chore(deps): bump composer/installers to v2 and mercator to dev-master#1875
Merged
Conversation
Widens composer/installers from ~1.0 to ^1.0 || ^2.0 and updates humanmade/mercator (require-dev) from ^1.0 to "dev-master as 1.1.0". The tagged mercator 1.0.3 pins composer/installers to ~1.0 and blocks v2; dev-master allows ~1.0 || ~2.0. mercator is dev-only and is not shipped in the release zip. Lock now resolves to composer/installers v2.3.0 and mercator dev-master (5adf68c, 2024-12-06). Plugin install paths under the v2 installer are unchanged. Closes #1821
PatelUtkarsh
force-pushed
the
chore/composer-installers-v2
branch
from
947849b to
f779fe6
Compare
PatelUtkarsh
changed the title
There was a problem hiding this comment.
Pull request overview
This PR updates Composer dependency constraints to allow composer/installers v2 by widening the root requirement and switching the dev-only humanmade/mercator dependency to a newer branch that no longer pins installers to v1.
Changes:
- Widen
composer/installersfrom~1.0to^1.0 || ^2.0incomposer.json. - Bump
humanmade/mercator(require-dev) todev-master as 1.1.0so the lock can resolve installers v2. - Regenerate
composer.lockto lockcomposer/installersatv2.3.0andmercatorat the referenceddev-mastercommit.
Critical issues
- No critical issues found.
High issues
- No high issues found.
Medium/Low issues
- No medium/low issues found.
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| composer.json | Widens composer/installers constraint and bumps dev-only humanmade/mercator to an alias of dev-master to unblock installers v2. |
| composer.lock | Locks updated dependency graph, including composer/installers v2.3.0 and humanmade/mercator at the referenced dev-master commit. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Widens composer/installers from ~1.0 to ^1.0 || ^2.0 and bumps humanmade/mercator (require-dev) from ^1.0 to "dev-master as 1.1.0" so the lock can actually move to installers v2.
The tagged mercator 1.0.3 (2018) pins composer/installers to ~1.0 and was the only blocker. mercator's master branch (last commit 2024-12-06) loosens that to ~1.0 || ~2.0. mercator is a dev-only dependency used to exercise multisite + domain-mapping in PHPUnit and is not shipped in the release zip.
Lock resolves to composer/installers v2.3.0 and mercator dev-master (5adf68c).
Closes #1821