1
0
Fork 0
Commit Graph

8256 Commits (9da1948585f11e5af594d1fece682947f1b1fa99)

Author SHA1 Message Date
Jordi Boggiano 5a96e6ae13
Merge branch '2.5' 2023-05-23 23:49:53 +02:00
Jordi Boggiano 23654389da
Fix lock file verification to take into account root provider/replacers and output mismatches there more clearly, fixes #11458 (#11475) 2023-05-23 23:15:07 +02:00
Stefan Grootscholten 9d965b9c65
Fix authentication issues with private bitbucket repos (#11464) 2023-05-23 23:14:11 +02:00
Jørn Støylen 9885d23e2a
Ensure stripos() receives a string
If file_get_contents() returns false, stripos() will throw a TypeError.
Casting to string prevents this from happening.

Closes #11470
2023-05-23 21:11:23 +02:00
Jordi Boggiano 24361ae654
Merge branch '2.5' 2023-05-23 16:25:24 +02:00
Jordi Boggiano e51d755a08
Fix numeric default-branches with v prefix (e.g. v2.x-dev) being treated as non-numeric and receiving an alias like e.g. dev-main 2023-05-23 16:25:08 +02:00
Jordi Boggiano 3a48e39375
Return null for install path for metapackages instead of an empty path which then resolves to the root package's path (#11455)
Fixes #11389
2023-05-14 13:46:46 +02:00
Jordi Boggiano 54808d9bde
Merge branch '2.5' 2023-05-08 14:50:48 +02:00
Dezső BICZÓ 57a48df34e
Support advisories from multiple repositories for the same package (#11436) 2023-05-07 15:12:04 +02:00
Jordi Boggiano a79eef2949
Fix class renaming in plugin manager 2023-05-07 14:53:17 +02:00
Jordi Boggiano 2b58f2c625
Fix getmypid being required as it is not always available, fixes #11401 2023-05-07 14:48:34 +02:00
Jordi Boggiano bf5ae27b93
Fix support for readonly classes as plugins, fixes #11404 2023-05-07 14:39:25 +02:00
Jordi Boggiano 3bb191a464
Add support for env vars and ~ (for HOME) in repo paths for vcs and artifact repositories, fixes #11409 (#11453) 2023-05-07 13:53:32 +02:00
Jordi Boggiano e28a5675b7
Fixed binary proxies to return whatever the original binary returns as well, fixes #11416 (#11454) 2023-05-05 22:24:59 +02:00
Jordi Boggiano cbb7319963
Merge branch '2.5' 2023-05-05 14:16:14 +02:00
Jordi Boggiano 2d2d22d0ec
Fix lock file being more recent than vendor dir when require guesses the constraint after resolution, fixes #11405 2023-05-05 14:15:27 +02:00
Nils Adermann 595559f68d
Remove optional package loading to simplify pool builder (#11450)
Instead we just directly check if any currently loaded package requires
the package to be loaded optionally.
2023-05-02 23:59:36 +02:00
Yanick Witschi 9ced20fd0d Take the short cut 2023-05-02 23:11:20 +02:00
Yanick Witschi 995b806dfe Optimize PoolBuilder to not load replaced targets if not required 2023-05-02 22:10:18 +02:00
Jason Woods 010bad5428 fix: If a replacer is updated to a version that no longer replaces, the replaced package is not loaded 2023-05-02 22:07:57 +02:00
Stephan 11879ea737
ArrayLoader: handle invalid support value (#11440) 2023-04-26 15:26:45 +02:00
David Zülke e0c1ad1448
PlatformRepository library support for libpq (from ext-pq) and librdkafka (from ext-rdkafka) (#11418)
* libpq library version info for ext-pq

* librdkafka library version info for ext-rdkafka

Computes from RD_KAFKA_VERSION, faster than output buffering
2023-04-25 13:59:36 +02:00
Jordi Boggiano 776ff2ea51
Merge branch '2.5' 2023-03-21 11:53:54 +01:00
Jordi Boggiano 766628a8d4
Reverting release version changes 2023-03-21 11:50:06 +01:00
Jordi Boggiano c7cffaad16
Release 2.5.5 2023-03-21 11:50:05 +01:00
Jordi Boggiano 8b0a185d5d
Fixed display of empty objects showing [] instead of {} in config command, fixes #11302 2023-03-21 11:17:55 +01:00
Jordi Boggiano 91b7b0ff3b
Fixed querying of default config values, and fix source display for them, and fix bools to show as bools, fixes #11302 2023-03-21 11:07:57 +01:00
Jordi Boggiano 3988fe2c9c
Fix svndriver type error 2023-03-21 10:50:22 +01:00
Jordi Boggiano 5f298ae294
Merge branch '2.5' 2023-03-21 10:45:40 +01:00
Jordi Boggiano 5c3d8f35db
Update deps, fix phpstan issues, update baseline (1711, 49) 2023-03-21 10:36:42 +01:00
Jordi Boggiano 62f12abcb1
Fix return type of InstalledVersions::getInstalled, fixes #11304 2023-03-21 09:55:28 +01:00
Jordi Boggiano d3adecf583
Fix github header handling to be case insensitive, fixes rate limit extraction (#11366) 2023-03-20 21:42:28 +01:00
Stephan 685a2e6be2
Composer support string (#11386)
* GitHubDriver: fix support is set to string

* GitLabDriver: fix support is set to string

* BitbucketDriver: fix support is set to string

* Fix PHPStan
2023-03-20 20:18:19 +01:00
Edgaras Janušauskas f41abfca34
Add platform check for 64-bit PHP (#11334) 2023-03-20 16:08:12 +01:00
Wim Leers 5d2d513f97
Follow-up for #5205: fix high concurrency race condition
Composer would fail with an
```
PHP temp directory (/tmp) does not exist or is not writable to Composer. Set sys_temp_dir in your php.ini
```
error when used in parallel. Because it is checking if a file with `md5(microtime())` can be created, which is not sufficiently unique when used in parallel.

