Skip to content

Update composer/composer requirement from ^1.10.23 || ~2.2.17 to ^2.5.5 #173

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 1 commit into from
Closed

Update composer/composer requirement from ^1.10.23 || ~2.2.17 to ^2.5.5 #173

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 22, 2023 •
edited
Loading

Updates the requirements on composer/composer to permit the latest version.

Release notes

Sourced from composer/composer's releases.

2.5.5

  • Fixed basic auth failures resulting in infinite retry loop (#11320)
  • Fixed GitHub rate limit reporting (#11366)
  • Fixed InstalledVersions error in Composer 1 compatibility edge case (#11304)
  • Fixed issue displaying solver problems with branch names containing % signs (#11359)
  • Fixed race condition in cache validity detection when running Composer highly concurrently (#11375)
  • Fixed various minor config command issues (#11353, #11302)
Changelog

Sourced from composer/composer's changelog.

[2.5.5] 2023-03-21

  • Fixed basic auth failures resulting in infinite retry loop (#11320)
  • Fixed GitHub rate limit reporting (#11366)
  • Fixed InstalledVersions error in Composer 1 compatibility edge case (#11304)
  • Fixed issue displaying solver problems with branch names containing % signs (#11359)
  • Fixed race condition in cache validity detection when running Composer highly concurrently (#11375)
  • Fixed various minor config command issues (#11353, #11302)

[2.5.4] 2023-02-15

  • Fixed extra.plugin-optional support in PluginInstaller when doing pre-install checks (#11318)

[2.5.3] 2023-02-10

  • Added extra.plugin-optional support for allow auto-disabling unknown plugins which are not critical when running non-interactive (#11315)

[2.5.2] 2023-02-04

  • Added warning when require auto-selects a feature branch as that is probably not desired (#11270)
  • Fixed self.version requirements reporting lock file integrity errors when changing branches (#11283)
  • Fixed require regression which broke the --fixed flag (#11247)
  • Fixed security audit reports loading when exclude/only filter rules are used on a repository (#11281)
  • Fixed autoloading regression on PHP 5.6 (#11285)
  • Fixed archive command including an existing archive into itself if run repeatedly (#11239)
  • Fixed dev package prompt in require not appearing in some conditions (#11287)

[2.5.1] 2022-12-22

  • Fixed ClassLoader regression which made it fail if serialized (e.g. within PHPUnit process isolation) (#11237)
  • Fixed preg type error in svn version guessing (#11231)

[2.5.0] 2022-12-20

  • BC Warning: To prevent abuse of our includeFile() function it is now gone, it was not part of the official API but may still cause issues if some code incorrectly relied on it (#11015)
  • Improved version guessing of require command to use the dependency resolution result instead of using the latest available version (except if you run with --no-update) (#11160)
  • Improved version selection in archive command (#11230)
  • Added autocompletion of config option names in the config command (#11130)
  • Added support for writing custom commands as Command classes (#11151)
  • Added hard failure when installing from a lock file which does not satisfy the composer.json requirements (#11195)
  • Added warning when the outdated command rejects a new package due to unmet platform requirements (#11113)
  • Added support for bump command to bump >=x to >=installed-version (#11179)
  • Added --download-only flag to install command to only download and prime the cache with the package archives (#11041)
  • Added autoconfiguration of github-domains/gitlab-domains when GitHub/GitLab credentials are configured for a custom domain (#11062)
  • Added hard failure (throw) if COMPOSER_AUTH is present and malformed JSON (#11085)
  • Added interactive prompt to run-script and exec commands if run without any argument (#11157)
  • Added interactive prompt where to store credentials when a project-local auth.json exists (#11188)
  • Fixed full disk warning to be shown when less than 100MiB is available (#11190)
  • Fixed cache keys to allow _ to avoid conflicts between package names like a-b and a_b (#11229)
  • Fixed docker compatibility by making paths more portable even if the project is installed at / (#11169)

... (truncated)

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot requested a review from a team as a code owner March 22, 2023 00:57
@dependabot dependabot bot added the scope:distribution Related to distribution label Mar 22, 2023
@danielbachhuber danielbachhuber mentioned this pull request Apr 4, 2023
Closed
@schlessera schlessera added this to the 2.3.0 milestone May 12, 2023
@dependabot @schlessera
Update composer/composer requirement from ^1.10.23 || ~2.2.17 to ^2.5.5
2e4650f 
Updates the requirements on [composer/composer](https://github.com/composer/composer) to permit the latest version.
- [Release notes](https://github.com/composer/composer/releases)
- [Changelog](https://github.com/composer/composer/blob/main/CHANGELOG.md)
- [Commits](https://github.com/composer/composer/commits/2.5.5)

---
updated-dependencies:
- dependency-name: composer/composer
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@schlessera schlessera force-pushed the dependabot/composer/composer/composer-tw-2.5.5 branch from e4e9f66 to 2e4650f Compare May 12, 2023 14:59
@schlessera schlessera removed this from the 2.3.0 milestone May 12, 2023
@danielbachhuber danielbachhuber removed the request for review from a team May 17, 2023 12:23
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github May 25, 2023

A newer version of composer/composer exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 6, 2023

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/composer/composer/composer-tw-2.5.5 branch September 6, 2023 21:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

scope:distribution Related to distribution

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@danielbachhuber @schlessera