Fixed require command failing when self.version is used as constraint (#10593)
Fixed --no-ansi / undecorated output still showing color in repo warnings (#10601)
Performance improvement in pool optimization step (composer/semver#131)
2.2.7
Allow installation together with composer/xdebug-handler ^3 (#10528)
Fixed support for packages with no licenses in licenses command output (#10537)
Fixed handling of allow-plugins: false which kept warning (#10530)
Fixed enum parsing in classmap generation when the enum keyword is not lowercased (#10521)
Fixed author parsing in init command requiring an email whereas the schema allows a name only (#10538)
Fixed issues in require command when requiring packages which do not exist (but are provided by something else you require) (#10541)
Performance improvement in pool optimization step (#10546)
2.2.6
BC Break: due to an oversight, the COMPOSER_BIN_DIR env var for binaries added in Composer 2.2.2 had to be renamed to COMPOSER_RUNTIME_BIN_DIR (#10512)
Fixed enum parsing in classmap generation with syntax like enum foo:string without space after : (#10498)
Fixed package search not urlencoding the input (#10500)
Fixed reinstall command not firing pre-install-cmd/post-install-cmd events (#10514)
Fixed edge case in path repositories where a symlink: true option would be ignored on old Windows and old PHP combos (#10482)
Fixed test suite compatibility with latest symfony/console releases (#10499)
Fixed require command failing when self.version is used as constraint (#10593)
Fixed --no-ansi / undecorated output still showing color in repo warnings (#10601)
Performance improvement in pool optimization step (composer/semver#131)
[2.2.7] 2022-02-25
Allow installation together with composer/xdebug-handler ^3 (#10528)
Fixed support for packages with no licenses in licenses command output (#10537)
Fixed handling of allow-plugins: false which kept warning (#10530)
Fixed enum parsing in classmap generation when the enum keyword is not lowercased (#10521)
Fixed author parsing in init command requiring an email whereas the schema allows a name only (#10538)
Fixed issues in require command when requiring packages which do not exist (but are provided by something else you require) (#10541)
Performance improvement in pool optimization step (#10546)
[2.2.6] 2022-02-04
BC Break: due to an oversight, the COMPOSER_BIN_DIR env var for binaries added in Composer 2.2.2 had to be renamed to COMPOSER_RUNTIME_BIN_DIR (#10512)
Fixed enum parsing in classmap generation with syntax like enum foo:string without space after : (#10498)
Fixed package search not urlencoding the input (#10500)
Fixed reinstall command not firing pre-install-cmd/post-install-cmd events (#10514)
Fixed edge case in path repositories where a symlink: true option would be ignored on old Windows and old PHP combos (#10482)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/matthiku/cSpot/network/alerts).
Bumps composer/composer from 2.0.9 to 2.2.12.
Release notes
Sourced from composer/composer's releases.
... (truncated)
Changelog
Sourced from composer/composer's changelog.
... (truncated)
Commits
ba61e76
Release 2.2.12a1f9baa
Fix 5.3/5.4 builds2ba8758
Update changelog2c40c53
Merge pull request from GHSA-x7cr-6qr6-2hh6915b97f
Fix docsd64e32c
Merge remote-tracking branch 'ktomk/patch-validate-no-check-lock' into 2.20a8dfe6
Clarify that autoloader-suffix should be a non-empty-string, fixes #10720 (#1...bb0edce
Fixed lock file being used when lock:false is in config, refs #10715 (#10726)939c998
validate lock-file if configured (#10715, --check-lock)9bfd059
Fix curl downloader to retry in case of DNS resolution failure, fixes #10716Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/matthiku/cSpot/network/alerts).