Since each Composer instance runs in its own process, this can easily be mitigated by not just partitioning based on time of use, but also based on process ID.

Original investigation: https://www.drupal.org/project/automatic_updates/issues/3338789#comment-14961390
2023-03-17 13:55:30 +01:00
AnrDaemon 3b16937bae
Pick higher revision number to guarantee successful file retrieval (#11350) 2023-03-17 10:23:02 +01:00
Uladzimir Tsykun 32366bc37d
Fix basic auth infinite loop (#11320) 2023-03-17 09:13:11 +01:00
Jordi Boggiano 1a3f98601f
Merge branch '2.5' 2023-03-15 22:56:15 +01:00
Jordi Boggiano b8f82b244c
Escape % chars in user input before passing to sprintf, fixes #11359 2023-03-15 22:53:29 +01:00
Ion Bazan 0ba7e0dcbd
Exit with non-zero code if post-install audit fails (#11362) 2023-03-15 22:11:23 +01:00
Ben Ramsey cd137ee29b
Add security to support options (#11271)
This support option allows projects to specify a URL to the project's
vulnerability disclosure policy (VDP).
2023-03-10 22:28:10 +01:00
Alexander Dmitryuk d1ab1255b5
Add rm alias to composer remove command (#11367)
* rm alias

* review
2023-03-10 22:27:20 +01:00
Michal Špaček efc105eac1
Add proxy value to bin-compat validator (#11353)
Fix #11352
2023-02-27 16:02:50 +01:00
Jordi Boggiano fe741e0ffe
Merge branch '2.5' 2023-02-24 17:42:18 +01:00
Jordi Boggiano b5aad9ec0d
Fix type error when upgrading composer 2023-02-24 17:41:59 +01:00
Jordi Boggiano 1ff942bb44
Fix type errors in key updating logic 2023-02-24 17:41:47 +01:00
Jordi Boggiano ecb69eaa4a
Merge branch '2.5' 2023-02-15 13:10:37 +01:00
Jordi Boggiano b0a110f164
Reverting release version changes 2023-02-15 13:10:06 +01:00
Jordi Boggiano 6b67eeea4d
Release 2.5.4 2023-02-15 13:10:06 +01:00
Jordi Boggiano d35cb21749
Match plugin-optional more strictly 2023-02-10 21:13:30 +01:00
Marek Nocoń b781031413
Added optional plugin check in PluginInstaller (#11318) 2023-02-10 21:12:30 +01:00
Jordi Boggiano 0dd5811583
Ensure we have a bool for plugin-optional 2023-02-10 14:19:02 +01:00
Markus Staab d8221bd443
PHPStan: Fixed handling of union types in ConfigReturnTypeExtension (#11312)
Co-authored-by: Markus Staab <m.staab@complex-it.de>
2023-02-10 14:00:33 +01:00
Markus Staab 933ca81d6b
Removed unused private `Solver::enableDisableLearnedRules` method (#11311) 2023-02-10 13:45:54 +01:00
Jordi Boggiano a9b79ba470
Merge branch '2.5' 2023-02-10 13:24:19 +01:00
Jordi Boggiano c92485a3fb
Reverting release version changes 2023-02-10 13:23:53 +01:00
Jordi Boggiano 607a4c0400
Release 2.5.3 2023-02-10 13:23:52 +01:00
Nicolas Grekas 4b94e55b03
Add extra.plugin-optional to auto-disable plugins in non-interactive mode (#11315) 2023-02-10 13:19:41 +01:00
Jordi Boggiano 2484602f8d
Update target version to 2.6 2023-02-04 14:57:31 +01:00
Jordi Boggiano e6ef9eb332
Reverting release version changes 2023-02-04 14:33:23 +01:00
Jordi Boggiano c76c013c55
Release 2.5.2 2023-02-04 14:33:22 +01:00
Jordi Boggiano 2f2d6c9de7
Fix package sorting logic, fixes #11287 2023-02-03 22:48:18 +01:00
Andor 50cded331c
Default exclude patterns for the "archive" command (#11239)
* Issue #11235 - Adds default exclude patterns for the "archive" command based on the target file name
2023-01-27 17:16:33 +01:00
Jordi Boggiano ad7bc18028
Fix self.version requirements failing the lock file integrity check if on a different version, fixes #11274 (#11283) 2023-01-27 16:54:45 +01:00
Jordi Boggiano 0a2846cb24
Fix autoloading on PHP 5.6 (#11285)
* Add a CI check to ensure the autoloader can run on php5.6+

* Fix autoloading on PHP 5.6
2023-01-27 16:26:04 +01:00
Jordi Boggiano 5165792f9c
Fix security advisory parsing when filter repo is used, fixes #11281 2023-01-27 11:09:34 +01:00
Jordi Boggiano f6f972a699
Fix require regression with --fixed, fixes #11247 2023-01-19 21:42:22 +01:00
Jordi Boggiano 0d96fd8149
Warn when require ends up auto-selecting a feature branch, fixes #11264 (#11270) 2023-01-19 21:42:09 +01:00
Conrad Lara c7f32820d7
Allow v2 metadata target to provide security advisories without releases. (#11257) 2023-01-13 22:20:03 +01:00
Jordi Boggiano 70b1863480
Update deps 2023-01-13 14:19:18 +01:00
Dan Barrett 7560873740
Added tests for the Remove command 2023-01-06 12:38:47 +11:00
Jordi Boggiano d047f38f73
Make sure autoloader closures do not have a scope class set 2022-12-22 21:01:38 +01:00
Jordi Boggiano 2e71896168
Reverting release version changes 2022-12-22 15:33:55 +01:00
Jordi Boggiano 923278ad13
Release 2.5.1 2022-12-22 15:33:54 +01:00
Jordi Boggiano cf8ce82aa1
Fix preg match type error in svn version guessing, fixes #11231 2022-12-22 15:28:49 +01:00
Jordi Boggiano cbb7c91223
Fix ClassLoader to be serializable (#11237)
* Fix ClassLoader to be serializable

* Fix CI to use the source bin/composer as process for "composer" runs incl within simple-phpunit

* Store the closure statically to avoid serialization issues in a cleaner way
2022-12-22 15:17:04 +01:00
Jeffrey Cafferata da611e089a
Docs: fix documention deep links (#11233)
* Docs: Fixed the deep links to the documentation website.

