BC Break: The json format of audit command now has reportedAt as an RFC3339 string instead of an object which was a mistake (#11120)
Fixed json format of audit command which was missing affectedVersions (#11120)
Fixed plugin commands not being loaded during bash completions (#11074)
Fixed parsing of inline aliases within complex constraints with || or , (#11086)
Fixed min-php version check in autoload.php to avoid crashing sites running on PHP 5.5 or below silently with a 200 (#11091)
Fixed JsonFile reading files without checking if they are readable first (#11077)
Fixed require command with --dry-run failing when requiring a package requiring stability flag extraction (#11112)
2.4.2
Fixed bash completion hanging when running as root without COMPOSER_ALLOW_SUPERUSER set (#11024)
Fixed handling of plugin activation when running as root without COMPOSER_ALLOW_SUPERUSER set so it always happens after prompting, or does not happen if input is non-interactive
Added composer/class-map-generator dependency to replace Composer\Autoload\ClassMapGenerator which is now deprecated (#10885)
Added --locked to depends/prohibits commands (#10834)
Added --strict-psr flag to dump-autoload command to fail the process if PSR violations were detected, useful for CI (#10886)
Added COMPOSER_PREFER_STABLE and COMPOSER_PREFER_LOWEST env vars to turn on --prefer-stable/--prefer-lowest on update and require command, useful for CI (#10919)
Added support for temporary update constraints on all packages (now also including non-root dependencies) (#10773)
Added --major-only flag to the outdated command to show only packages with major version updates (#10827)
Added sections for direct and transitive deps in outdated command output (#10779)
Added ability for cache GC to clean up vcs and repo caches (#10826)
Added --gc flag to clear-cache to only trigger a garbage collection instead of clearing everything (#10826)
Added signal (SIGINT, SIGTERM, SIGHUP) handling to ensure we wait for the child process to exit before Composer exits to avoid dropping output (#10958)
Added prompt suggesting using --dev when requiring packages with dev/testing/static analysis keywords present (#10960)
BC Break: The json format of audit command now has reportedAt as an RFC3339 string instead of an object which was a mistake (#11120)
Fixed json format of audit command which was missing affectedVersions (#11120)
Fixed plugin commands not being loaded during bash completions (#11074)
Fixed parsing of inline aliases within complex constraints with || or , (#11086)
Fixed min-php version check in autoload.php to avoid crashing sites running on PHP 5.5 or below silently with a 200 (#11091)
Fixed JsonFile reading files without checking if they are readable first (#11077)
Fixed require command with --dry-run failing when requiring a package requiring stability flag extraction (#11112)
[2.4.2] 2022-09-14
Fixed bash completion hanging when running as root without COMPOSER_ALLOW_SUPERUSER set (#11024)
Fixed handling of plugin activation when running as root without COMPOSER_ALLOW_SUPERUSER set so it always happens after prompting, or does not happen if input is non-interactive
Added composer/class-map-generator dependency to replace Composer\Autoload\ClassMapGenerator which is now deprecated (#10885)
Added --locked to depends/prohibits commands (#10834)
Added --strict-psr flag to dump-autoload command to fail the process if PSR violations were detected, useful for CI (#10886)
Added COMPOSER_PREFER_STABLE and COMPOSER_PREFER_LOWEST env vars to turn on --prefer-stable/--prefer-lowest on update and require command, useful for CI (#10919)
Added support for temporary update constraints on all packages (now also including non-root dependencies) (#10773)
Added --major-only flag to the outdated command to show only packages with major version updates (#10827)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot]
commented
2 years ago
Bumps composer/composer from 2.0.13 to 2.4.3.
Release notes
Sourced from composer/composer's releases.
... (truncated)
Changelog
Sourced from composer/composer's changelog.
... (truncated)
Commits
b34c0e9Release 2.4.3c70ae30Update changelogf6e67e5Fix json format of audit command missing affectedVersions, fix reportedAt for...4faa8c0Update docs about root usage, refs #11093bc93f73Add an error msg to clearly explain that plugins are disabled when running as...acddc1fFix require failing to do a dry-run when requiring a package with a stability...7e679f3Update phpstan80907cdEnsure files are readable before reading in JsonFile, fixes #11077205ba37Fix testsc447c12Fix min-php version check to avoid crashing sites with a 200, fixes #11091Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)