Fixed archive command including an existing archive into itself if run repeatedly (#11239)
Fixed dev package prompt in require not appearing in some conditions (#11287)
2.5.1
Fixed ClassLoader regression which made it fail if serialized (e.g. within PHPUnit process isolation) (#11237)
Fixed preg type error in svn version guessing (#11231)
2.5.0
BC Warning: To prevent abuse of our includeFile() function it is now gone, it was not part of the official API but may still cause issues if some code incorrectly relied on it (#11015)
Improved version guessing of require command to use the dependency resolution result instead of using the latest available version (except if you run with --no-update) (#11160)
Improved version selection in archive command (#11230)
Added hard failure when installing from a lock file which does not satisfy the composer.json requirements (#11195)
Added autocompletion of config option names in the config command (#11130)
Fixed archive command including an existing archive into itself if run repeatedly (#11239)
Fixed dev package prompt in require not appearing in some conditions (#11287)
[2.5.1] 2022-12-22
Fixed ClassLoader regression which made it fail if serialized (e.g. within PHPUnit process isolation) (#11237)
Fixed preg type error in svn version guessing (#11231)
[2.5.0] 2022-12-20
BC Warning: To prevent abuse of our includeFile() function it is now gone, it was not part of the official API but may still cause issues if some code incorrectly relied on it (#11015)
Improved version guessing of require command to use the dependency resolution result instead of using the latest available version (except if you run with --no-update) (#11160)
Improved version selection in archive command (#11230)
Added autocompletion of config option names in the config command (#11130)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/generoi/bedrock/network/alerts).
Bumps composer/composer from 2.2.6 to 2.5.5.
Release notes
Sourced from composer/composer's releases.
... (truncated)
Changelog
Sourced from composer/composer's changelog.
... (truncated)
Commits
c7cffaa
Release 2.5.562ec143
Update changelog8b0a185
Fixed display of empty objects showing [] instead of {} in config command, fi...91b7b0f
Fixed querying of default config values, and fix source display for them, and...5c3d8f3
Update deps, fix phpstan issues, update baseline (1711, 49)62f12ab
Fix return type of InstalledVersions::getInstalled, fixes #11304d3adecf
Fix github header handling to be case insensitive, fixes rate limit extractio...685a2e6
Composer support string (#11386)5d2d513
Follow-up for #5205: fix high concurrency race condition32366bc
Fix basic auth infinite loop (#11320)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/generoi/bedrock/network/alerts).