Search scope: `src/Composer/Command`.

* Docs: Fixed the deep links to the documentation website.
2022-12-21 09:32:50 +01:00
Jordi Boggiano 737fd0fca8
Reverting release version changes 2022-12-20 10:44:09 +01:00
Jordi Boggiano 09ef0e3acb
Release 2.5.0 2022-12-20 10:44:08 +01:00
Jordi Boggiano be053cb18e
Allow underscores in cache keys to avoid conflicts with package names containing underscore vs dashes, fixes #11224 (#11229) 2022-12-18 00:03:48 +01:00
Jordi Boggiano 5e6ccae116
Improve version selection in archive command, fixes #4794 (#11230) 2022-12-18 00:02:43 +01:00
Jordi Boggiano 685ec29573
Increase disk size warning to 100MB minimum, closes #11190 2022-12-17 23:50:47 +01:00
Jordi Boggiano 957e7a9165
Merge pull request #11218 from localheinz/fix/patch
Fix preserving of major.minor.patch version when running `composer bump` and installed patch version is `0`, and add bumping of >=x to >=latest
2022-12-17 23:05:21 +01:00
Jordi Boggiano ef7ba73a6a
Add support for bumping >=x to >=latest, fixes #11179 2022-12-17 23:02:52 +01:00
Jordi Boggiano 7f9638f65a
Fix implementation to fix tests, fixes #11220 2022-12-17 22:50:19 +01:00
Markus Staab a94a7512d6
Conditional return type for `IOInterface::select()` (#11219) 2022-12-17 22:03:19 +01:00
PrinsFrank 6d1b36be3b
Check missing-from-lock-file required packages when running install and fail when there are any (#11195) 2022-12-16 16:48:24 +01:00
PrinsFrank b1f3f8b8fa
Prompt users in interactive mode for where to store the credentials if a local auth config file exists (#11188) 2022-12-16 14:31:28 +01:00
Elias Häußler 0cf57255d4
Make possible return type in `IOInterface::select()` more explicit (#11171)
`IOInterface::select()` either returns any of `int`, `string`, `bool` or an
array of `string` values. However, since the returned array is always a
list, we can safely change the return type annotation to `list<string>`,
making it more explicit in terms of static code analysis.
2022-11-24 13:59:33 +01:00
Jordi Boggiano bd6a5019b3
Update to composer/pcre 2.1 (#11189) 2022-11-17 11:34:54 +01:00
Jordi Boggiano 5b28754602
Avoid normalizing to absolute paths if base dir is /toplevel to improve docker portability, fixes #11165, fixes #4404 (#11169) 2022-11-10 16:32:18 +01:00
Jordi Boggiano 6c85b875f2
Update to PHPStan 1.9 2022-11-03 21:53:42 +01:00
Jordi Boggiano 7c1aa8e0ef
Fix regression in run-script/exec commands prompting when used with --list 2022-11-03 13:37:00 +01:00
PrinsFrank 0fca3e5521
Allow the 'composer remove --unused' command to run in non-interactive mode (#11166) 2022-11-03 13:11:34 +01:00
Jordi Boggiano 45af4e3e20
Do not prompt for binary/script args if they are provided, fixes #11167 2022-11-01 16:21:30 +01:00
Jordi Boggiano 36bc30ffab
Make the require command guess versions more accurately by delegating to the solver (except with --no-update) (#11160) 2022-11-01 15:48:52 +01:00
Jordi Boggiano 6bf945017e
Add interactive prompt for which script/binary to run if run-script/exec is called without arg, fixes #11128 (#11157) 2022-10-28 14:25:18 +02:00
Jordi Boggiano 6e55cb36d8
Add support for adding Command classes as scripts, (#11151)
* Add support for adding Command classes as scripts, fixes #11134

* Allow all options to be forwarded and allow using references to other scripts with args

* Fix build

* Add more checks

* Ensure exceptions are not swallowed, and remove naming restriction by using a single-command app

* Update docs

* Add tests, fix issue merging params when combining nested scripts and CLI params
2022-10-28 14:24:55 +02:00
PrinsFrank 0430722e66
Fix output inconsistencies when aliases are being used and '0 installs, 0 updates 0 removals' was being shown when any alias was present compared to 'Nothing to install, update or remove' when no alias is being used. (#11159) 2022-10-28 09:11:55 +02:00
Jordi Boggiano c65687604e
Fix react promise usage for forward compatibility 2022-10-27 16:51:10 +02:00
Jordi Boggiano a63ce7cf96
Add message when doing composer outdated --direct and there is nothing to show, fixes #11152 (#11156) 2022-10-27 16:21:53 +02:00
Jordi Boggiano 1c4ca10c1f
Merge branch '2.4' 2022-10-27 14:40:45 +02:00
Jordi Boggiano cc2e8b05e6
Reverting release version changes 2022-10-27 14:39:29 +02:00
Jordi Boggiano e8d9087229
Release 2.4.4 2022-10-27 14:39:29 +02:00
Jordi Boggiano bb726b8a61
Fix status command reporting differences when source reference is a tag name, fixes #11155 2022-10-27 14:23:51 +02:00
Jordi Boggiano ee0ec9ebc8
Merge branch '2.4' 2022-10-26 13:42:18 +02:00
Jordi Boggiano 10e757d6b0
Add extra debug info when running GH Actions and an archive extraction fails, refs #11148 2022-10-26 12:27:24 +02:00
Stephan Jorek d54f2f21c5
Feature: Add support for autocompleting setting-keys in config-command (#11130)
* Add support for autocompleting setting-keys in config-command

This PR implements the support for autocompletion of setting-keys in the
config-command and its related funtional tests. The implementation takes
existing command-line options like `--unset` or `--global` into account, as
well as existing exposable package-properties. The result is a context-
sensitive auto-completion of individual lists of setting-keys.

