Upgrade Roundcube 1.6.0~ynh4 to 1.6.8~ynh1 fails

[1Dimitri]

Describe the bug

Failed to update composer dependencies as mentioned in several other issues

Context

• Any yunohost such as 11.2.27

  Steps to reproduce

  1. Go to System Update
  2. *Click on Update Roundcube 1.6.0\~ynh4 to 1.6.8~ynh1
  3. Scroll down to the red line
  4. Click on the link to see error

Expected behavior

• Successfull upgrade

Logs

• At first attempt,

  2024-08-17 13:44:20,832: DEBUG - + ynh_composer_exec --phpversion=8.3 --workdir=/var/www/roundcube '--commands=install --no-dev '
  2024-08-17 13:44:20,833: DEBUG - + local _globalphpversion=8.3
  2024-08-17 13:44:20,833: DEBUG - + declare -Ar args_array
  2024-08-17 13:44:20,933: DEBUG - + workdir=/var/www/roundcube
  2024-08-17 13:44:20,934: DEBUG - + dpkg --compare-versions 2.0 lt 2
  2024-08-17 13:44:20,937: DEBUG - + phpversion=8.3
  2024-08-17 13:44:20,937: DEBUG - + COMPOSER_HOME=/var/www/roundcube/.composer
  2024-08-17 13:44:20,938: DEBUG - + COMPOSER_MEMORY_LIMIT=-1
  2024-08-17 13:44:20,938: DEBUG - + php8.3 /var/www/roundcube/composer.phar install --no-dev -d /var/www/roundcube --no-interaction --no-ansi
  2024-08-17 13:44:21,123: DEBUG - Composer plugins have been disabled for safety in this non-interactive session. Set COMPOSER_ALLOW_SUPERUSER=1 if you want to allow plugins to run as root/super user.
  2024-08-17 13:44:21,123: DEBUG - Do not run Composer as root/super user! See https://getcomposer.org/root for details
  2024-08-17 13:44:21,244: DEBUG - Installing dependencies from lock file
  2024-08-17 13:44:21,246: DEBUG - Verifying lock file contents can be installed on current platform.
  2024-08-17 13:44:21,262: DEBUG - Warning: The lock file is not up to date with the latest changes in composer.json. You may be getting outdated dependencies. It is recommended that you run `composer update` or `composer update <package name>`.
  2024-08-17 13:44:21,264: DEBUG - - Required package "guzzlehttp/guzzle" is in the lock file as "6.5.8" but that does not satisfy your constraint "^7.3.0".
  2024-08-17 13:44:21,265: DEBUG - - Required package "bacon/bacon-qr-code" is not present in the lock file.
  2024-08-17 13:44:21,265: DEBUG - This usually happens when composer files are incorrectly merged or the composer.json file is manually edited.
  2024-08-17 13:44:21,265: DEBUG - Read more about correctly resolving merge conflicts https://getcomposer.org/doc/articles/resolving-merge-conflicts.md
  2024-08-17 13:44:21,265: DEBUG - and prefer using the "require" command over editing the composer.json file directly https://getcomposer.org/doc/03-cli.md#require-r
  2024-08-17 13:44:21,278: DEBUG - + ynh_die '--message=Unable to install core dependencies with Composer.'
  2024-08-17 13:44:21,307: DEBUG - + ynh_exit_properly
  2024-08-17 13:44:21,308: DEBUG - + [[ upgrade =~ ^install$|^upgrade$|^restore$ ]]

• Going to /var/www/roundcube and removing composer.lock allows to progress as described in issue https://github.com/YunoHost-Apps/roundcube_ynh/issues/210

Second attempt result in git dubious permission error message

2024-08-17 14:00:03,080: DEBUG - 
2024-08-17 14:00:03,080: DEBUG -   Failed to execute git show-ref --head -d
2024-08-17 14:00:03,080: DEBUG - 
2024-08-17 14:00:03,080: DEBUG -   fatal: detected dubious ownership in repository at '/var/www/roundcube/vend
2024-08-17 14:00:03,081: DEBUG -   or/kolab/net_ldap3'
2024-08-17 14:00:03,081: DEBUG -   To add an exception for this directory, call:
2024-08-17 14:00:03,081: DEBUG - 
2024-08-17 14:00:03,081: DEBUG -    git config --global --add safe.directory /var/www/roundcube/vendor/kolab/n
2024-08-17 14:00:03,082: DEBUG -   et_ldap3
2024-08-17 14:00:03,082: DEBUG - 
2024-08-17 14:00:03,082: DEBUG -