Update composer/composer from 2.5.7 to 2.6.5 #404
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
If you have a high test coverage index, and your tests for this pull request are passing, it should be both safe and recommended to merge this update.
Updated packages
Some times an update also needs new or updated dependencies to be installed. Even if this branch is for updating one dependency, it might contain other installs or updates. All of the updates in this branch can be found here:
Release notes
Here are the release notes for all versions released between your current running version, and the version this PR updates the package to.
List of release notes
Changed files
Here is a list of changed files between the version you use, and the version this pull request updates to:
List of changed files
Changelog
Here is a list of changes between the version you use, and the version this pull request updates to:
Release 2.6.5Update changelogchore: removecomposer.lockfrom.gitattributes(#11674)Fix error when vendor dir contains broken symlinks (#11670)Fix autoload generator dump() non-BC signature change in 2.6.4Reverting release version changesRelease 2.6.4Update changelogMerge pull request from GHSA-jm6m-4632-36hffeat: improve Composer's output reproducibility (#11663)Update changelogOptimize show -a by loading only the requested package (#11659)Bump dependenciesUse CompilingMatcher in DefaultPolicy for performance reasons (#11638)Fix abandoned package list JSON serialization (#11647)Changed psr/logger to psr/log (#11652)Reverting release version changesRelease 2.6.3Update changelogUpdate baseline (1689, 92)Test status command (#11522)Add audit.abandoned warnings for abandoned packages, fixes #11623 (#11639)Fix build, update depsAdd warning when duplicate "files" autoload rules are detected (#11109)Fixed replaced packages being incorrectly missing when unlocked by an old version (#11629)Get realpath forZipArchive(#11636)Fix bitbucket redirect URLs failing old PHP builds which do not support long headersRetry curl receive errors when connection reset by peer, fixes #11622Fix loading of root aliases on path repo packages when doing partial updates, fixes #11630 (#11632)Fix the promise resolution for the cleanup logic (#11620)updated memory limit distinction for memory limit errors in docs (#11624)Bump actions/checkout from 3 to 4 (#11621)Reverting release version changesRelease 2.6.2Update changelogRevert "Set $_SERVER['SCRIPT_NAME'] within proxy command (#11562)" (#11617)Avoid COMPOSER env being set if not necessary as it can cause issues with scripts, fixes #11613, refs #11493Fix exit code 5 on composer require/create-project command (#11616)Reverting release version changesRelease 2.6.1Update changelogRevert "Allow executing binaries which are not marked executable via shell proxies (#11557)"Reverting release version changesRelease 2.6.0Update changelogAvoid failing the require command if the audit step failedChange audit.ignore behavior before 2.6.0 (#11605)Update changelogAdd test forArchiveCommandwith package name (#11551)Update depsallow bumping for patch level version constraints fixes #11579 (#11590)Adddumpautoload --dry-runoption (#11608)Allow --strict-psr inDumpAutoloadCommandalso with --classmap-authoritative (#11607)Add test case forDumpAutoloadCommandwith failing --strict-psr check (#11606)COMPOSER_DISABLE_NETWORK awarediagnosechecks; SKIP output (#11597)Fix the mtime of the vendor folder when running composer install (#11593)Fix typo 03-cli.md (#11587)Add tests for DumpAutoloadCommand (#11581)GH Actions: run against PHP 8.3 (#11601)Disable color output in tests by default to avoid issues on windows, fixes #11598CONTRIBUTING: remove outdated suggestion (#11600)Update 05-repositories.md (#11603)PHP 8.3 | ComposerRepositoryTest: fix test failure (#11602)PHP 8.3 | Tests: fix deprecation notices (#11599)Fix support for react/promise 2.xFix uncaught promises when doing synchronous file downloads that fail, fixes #11563Fix problem output bug when purely numeric versions are condensedAudit: ignores configured repository options (#11173)Tests for base dependency command (#11547)Fix #11507: phpstan/rules.neon missing from archives (#11586)Minor Typo CHANGELOG.md 2.3.0-RC1 release (#11583)Output error message in verbose mode before asking for credentials, fixes #11570Fix ignored config merging when audit is present but ignored isntUpdate Silverstripe casing (#11565)Set $_SERVER['SCRIPT_NAME'] within proxy command (#11562)Add support for Application::setCatchErrors in symfony 6.4+, refs symfony/symfony#50420Minor Typo CHANGELOG.md 2.5.8 release (#11564)Unify wording in docs (#11545)Add audit.ignored config setting to