332c46af8b
Merge pull request from GHSA-h5h8-pc6h-jvvx
...
* Fix external process calls to avoid user input being able to pass extra parameters
* Tweak some fixes
2021-04-27 13:00:40 +02:00
2a50a9400f
Fix install step at the end of init command
2021-04-20 22:04:28 +02:00
e6cede4a61
Make sure update mirrors/--lock keeps the release date of the original reference when dev versions have newer commits, refs #9812
2021-04-08 11:54:39 +02:00
0ab4013788
Fix output listing some updates that do not really happen when updating mirrors/--lock, fixes #9812
2021-04-08 10:55:48 +02:00
d519fb8a53
Add warning when loading plugins of type composer-installer as they are unlikely to function correctly and should be upgraded to the composer-plugin type
2021-04-08 10:40:55 +02:00
ddc3693725
Switch to composer/metadata-minifier, fixes #9727
2021-04-07 15:56:34 +02:00
cf69f3194a
Fix doctype annotations
2021-04-07 15:56:34 +02:00
29befaa94b
Make ComposerRepository::configurePackageTransportOptions() protected. ( #9818 )
2021-04-07 15:56:15 +02:00
52a452c885
Improve InstalledVersions docs slightly
2021-04-07 12:44:23 +02:00
c3ae317a71
Support --no-dev combined with --locked in outdated/show commands, fixes #9788
2021-04-02 13:34:50 +02:00
18e268556d
Fix type warning on php8.1, refs #9770
2021-04-01 10:14:21 +02:00
dc84dbbbf7
Fixed detection of hg version when localized, fixes #9753
2021-04-01 10:09:49 +02:00
53a974f9c9
Tweak virtualbox detection and improve it by detecting vbox additions, refs #9627
2021-04-01 09:48:07 +02:00
836ca051d3
Merge branch '1.10' into 2.0
2021-04-01 09:17:30 +02:00
96acad1e45
Update github token pattern to match their latest updates
2021-04-01 09:13:32 +02:00
63c086c208
Add source package name to debug info when enabling plugins
2021-03-16 20:31:19 +01:00
3b89a9c3b4
Also attempt working around Vagrant filesystem issues when installing plugins initially, refs #9627
2021-03-16 20:31:18 +01:00
2f4b99eacd
MaxFileSizeException should reject download job ( #9778 )
2021-03-15 13:35:16 +01:00
7652408829
Only call sapi_windows_set_ctrl_handler() for CLI requests ( #9771 )
2021-03-12 00:18:41 +01:00
414586ba05
Attempt working around Vagrant filesystem issues, added COMPOSER_RUNTIME_ENV env var (set to vagrant), fixes #9627
2021-03-10 10:45:40 +01:00
17747181d0
Clarify behavior of name in VCS repo, closes #9752
2021-03-09 23:00:17 +01:00
c81562b343
Merge branch '1.10' into 2.0
2021-03-09 21:39:49 +01:00
54889ca109
Document GH token usage and also make sure we redact them in Process debug output, refs #9757
2021-03-09 21:37:43 +01:00
dc83ba93f3
Update GitHub token pattern
...
GitHub is updating the format of auth tokens from `a-z0-9` to `A-Za-z0-9` ([notice](https://github.blog/changelog/2021-03-04-authentication-token-format-updates/ )).
I'm not sure why `.` is allowed, but I dare not to remove it. In this PR, the token validation regex is updated to allow `A-Za-z0-9` instead of the current all lower-case `a-z` and disallowed `_`.
