Closed cmc333333 closed 6 years ago
Hey there, @fureigh!
~8.5
, which means anything >=8.5 but less than 8.6. The composer file is meant to describe compatible versions rather than exact versions, which is why the lock file is separate; when we run compose update
we get the latest version that's still compatible. In this case I needed to update the three symfony libraries prior to drupal/core
, but composer.json wasn't modified.Very good! LGTM. 🚢
Sweet! I don't want to deploy this so close to Friday and with you out at a conf, so I'll gently lay the buck at your feet, @fureigh :)
Drupal core issued a security release today that bumps up their dependent libraries: https://www.drupal.org/SA-CORE-2018-005
To satisfy, this updates Drupal and three of the symfony libraries it depends on. In one of the patch releases sine 8.5.3, Drupal also modified two of the files it auto-creates; we've included those changes here as well.