Additionally showing the value `suggest.` sub-keys has been allowed in
the config-command, as setting and unsetting them has alwas been possible,
and I did not want to distinguish between showing, setting and unsetting
those keys.

In the setting-key flattening-method I used the `array_is_list()` function,
which was added in PHP 8.1 recently. For backwards PHP-compatiblity the
package `symfony/polyfill-php81` has been added.

Signed-off-by: Stephan Jorek <stephan.jorek@brandung.de>
2022-10-25 16:24:02 +02:00
Jordi Boggiano 8ffd8bef08
Merge branch '2.4' 2022-10-25 15:27:14 +02:00
Ayesh Karunaratne 90673e4f66
Update URL masking patterns for new GitHub fine-grained PATs
Updates GitHub Personal Access Token regex pattern to detect new [fine-grained PATs](https://github.blog/changelog/2022-10-18-introducing-fine-grained-personal-access-tokens/)
2022-10-25 15:07:24 +02:00
Jordi Boggiano 855473148a
Fix regression in loading Composer on SMB/network shares, refs #8231 #11077 2022-10-25 15:05:35 +02:00
Jordi Boggiano 803e4e5dbd
Catch runtime exception while initializing Composer to make sure a missing composer.json does not fail >tryComposer, refs #11133 2022-10-25 15:04:08 +02:00
Kuba Werłos e5b8f2d838
Add "--dry-run" to bump command (#11047) 2022-10-25 15:03:36 +02:00
Jordi Boggiano 8d3a304233
Fix outdated command outputting some of the legend to stdout 2022-10-25 14:44:28 +02:00
Jordi Boggiano 86db6ffdae
Retry cache writes if they fail, refs #11076 2022-10-25 14:44:26 +02:00
Jordi Boggiano 89ad120f2a
Reverting release version changes 2022-10-14 16:56:47 +02:00
Jordi Boggiano b34c0e9a93
Release 2.4.3 2022-10-14 16:56:41 +02:00
Jordi Boggiano 68da418f6e
Merge branch '2.4' 2022-10-13 16:57:52 +02:00
Jordi Boggiano f6e67e584e
Fix json format of audit command missing affectedVersions, fix reportedAt format (BC BREAK!), fixes #11104 (#11120) 2022-10-13 16:56:21 +02:00
Jordi Boggiano 96e88cf84d
Merge branch '2.4' 2022-10-13 16:54:55 +02:00
Jordi Boggiano bc93f734bc
Add an error msg to clearly explain that plugins are disabled when running as root non-interactively, fixes #11093 2022-10-13 16:40:44 +02:00
Jordi Boggiano acddc1f5e4
Fix require failing to do a dry-run when requiring a package with a stability flag, fixes #11112 2022-10-13 16:29:08 +02:00
Ralf Lang 8e4dffc055
Allow other CLIs (like satis in standalone mode) to re-brand composer. (#11118)
This affects the banner at the head of the help screen and the version info.
Symfony's base object offers the same signature but composer does not allow
to override it in constructor.
Yet there are public setter methods to change both after initializing the object.
This is the workaround satis cli currently uses.
2022-10-13 14:10:27 +02:00
Jordi Boggiano 80907cd75d
Ensure files are readable before reading in JsonFile, fixes #11077 2022-10-13 14:07:09 +02:00
Jordi Boggiano ce082cd5b3
Merge branch '2.4' 2022-10-13 11:21:52 +02:00
Jordi Boggiano c447c12a70
Fix min-php version check to avoid crashing sites with a 200, fixes #11091 2022-10-13 11:07:13 +02:00
Jordi Boggiano c9b1a2e70b
Remove useless parsing of constraint from package name 2022-10-13 10:55:39 +02:00
Jordi Boggiano 2c1b309cd3
Add hard failure if COMPOSER_AUTH is malformed json, fixes #11085 2022-10-12 16:57:06 +02:00
Jordi Boggiano 06359da3a3
Merge branch '2.4' 2022-10-12 16:55:56 +02:00
JT Smith 08c04d2c9c
Typofixes (#11096)
* Fixing typo in private method name

* Various comment-related typofixes
2022-10-12 16:45:10 +02:00
Jordi Boggiano 8618f004f7
Fix parsing of aliases used within complex OR constraints, fixes #11086 2022-10-12 16:16:31 +02:00
Jordi Boggiano d06796efcf
Warn if why-not is used with a version which does not exist/is not found, fixes #11070 2022-10-12 15:31:59 +02:00
Jordi Boggiano 822fd640d0
Add warning when outdated command rejects an existing version due to platform requirements, fixes #11016 (#11113) 2022-10-12 13:57:14 +02:00
Jellyfrog 8ed7c46179
Add download-only mode (#11041)
composer install --download-only to prime the cache/download archives but not do any actual of the actual installing

Fixes #11035

Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2022-10-12 13:56:35 +02:00
Jordi Boggiano 7df744531b
Merge branch '2.4' 2022-10-12 11:27:30 +02:00
Jordi Boggiano b2ebe841e4
Fixes plugin commands not being loaded during completion
Closes #11074

Co-authored-by: Susanne Moog <look@susi.dev>
2022-10-12 11:03:52 +02:00
Jordi Boggiano 8600894003 Update deps, constrain a few types to non-empty-strings 2022-10-12 09:19:36 +02:00
Jordi Boggiano 436a112651
Clarify temporary constraint usages and throw if an unresolvable constraint is provided 2022-10-11 13:34:45 +02:00
Kuba Werłos e870206c4a
Add "--dry-run" to bump command (#11047) 2022-09-19 08:45:49 +02:00
Jordi Boggiano 22bedfd8d8
Add autoconfiguration of gitlab-domains/github-domains when auth is present for custom domains, fixes #11062 2022-09-16 12:48:10 +02:00
Markus Staab de067ff0e8
remove unused variable in ValidatingArrayLoader (#11063) 2022-09-16 12:33:15 +02:00
Jordi Boggiano 8913d7cac6
Merge branch '2.4' 2022-09-14 16:11:46 +02:00
Jordi Boggiano aeaf12561b
Reverting release version changes 2022-09-14 16:11:15 +02:00
Jordi Boggiano 7d887621e6
Release 2.4.2 2022-09-14 16:11:15 +02:00
Jordi Boggiano a75fbf0e6a
Fix handling of plugin activation when running as root
When running without `COMPOSER_ALLOW_SUPERUSER` set so it always happens after prompting, or does not happen if input is non-interactive.

