Closed dantleech closed 5 years ago
If the project is in git you could also ask git for the old composer.lock
. Then you wouldn't need that archive at all and anyone could look at the changes caused by someone elses update.
Only if you commit the changelock (and use GIT). But indeed there are a number of strategies.
Also, it archives the lock file before it updates, so you always get the changes. We could even not create an archive at all, but currently there is some benefit of checking (or re-checking) the changed log after running the update.
This is redundant now, we no longer archive lock files, we just keep the old one.
e.g. set max number of archives to 50 or similar, should be configurable.