2021-03-09 17:17:35 +01:00
ab84916422
Fix unclear error when a package can be found in lock but not in the remote repo, fixes #9750
2021-03-09 15:01:23 +01:00
de8a737015
Fix var shadowing
2021-03-09 14:13:28 +01:00
4a8e7daf56
Make sure that single files installed via file downloader get the executable bit set if they are a binary file, refs #9742
2021-03-09 14:13:19 +01:00
4bedd8379a
Fix php-proxying of binaries to avoid proxying phar files, fixes #9742
2021-03-09 14:12:32 +01:00
e9d405ff18
Avoid using str_replace for dev-master replacement as that may be a valid part of a branch name, fixes #9739
2021-03-09 12:08:38 +01:00
b451bcb1ac
Fix issue extracting archives into paths that already exist, fixes composer/installers#479
2021-03-09 11:53:52 +01:00
4f47a4c667
Proxy handling docs and tweaks ( #9735 )
2021-03-05 20:05:36 +01:00
07f59a9162
Preserve file permissions on Windows self-update ( #9733 )
...
Windows file operations result in different file permissions depending
if the file is copied or moved. A copy operation applies permissions
from the destination folder (or file if it already exists and does not
use inheritance), while a move operation generally preserves the source
file permissions.
Windows PHP `rename` uses MoveFileEx so if the user is running as an
admin and the destination is in a common (non-user) location, then the
permission for other users will be replaced by the admin user. Likewise
for the UAC elevation feature, which uses the cmd.exe `move` command.
This fix uses copy and delete operations on Windows, so that other users
can continue to run composer.phar
2021-03-05 19:57:47 +01:00
e3af4ee606
Include stdout as well as stderr if git stash/diff/.. fails, fixes #9720
2021-02-24 15:47:06 +01:00
7c910e6bfa
Revert autoload order fix, force bundled dependencies to be used over local dependencies, fixes #9721 , fixes #9717
2021-02-24 14:55:13 +01:00
bbd87934e9
Make sure we always pass a string to strtoupper
2021-02-23 20:02:33 +01:00
2597e195ef
Merge remote-tracking branch 'Sweetchuck/i9703-event-dispatcher-last-winner'
2021-02-23 15:25:57 +01:00
d855986c39
Also allow backslashes to work on cmd.exe for plain executable paths, fixes #9707
2021-02-23 15:23:17 +01:00
cf2128a889
Merge pull request #9713 from Seldaek/fix-unixy-proxy
...
Generate binary proxy in PHP if the target binary is detected as a PHP script
2021-02-23 14:15:44 +01:00
31d9f51572
Auto-detect mingw and assume it is interactive, fixes #9690
2021-02-23 13:11:00 +01:00
b3b0cf629e
Generate binary proxy in PHP if the target binary is detected as a PHP script, so custom PHP processes can be used to call them via the bin proxy path, fixes #9325
2021-02-23 11:07:25 +01:00
057006da4f
Make sure @php path/to/bla gets executed as php path\to\bla on windows, fixes #6968
2021-02-23 08:57:35 +01:00
8f7597da22
Use a different way to suppress output than changing output verbosity in exec command, fixes #9711
2021-02-22 13:42:58 +01:00
03e8cacd12
Merge pull request #9696 from Seldaek/fix_installed_versions_during_update
...
Fix installed versions usage issues when using it in plugins during a Composer update process
2021-02-18 10:37:22 +01:00
d91fe67a80
Remove default branch alias from versions which are numeric, fixes #9705
2021-02-17 23:48:03 +01:00
f7e8f7625f
Remove plugin installer hackery
2021-02-17 23:21:18 +01:00
360966dcdf
EventDispatcher uses only the return value of the last one listener, refs #9703
2021-02-16 22:01:14 +01:00
62af444821
Check if SODIUM_LIBRARY_VERSION is defined
2021-02-16 12:51:14 -08:00
cf324ee664
Make sure the plugins can use InstalledVersions to introspect themselves when being activated right after initial install
2021-02-12 11:18:04 +01:00
d4073a40f9
Prepend runtime-autoloaders so that dependencies get loaded over Composer bundled packages
...
As Composer is generally compatible with newer versions of Symfony than the bundled ones, this should
not be a problem if dependencies are shared, and it ensures that the most relevant code gets loaded.
2021-02-12 11:14:40 +01:00
1c715b5821
Never load dev requirements, refs #9683
2021-02-11 16:05:37 +01:00
Jordi Boggiano