Also fixed support for bash completions hanging when running as root

Fixes #11024
2022-09-14 15:42:10 +02:00
Jordi Boggiano ef018748eb
Merge branch '2.4' 2022-09-14 14:02:28 +02:00
Gregor Harlan fc75efd711
`require` command: allow `—fixed` option for library dev dependencies 2022-09-14 14:01:51 +02:00
Jordi Boggiano ec8bbe9056
Fix package filter on bump command, fixes #11053 2022-09-14 14:00:27 +02:00
Jordi Boggiano 564f8bec24
Fix type error, fixes #11052 2022-09-14 13:23:17 +02:00
Jordi Boggiano 29d8eaf45d
Merge branch '2.4' 2022-09-14 10:51:03 +02:00
Jordi Boggiano 21045b942e
Fix type errors and update baseline (1854, 99) 2022-09-14 10:50:52 +02:00
Jordi Boggiano d63218c568
Fix type error 2022-09-14 09:48:44 +02:00
Jordi Boggiano c9973cf5a8
Merge branch '2.4' 2022-09-13 16:47:09 +02:00
Jordi Boggiano dbdf6af886
Fix type error 2022-09-13 16:46:18 +02:00
Jordi Boggiano adc16bf0af
Fix phpstan error 2022-09-13 16:28:15 +02:00
Jordi Boggiano 93bfe73b52
Merge branch '2.4' 2022-09-13 16:12:56 +02:00
Jordi Boggiano fb3cae4448
Fix type error in validating array loader when name is not set 2022-09-13 16:12:28 +02:00
Jordi Boggiano 02082905a3
Merge branch '2.4' 2022-09-13 15:17:04 +02:00
Kuba Werłos e94eff5412
Fix typo in remove command 2022-09-13 15:09:28 +02:00
Jordi Boggiano d2f37b5680
Add hint as to why a package is suggested to be added to require-dev, fixes #11040 2022-09-13 15:08:37 +02:00
Jordi Boggiano ab29ed5f97
Fix handling of upper-bound platform req ignores to not act on conflicts (#11037)
* Fix handling of upper-bound platform req ignores to not act on conflicts, fixes #11020

* Optimization
2022-09-13 14:50:27 +02:00
Jordi Boggiano 4164b30236
Fix show --platform regression failing if no composer.json exists, fixes #11046 2022-09-13 14:49:25 +02:00
Ondrej Mirtes 9bb436ec28
Update PHPStan 2022-09-01 21:51:49 +02:00
Jordi Boggiano 7ff288f081
Merge branch '2.4' 2022-08-31 12:42:29 +02:00
Jordi Boggiano c10854d3f3
Remove extra lines 2022-08-31 12:42:26 +02:00
Jordi Boggiano d0ac10ca6a
Merge branch '2.4' 2022-08-31 12:41:52 +02:00
Jordi Boggiano 5b754c797e
Remove extra lines 2022-08-31 12:26:58 +02:00
Jordi Boggiano 39de9899a7
Lock down include wrappers to avoid abuse from third parties (#11015) 2022-08-31 12:07:23 +02:00
Korvin Szanto 9306eebf0c
Update gitlab fetch failure message with new path (#11038)
`https://gitlab.com/-/profile/personal_access_token` is not correct, the current URL for personal access token settings is `https://gitlab.com/-/profile/personal_access_tokens`. This is the only occurrence of the bad URL, we use the proper URL elsewhere.
2022-08-31 10:43:54 +02:00
Jordi Boggiano c5932d810f
Merge branch '2.4' 2022-08-31 09:50:30 +02:00
Jordi Boggiano 3177b21324
Fix handling for double-zero prefix, refs #11032 2022-08-31 09:47:59 +02:00
Jordi Boggiano 7e0ac53fc4
Merge branch '2.4' 2022-08-30 20:47:34 +02:00
Jordi Boggiano 2d48c7dbb0
Fix handling of zero-major versions in outdated --major-only flag, fixes #11032 2022-08-30 20:45:07 +02:00
Ondřej Mirtes 13421f7d66
Config - always respect COMPOSER_DISCARD_CHANGES 2022-08-30 14:04:30 +02:00
Jordi Boggiano cd71cf47b3
Bump main to target 2.5 2022-08-20 13:13:59 +02:00
Jordi Boggiano afeaabe089
Reverting release version changes 2022-08-20 11:44:51 +02:00
Jordi Boggiano 777d542e3a
Release 2.4.1 2022-08-20 11:44:50 +02:00
Thomas Landauer ceb8bef778
Adding hint what "Direct dependencies" means (#11013) 2022-08-20 09:24:25 +02:00
Zan Baldwin d2d8474013
Do not apply non-array package links in ArrayLoader (#11008) 2022-08-20 08:58:17 +02:00
Zan Baldwin 51774693c7
Do not apply non-string package link constraints in ArrayLoader (#11009) 2022-08-20 08:34:38 +02:00
Jordi Boggiano 7ccf230390
Fix cache invalidation issue when a git tag gets created on an old ref after the cache is populated, fixes #11002 (#11004) 2022-08-20 07:42:20 +02:00
Yehuda Katz cad5dc5b8b
Match default choice to actual default (#11010)
The 'Y' is capital, so Yes should be the default choice and is what most people would want, but No was the default.
2022-08-20 07:41:14 +02:00
EXTEON c529087631
performance: Do not create a local cache repo for local repos (#11001) 2022-08-17 15:11:34 +02:00
Jordi Boggiano 31f9cc3b49
Clean up unused types 2022-08-17 15:03:14 +02:00
Jordi Boggiano d48acda485
Add RuleReasonDataReturnTypeExtension to resolve ReasonData types where possible in PHPStan 2022-08-17 14:59:24 +02:00
Jordi Boggiano 131da999ac
Fix CS (#11003) 2022-08-17 14:20:07 +02:00
Jordi Boggiano f95471f221
Show/outdated command fixes (#11000)
* Fix show command showing the split of direct/transitive deps from outdated, fixes #10999

