Open prudloff-insite opened 1 year ago
When using 2.0.1, if I run composer update --no-dev, merged dev dependencies are removed from the lock.
composer update --no-dev
For example, if I have this in a JSON file that is then merged:
"require-dev": { "friendsoftwig/twigcs": "^5.0" }
And then I run something like composer update symfony/http-kernel --no-dev, this dependency is removed from the parent lock file:
composer update symfony/http-kernel --no-dev
- { - "name": "friendsoftwig/twigcs", - "version": "5.2.0", - "source": { - "type": "git", - "url": "https://github.com/friendsoftwig/twigcs.git", - "reference": "5123655a918d232788da4d7b0545c9f75b08023a" - }, ...
It seems to be because ExtraPackage::mergeInto() only merges require-dev when in dev mode.
ExtraPackage::mergeInto()
require-dev
When using 2.0.1, if I run
composer update --no-dev
, merged dev dependencies are removed from the lock.For example, if I have this in a JSON file that is then merged:
And then I run something like
composer update symfony/http-kernel --no-dev
, this dependency is removed from the parent lock file:It seems to be because
ExtraPackage::mergeInto()
only mergesrequire-dev
when in dev mode.