ignore security advisories by id or CVE id, fixes #11298 (#11556)Fix PHPStan after running autoloader tests (#11558)Retry download if curl error 55 is encountered (#11543)Fix trailing whitespace in 'composer show -N' (#11536)Fix 'composer show --platform <package>' erroring if no composer.json is present (#11533)Fix: Require tests on PHP 8.2 to pass (#11554)GitHubDriver: better handle empty composer.json file (#11552)Fix lib-curl-openssl parsing for SecureTransport (#11534)Fix broken junctions leading to installation failure on Windows (#11550)Add support for phpunit 10 (#11532)Upgrade to react/promise 3.0.0 (#10429)Allow executing binaries which are not marked executable via shell proxies (#11557)Update depsPreserve indentation when writing JSON files (#11390)Add homepage links in why/why-not commands (#11308)Feature: Allow local directory paths in repository of type composer (#11526)docs: add binary dependencies (#11505)Fix outdated package name regex pattern in documentation (#11523)Adds .vscode dir to gitignore file (#11524)Fix problem output of exact constraints to state more clearly that only those versions are matched (#11521)Add prompt to require command if a package name is not found but there are similar names that could be used (#11284)Remove dead codeReinstall command test (#11502)Add fallback dist type extension to temp archive files for URLs without extension, fixes #11513 (#11520)Ensure phpstan/rules.neon is exported (#11508)Update plugins testing infoMerge branch '2.5'Reverting release version changesRelease 2.5.8Update types some more, refs #11500Update types some more, refs #11500Update type declarations on ClassLoader, fixes #11482 (#11500)Fix typoFix null checkIgnore ICU CDLR version fetching when ICU cannot initialize the resource bundle, fixes #11492Fix EventDispatcher on windows picking bat files when using "@php binary", fixes #11490Add IOMock and get rid of all withConsecutive calls in tests (#11497)Force CreateProjectCommand to use the installed composer.json (#11493)Update depsUpdate baseline (1700, 94)Merge branch '2.5'refactor: updateSyncHelper::downloadAndInstallPackageSync(#11496)Handle better nullable file parameter (#11486)refactor: updateSyncHelper(#11485)chore: update entries in.gitattributes(#11484)Simplify property assignment (#11488)Fix regression in edge cases where root package gets added to a repository already during the install process, fixes #11495Refactor downloader package dist path parsing (#11471)Test json format on failed platform reqs (#11477)tests for empty or absent repository filters (#11476)Merge branch '2.5'Reverting release version changesMerge branch '2.5'Allow Symfony7 package installs (#11474)Merge branch '2.5'Update 05-repositories.md (#11459)Add more tests for install command, refs #11277Test install command (#11277)Merge branch '2.5'Support advisories from multiple repositories for the same package (#11436)Add support for env vars and ~ (for HOME) in repo paths for vcs and artifact repositories, fixes #11409 (#11453)Merge branch '2.5'Remove optional package loading to simplify pool builder (#11450)Merge pull request #11449 from Toflar/fix/poolbuilder-replace-should-be-optionalTake the short cutClarifies COMPOSER_NO_DEV documentation. (#11447)Added integration testOptimize PoolBuilder to not load replaced targets if not requiredfix: If a replacer is updated to a version that no longer replaces, the replaced package is not loadedArrayLoader: handle invalid support value (#11440)PlatformRepository library support for libpq (from ext-pq) and librdkafka (from ext-rdkafka) (#11418)Bump actions/stale from 7 to 8 (#11402)Merge branch '2.5'Use trailing slash for directories as best practice (#11387)Fix svndriver type errorMerge branch '2.5'Add platform check for 64-bit PHP (#11334)Fix markdown: Move headline out of quote (#11363)Pick higher revision number to guarantee successful file retrieval (#11350)Merge branch '2.5'Exit with non-zero code if post-install audit fails (#11362)Add security to support options (#11271)Add rm alias to composer remove command (#11367)Clarify readme docsClarify possible credential storage locations (#11358)Add note about issue with caret operator in PowerShell (#11351)Merge branch '2.5'Merge branch '2.5'PHPStan: Fixed handling of union types in ConfigReturnTypeExtension (#11312)Removed unused privateSolver::enableDisableLearnedRulesmethod (#11311)Merge branch '2.5'Update lock hashUpdate target version to 2.6This is an automated pull request from Violinist: Continuously and automatically monitor and update your composer dependencies. Have ideas on how to improve this message? All violinist messages are open-source, and can be improved here.