* Fix a few minor edge cases in show command, add tests for show and outdated commands
2022-08-17 12:08:59 +02:00
Jeffrey Cafferata 9b6d27f810
Environment variable for `--no-audit`. (#10998)
Fixes #10997
2022-08-17 11:44:18 +02:00
Jordi Boggiano 55990a48a9
Reverting release version changes 2022-08-16 16:10:48 +02:00
Jordi Boggiano 026d6de6ea
Release 2.4.0 2022-08-16 16:10:48 +02:00
Jordi Boggiano cc33db9257
Only fetch remote default branch for mirrored git repos, not local ones, refs #10949 (#10996) 2022-08-16 15:53:57 +02:00
Jordi Boggiano 82e3059c6e
Fix plugin output to indicate when plugins are globally installed even while running global commands, fixes #10978 2022-08-16 15:16:56 +02:00
Jellyfrog 058beef20a
CheckPlatformReqs: Add json format output (#10979)
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2022-08-16 14:19:53 +02:00
Jordi Boggiano e82050b05d
Fix remove command suggestions to only suggest required packages, fixes #10964 2022-08-16 13:40:50 +02:00
Thomas Lüder 41d6467b3b
Added token refresh for GitLab to support GitLab 15+ (#10988)
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2022-08-16 13:34:18 +02:00
Jordi Boggiano e34c31dd8b
Merge branch '2.2' 2022-08-16 11:50:01 +02:00
Jordi Boggiano 104bf0d75d
Handle 404s gracefully when loading providers in ComposerRepo, fixes #10974 2022-08-16 11:44:21 +02:00
Jordi Boggiano 07c3a63fa3
Fix phpstan error 2022-08-16 11:40:14 +02:00
Jordi Boggiano f1877afc0b
Merge branch '2.3' 2022-08-16 11:27:40 +02:00
Jordi Boggiano 550fc3d321
Merge branch '2.2' into 2.3 2022-08-16 11:27:34 +02:00
Jordi Boggiano 598c1c7573
Fix phpstan error 2022-08-16 11:19:20 +02:00
Jordi Boggiano 6457a88aa1
Fix COMPOSER_NO_DEV to work with --update-no-dev for require/remove commands as well, refs #10995 2022-08-16 11:15:52 +02:00
Stephan 1f0bd51f55
GitHubDriver: stricter URL validation to avoid issues with undefined index owner (#10985) 2022-08-16 11:08:03 +02:00
Jordi Boggiano 7377d1f003
Uniformize command description format, fixes #10971 2022-08-16 10:41:07 +02:00
Barry vd. Heuvel a3f7c31ea7
Add json format to Audit command (#10965) 2022-07-25 13:13:32 +02:00
Jordi Boggiano f0ab518c46
Ensure signalHandler is kept around and unregistered 2022-07-22 10:37:48 +02:00
Jordi Boggiano 6cb5576a32
Fix root package being part of package name suggestions where it should not be 2022-07-21 16:30:01 +02:00
Jordi Boggiano f8ac872c9f
Reverting release version changes 2022-07-21 15:46:32 +02:00
Jordi Boggiano c08cac5f67
Release 2.4.0-RC1 2022-07-21 15:46:32 +02:00
Jordi Boggiano e59812c439
Add prompt suggesting using --dev when require command is used with dev packages (#10960)
* Add prompt suggesting using --dev when require command is used with packages which appear to be dev, fixes #10939
2022-07-21 14:40:21 +02:00
Jordi Boggiano d0b60f115b
Merge pull request #10958 from Seldaek/signal_fixes
Signal handling improvements
2022-07-21 11:09:30 +02:00
Jordi Boggiano 9fbc386a7b
Fix package selector warnings to only show for versions that were actually skipped, #10942 2022-07-21 11:06:13 +02:00
Jordi Boggiano 03e4d19266
Merge branch '2.3' 2022-07-20 22:47:44 +02:00
Jordi Boggiano e815e0113a
Merge branch '2.2' into 2.3 2022-07-20 22:47:36 +02:00
Jordi Boggiano 623f903d62
Add support for +meta in hg version number, fixes #10955 2022-07-20 22:47:27 +02:00
Jordi Boggiano 734cbeb610
Fix type declarations 2022-07-20 22:42:57 +02:00
Jordi Boggiano 07645b9895
Capture signals and wait until child process exits to also exit, fixes #6059 2022-07-20 22:32:09 +02:00
Jordi Boggiano 1a4f2174e4
Add seld/signal-handler dependency 2022-07-20 22:32:09 +02:00
Jordi Boggiano 26e01abfae
Fix handling of .mdown files in phar compiler 2022-07-20 22:31:59 +02:00
Jordi Boggiano e43cae6231
Add COMPOSER_PREFER_STABLE and COMPOSER_PREFER_LOWEST env vars, fixes #10919 2022-07-20 22:29:27 +02:00
Alexander Dmitryuk 8c488b9b08
Add "r" alias for require (#10953)
Co-authored-by: a.dmitryuk <a.dmitryuk@movavi.com>
2022-07-18 13:04:49 +02:00
Jordi Boggiano 3595666e6e
Merge branch '2.3' 2022-07-17 13:07:44 +02:00
Jordi Boggiano 3c68b579ed
Merge branch '2.2' into 2.3 2022-07-17 13:06:43 +02:00
Sam Litowitz 8d5bdaf443
Fixes #10938: Do not display duplicate ignore extension hints 2022-07-17 13:02:12 +02:00
Jordi Boggiano 740af2bdb1
Add warning if constraint appears too narrow, refs #10943 2022-07-17 10:29:56 +02:00
Jordi Boggiano 93eb19e756
For custom composer.json paths the default cwd should be that files directory, fixes ergebnis/composer-normalize#865, refs #10935 2022-07-17 10:22:07 +02:00
Jordi Boggiano 37d3e2f44a
Merge branch '2.3' 2022-07-13 15:49:55 +02:00
Jordi Boggiano 80a0d3236d
Reverting release version changes 2022-07-13 15:48:23 +02:00
Jordi Boggiano ebac357c0a
Release 2.3.10 2022-07-13 15:48:23 +02:00
Jordi Boggiano e1e29bf698
Merge branch '2.2' into 2.3 2022-07-13 15:35:01 +02:00
Jordi Boggiano c5ff1e1fc6
Reverting release version changes 2022-07-13 15:27:38 +02:00
Jordi Boggiano a8ab5070fb
Release 2.2.17 2022-07-13 15:27:38 +02:00
Jordi Boggiano b195f383f2
Always clone root package before adding it to a RootPackageRepo to avoid issues with plugins, fixes #10940 2022-07-13 15:10:15 +02:00
Jordi Boggiano 336a0d20c6
Add hint in create-project when it fails due to a missing allow-plugins in project, refs #10928 2022-07-13 14:38:54 +02:00
Jordi Boggiano 0e59fbb46e
Fix #10935 in a more generic way which fixes the issue for all Factory::create usages 2022-07-13 14:13:02 +02:00
Jordi Boggiano 37a788932d
Fix phpdoc issue 2022-07-13 13:35:03 +02:00
Jordi Boggiano 55fe12bd65
Allow disabling only local or global plugins internally to fix #10935 without side-effects 2022-07-13 13:23:27 +02:00
Jordi Boggiano a481dfce3f
Fix disk_free_space being called even when not available, fixes #10936 2022-07-13 10:35:32 +02:00
Jordi Boggiano f600ea46c7
Fix syntax error 2022-07-13 10:09:33 +02:00
Jordi Boggiano 32a7ceac2f
Improve exception message when a package cannot be added in another repo, refs #10940 2022-07-13 10:06:00 +02:00
Jordi Boggiano c6a2142dc4
Merge branch '2.3' 2022-07-12 20:57:16 +02:00
Jordi Boggiano 03cebc2490
Clean up types with conditional return types 2022-07-12 20:56:23 +02:00
Jordi Boggiano cecdc0cbd1
Merge branch '2.2' into 2.3 2022-07-12 20:52:51 +02:00
Jordi Boggiano 75ef4903ef
Ensure plugins from CWD/vendor do not get loaded when running create-project, fixes #10935 2022-07-12 16:25:12 +02:00
Jordi Boggiano 12e15b7f60
Merge branch '2.3' 2022-07-12 13:25:12 +02:00
Jordi Boggiano e29bff2727
Merge branch '2.2' into 2.3 2022-07-12 13:25:03 +02:00
Jordi Boggiano 8323e85bc8
Fix allow-plugins check to not check plugins which are anyway incompatible with the current Composer version, refs #10928 2022-07-12 13:24:21 +02:00
Jordi Boggiano 8536a2ca80
Merge branch '2.3' 2022-07-05 22:21:44 +02:00
Jordi Boggiano d60ffc3b82
Merge branch '2.2' into 2.3 2022-07-05 22:21:37 +02:00
Jordi Boggiano dcd7f2180d
Avoid checking for allowed plugins if plugins are disabled entirely, fixes #10925 2022-07-05 22:20:33 +02:00
Jordi Boggiano 70b78137a9
Merge branch '2.3' 2022-07-05 16:54:43 +02:00
Jordi Boggiano 4cd8787c88
Reverting release version changes 2022-07-05 16:52:11 +02:00
Jordi Boggiano 015f524c99
Release 2.3.9 2022-07-05 16:52:11 +02:00
Jordi Boggiano 2759d8b545
Reverting release version changes 2022-07-05 16:50:29 +02:00
Jordi Boggiano 8c0ee53ff6
Release 2.2.16 2022-07-05 16:50:29 +02:00
Jordi Boggiano fca92faed8
Fix type error 2022-07-05 16:26:46 +02:00
Jordi Boggiano 8304ea0695
Fix type error with null descriptions, fixes #10924 2022-07-05 16:23:53 +02:00
Jordi Boggiano 9a6d63f0f4
Fix build regressions 2022-07-05 16:22:29 +02:00
Jordi Boggiano 3764073b43
Merge branch '2.2' into 2.3 2022-07-05 16:08:35 +02:00
fluffycondor 3ebd66b851
Fix deprecation notice (#10921)
Deprecation Notice: trim(): Passing null to parameter #1 ($string) of type string is deprecated in phar:///usr/bin/composer/src/Composer/Util/GitHub.php:103
2022-07-05 15:51:07 +02:00
Damien Tournoud 92e1c26c3b
Disallow plugins by throwing an exception if non-interactive to avoid half-broken runtime states (#10920)
* Disallow plugins by throwing an exception if non-interactive to avoid half-broken runtime states, fixes #10912
* Also allow BC mode for lock files older than 2.2.0 to keep plugins working there
* Allow locker to be accessed by plugin manager at init time
* Update allow-plugins docs

