BC Break: due to an oversight, the COMPOSER_BIN_DIR env var for binaries added in Composer 2.2.2 had to be renamed to COMPOSER_RUNTIME_BIN_DIR (#10512)
Fixed enum parsing in classmap generation with syntax like enum foo:string without space after : (#10498)
Fixed package search not urlencoding the input (#10500)
Fixed reinstall command not firing pre-install-cmd/post-install-cmd events (#10514)
Fixed edge case in path repositories where a symlink: true option would be ignored on old Windows and old PHP combos (#10482)
Fixed test suite compatibility with latest symfony/console releases (#10499)
Bumped composer-runtime-api and composer-plugin-api to 2.2.0
UX Change: Added allow-plugins config value to enhance security against runtime execution, this will prompt you the first time you use a plugin and may hang pipelines if they aren't using --no-interaction (-n) as they should (#10314)
Added an optimization pass to reduce the amount of redundant inspected during resolution, drastically improving memory and CPU usage (#9261, #9620)
Added wildcard support to --ignore-platform-req (e.g. ext-*) (#10083)
Added support for ignoring the upper bound of platform requirements using "name+" notation e.g. using --ignore-platform-req=php+ would allow installing a package requiring php: 8.0.* on PHP 8.1, but not on PHP 7.4. Useful for CI builds of upcoming PHP versions (#10318)
BC Break: due to an oversight, the COMPOSER_BIN_DIR env var for binaries added in Composer 2.2.2 had to be renamed to COMPOSER_RUNTIME_BIN_DIR (#10512)
Fixed enum parsing in classmap generation with syntax like enum foo:string without space after : (#10498)
Fixed package search not urlencoding the input (#10500)
Fixed reinstall command not firing pre-install-cmd/post-install-cmd events (#10514)
Fixed edge case in path repositories where a symlink: true option would be ignored on old Windows and old PHP combos (#10482)
Fixed test suite compatibility with latest symfony/console releases (#10499)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps composer/composer from 2.0.13 to 2.2.6.
Release notes
Sourced from composer/composer's releases.
... (truncated)
Changelog
Sourced from composer/composer's changelog.
... (truncated)
Commits
ce785a1
Release 2.2.6809b372
Update changelog for 2.2.64f2e2ec
Update docs for renamed COMPOSER_RUNTIME_BIN_DIR335c3c9
Update baselined124c13
Add hints when the arg of show is not found, fixes #10493ee36c5e
Fix error reporting issues when partial updates cannot update due to a symlin...6c36920
Bump semver8053d79
Fix reinstall command not firing pre-install-cmd/post-install-cmd events, fix...88171e4
Remove superfluous arg39cb505
Fix phpstan warningsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)