For some reason, composer started putting the ssh URL for the source of fengyuanchen/cropper instead of the https URL. This URL makes its way to the drupal-org.make file via `composer package` and D.O ultimately rejects the make file when I try to make a branch release because the ssh URL isn’t on the whitelist.

Comments

balsama created an issue. See original summary.

  • balsama committed d24351e on 8.x-3.x 
    Issue #2933135: (Temporary fix) SSH vs HTTPS url for source URL in lock...
phenaproxima’s picture

phenaproxima
he/him
Primary language English
Location Massachusetts
commented
Status: Active » Closed (works as designed)

The drupal.org make file is no longer really supported; we essentially use it a placeholder so that the tarball will be built in accordance with the security coverage policy, but Lightning actively includes code to prevent tarball installation (because it has not worked for a long time due to drupal.org's inability to package Composer dependencies).

Therefore, I think we can close this issue.