Co-authored-by: Damien Tournoud <damien@platform.sh>
Co-authored-by: Jordi Boggiano <j.boggiano@seld.be>
2022-07-05 15:44:30 +02:00
Jordi Boggiano 796d2bae08
Merge branch '2.3' 2022-07-01 12:15:30 +02:00
Jordi Boggiano 726669084b
Reverting release version changes 2022-07-01 12:10:47 +02:00
Jordi Boggiano f69e63262d
Release 2.3.8 2022-07-01 12:10:47 +02:00
Jordi Boggiano 618fcb800b
Merge branch '2.2' into 2.3 2022-07-01 12:05:18 +02:00
Jordi Boggiano f14b02b9c9
Reverting release version changes 2022-07-01 12:01:26 +02:00
Jordi Boggiano 509dcbd4f8
Release 2.2.15 2022-07-01 12:01:26 +02:00
Jordi Boggiano c3bb27960b
Fix other issues with readonly caches, refs #10906 2022-07-01 11:55:43 +02:00
Jordi Boggiano f8324e0524
Fix support for read-only caches where the filesystem is not writable (fixes #10906) 2022-07-01 11:50:26 +02:00
Tom Klingenberg 7ab4306c78
Fix TypeError (#10904)
Fix string type requirement in case of NULL value:

