien Tournoud <damien@platform.sh>
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2022-07-05 15:44:30 +02:00
796d2bae08
Merge branch '2.3'
2022-07-01 12:15:30 +02:00
618fcb800b
Merge branch '2.2' into 2.3
2022-07-01 12:05:18 +02:00
ac7a6e3326
Update docs, refs #10909
2022-07-01 11:35:50 +02:00
0196690ab3
Disable automatic audit at the end of install step to keep things fast, switch --no-audit to an opt-in --audit flag
2022-06-24 16:54:30 +02:00
92ff8e5bc6
Audit command doc improvements ( #10893 )
2022-06-23 12:59:45 +02:00
d93239ddd9
Add audit command to check for security issues ( #10798 )
...
Closes #10329
2022-06-22 15:15:01 +02:00
bbcadcb35e
Hint at improved merge conflict resolving ( #10840 )
2022-06-22 13:47:15 +02:00
e8530699c3
Add --strict-psr flag to dump-autoload to fail the process if psr violations were detected, fixes #10241 ( #10886 )
2022-06-20 13:57:20 +02:00
6186d0c1d5
Add --gc flag to cache-cache command and ability to GC vcs/repo caches, fixes #7834 ( #10826 )
2022-06-09 11:46:00 +02:00
0fd845eeaf
Add --major-only flag to outdated/show commands to restrict the list to packages with major updates available, fixes #10439 ( #10827 )
2022-06-09 11:45:32 +02:00
70f2dd6edd
Add bump command to bump requirements to the currently installed version, fixes #7273 ( #10829 )
2022-06-09 11:43:59 +02:00
e9b44b4499
Document files autoloading order, fixes #10509
2022-06-07 15:27:54 +02:00
7cf3b01631
Added documentation about HTTP Bearer Auth ( #10780 )
...
Bearer Auth has been added here:
- 548505f103f964b83018#8671
- #8642
but it was not documented in this file.
2022-06-07 14:04:04 +02:00
367012513d
Merge branch '2.3' into main
2022-06-06 16:49:52 +02:00
ab9e18027e
plugins: mention static analysis support ( #10812 )
2022-06-06 16:42:24 +02:00
0fad6a07a1
Add Docker information ( #9910 )
2022-06-06 10:18:22 +02:00
e2645a13b6
Merge branch '2.3' into main
2022-06-01 22:00:44 +02:00
ef06702e45
Merge pull request #10320 from GromNaN/command-completion
...
Add completion to commands options and arguments
2022-06-01 21:59:39 +02:00
e1ab520d64
Merge branch '2.2' into 2.3
2022-06-01 21:39:31 +02:00
955194f896
docs: Fix inconsist semver operator suggestion ( #10810 )
...
Using caret over tilde is better since it behaves the same as in npm:
https://jubianchi.github.io/semver-check/#/constraint/~3.0
But when this change was introduced in https://github.com/composer/composer/pull/5396 ,
it was not complete.
2022-05-31 13:24:38 +02:00
176d25851d
Fix docs quoting, fixes #10778
2022-05-13 15:55:51 +02:00
1c6ba6af47
Minor rewording from autoloader to bin directory ( #10776 )
2022-05-13 14:37:32 +02:00
d99e059aa3
Add bash completions to docs
2022-05-13 13:58:02 +02:00
bc1fd3c8b7
Move navigation arrows to the bottom ( #10769 )
...
Probably by merging other PR the arrows were not at the bottom.
2022-05-12 10:24:53 +02:00
f728b0b007
clarify `config.platform` short notation ( #10741 )
2022-04-26 16:51:30 +02:00
78d5050832
Docs: clarify caret contraint with ^0.0.x constraint ( #10728 )
2022-04-14 10:47:28 +02:00
615530f0a1
Merge branch '2.2' into main, update baseline (2085, 104)
2022-04-13 16:18:25 +02:00
0a8dfe6ef7
Clarify that autoloader-suffix should be a non-empty-string, fixes #10720 ( #10725 )
2022-04-13 15:17:07 +02:00
bb0edce095
Fixed lock file being used when lock:false is in config, refs #10715 ( #10726 )
2022-04-13 14:52:13 +02:00
d916ac1af3
Fix docs for path repo reference option, closes #10718
2022-04-13 12:16:21 +02:00
aad2f86edf
Merge branch '2.2' into main
2022-03-15 22:20:21 +01:00
6b97524b25
Load plugins which modify install path early, fixes #10618 ( #10621 )
2022-03-15 22:11:19 +01:00
c3a41b944e
Allow global ignore-platform-req ( #10616 )
2022-03-15 15:29:25 +01:00
5122bd42fb
Merge branch '2.2' into main
2022-03-15 13:11:59 +01:00
bf235eba56
Add note about plugin autoloading, refs #10587
2022-03-15 12:24:35 +01:00
91a0a4c7d8
Also update requirements in docs
2022-02-23 14:33:14 +01:00
61ed47baba
Update 04-schema.md ( #10554 )
...
Fix grammar to make the sentence grammatically correct
2022-02-21 13:33:20 +01:00
868b75d5e8
Fix broken links, refs #10542
2022-02-19 12:52:00 +01:00
7328f5e5db
Renamed the only file with a quote character to remove it ( #10542 )
...
The quote character can be problematic and as this is the only one, just removing it makes the codebase more compatible with other systems that forbid the character as a matter of policy.
2022-02-19 12:49:55 +01:00
40de07569d
Merge branch '2.2' into main
2022-02-16 16:05:05 +01:00
acea849c51
Clarify plugin docs slightly wrt pre-operations-exec event
2022-02-16 14:58:24 +01:00
4376153912
Improve untrusted package install docs
2022-02-16 14:50:38 +01:00
5c98a2cf8e
Add phpstan-symfony to get type info about console InputInterface, fix many errors ( #10476 )
...
Extract common init/require commands functionality into PackageDiscoveryTrait
Extract some helper methods into BaseCommand for better types
2022-02-16 13:24:57 +01:00
a0b0ddcd73
Add config option for update reference in path repository ( #10488 )
2022-02-07 13:54:17 +01:00
ac8fb8cc57
Merge branch '2.2' into main
2022-02-04 17:01:51 +01:00
Dezső BICZÓ