    [TypeError]                                                                                                                                                                  
    Composer\Command\InitCommand::parseAuthorString(): Argument #1 ($author) must be of type string, null given, called in phar:///composer.phar/src/Composer/Command/InitCommand.php on line 345
2022-07-01 11:15:29 +02:00
Andreas Schempp 424547bb70
Correctly merge boolean flag of allow-plugin config (#10909) 2022-07-01 11:08:35 +02:00
Jordi Boggiano 1812862d5e
Update phpstan to latest, update baseline (1909, 103) 2022-06-30 17:07:18 +02:00
Jordi Boggiano efd426f8bb
Extract some common logic for filtering away dev requirements into a RepositoryUtils 2022-06-30 15:05:34 +02:00
Jordi Boggiano de9996d4c4 Output exception class when audit fails 2022-06-30 14:28:16 +02:00
Jordi Boggiano f9db69ae1f
Merge pull request #10898 from Seldaek/meta_advisories
Move security advisory loading to repositories
2022-06-28 20:31:03 +02:00
Dan Wallis d880ab68cf
Allow use of --locked with depends and prohibits (#10834)
* Allow use of --locked with depends and prohibits

* Only include other repos if not --locked

* Move logic to appease PHPStan

* Load a PlatformRepository when reading lock file
2022-06-25 17:06:58 +02:00
Jordi Boggiano 0196690ab3
Disable automatic audit at the end of install step to keep things fast, switch --no-audit to an opt-in --audit flag 2022-06-24 16:54:30 +02:00
Jordi Boggiano 8c9f82dc1e
Move security advisory loading to repositories, allows others to provider them and reduces load on packagist.org for summary advisory reports 2022-06-24 16:26:57 +02:00
Jordi Boggiano 978037fbfa
Fix build 2022-06-24 11:12:57 +02:00
Jordi Boggiano 4229c2c641
Merge branch '2.3' into main 2022-06-24 11:10:07 +02:00
Jordi Boggiano f7e88099af
Merge branch '2.2' into 2.3 2022-06-24 11:09:45 +02:00
Stephan 6776cef441
Fix: ValidatingArrayLoader [TypeError]: strcasecmp(): Argument #1() must be of type string, int given (#10897) 2022-06-24 10:30:33 +02:00
Jordi Boggiano ddecd5e328
Add hint to why-not that calling update with a temporary constraint can also help elucidate an issue 2022-06-23 21:16:12 +02:00
Jordi Boggiano eba49147e7
Add warning when the latest version of a package cannot be auto-selected in require/init/create-project, fixes #10884 (#10896) 2022-06-23 14:37:04 +02:00
Jordi Boggiano a5fdc00de1
Remove duplicate function in RootPackageInterface, fixes #10895 2022-06-23 13:39:39 +02:00
Jordi Boggiano 658f56ff13
Fix audit command to exit with amount of advisories matched 2022-06-23 12:31:09 +02:00
Jordi Boggiano e3c46cb2b2
Audit locked packages if update is called with --no-install, fixes #10894 2022-06-22 16:36:54 +02:00
Jordi Boggiano 611b215896
Fix PHPStan issues and a couple minor bugs in audit functionality, refs #10798 2022-06-22 15:39:51 +02:00
Guy Sartorelli d93239ddd9
Add audit command to check for security issues (#10798)
Closes #10329
2022-06-22 15:15:01 +02:00
Mathias Reker ⚡️ 4131f7cf4c
Static lambda (#10854)
Lambdas not (indirect) referencing $this must be declared static.
2022-06-22 14:19:18 +02:00
Jordi Boggiano b627816781
Merge branch '2.3' into main 2022-06-22 13:49:30 +02:00
Jordi Boggiano 30a8b82b15
Merge branch '2.2' into 2.3 2022-06-22 13:49:11 +02:00
Marek Stipek 690ab5166a
Ignoring passed arguments for @putenv, closes #10846 2022-06-22 13:40:35 +02:00
Jordi Boggiano 5730c24c92
Rethrow path repo init failures with path information, closes #10845 2022-06-22 13:30:39 +02:00
Jordi Boggiano d132b9e6fd
Fixup 2022-06-22 13:11:28 +02:00
Jordi Boggiano 53680afb85
Merge branch '2.3' into main 2022-06-22 13:09:06 +02:00
Jordi Boggiano 81043c5691
Add git version to diagnose command, and warn if <2.24, closes #10832 2022-06-22 13:05:35 +02:00
anzago 567423e9f7
Removed blank line in missing extensions hint when having no php.ini loaded file (#10839) 2022-06-22 12:29:36 +02:00
Jordi Boggiano bad3eb2cd9
Update deps, update baseline (1958, 103) 2022-06-22 09:49:09 +02:00
Jordi Boggiano 16ee2e479f
Merge branch '2.2' into 2.3 2022-06-22 09:16:23 +02:00