Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.Problem/Motivation
Packages were held back because of the older version of PHP should now be upgradable since we use PHP 7.3.
Proposed resolution
Upgrade all the packages we can.
Remaining tasks
Test all the things.
User interface changes
None.
API changes
None (hopefully).
Data model changes
None.
Release notes snippet
$ composer-lock-diff --no-links
+------------------------------+---------+----------+
| Production Changes | From | To |
+------------------------------+---------+----------+
| asm89/stack-cors | 1.2.0 | 1.3.0 |
| composer/semver | 1.5.0 | 1.5.1 |
| egulias/email-validator | 2.1.11 | 2.1.15 |
| pear/console_getopt | v1.4.2 | v1.4.3 |
| pear/pear-core-minimal | v1.10.9 | v1.10.10 |
| pear/pear_exception | v1.0.0 | v1.0.1 |
| psr/log | 1.1.0 | 1.1.2 |
| symfony-cmf/routing | 2.1.0 | 2.1.1 |
| symfony/class-loader | v3.4.36 | v3.4.37 |
| symfony/console | v4.4.2 | v4.4.3 |
| symfony/debug | v4.4.2 | v4.4.3 |
| symfony/dependency-injection | v4.4.2 | v4.4.3 |
| symfony/error-handler | v4.4.2 | v4.4.3 |
| symfony/event-dispatcher | v4.4.2 | v4.4.3 |
| symfony/http-foundation | v4.4.2 | v4.4.3 |
| symfony/http-kernel | v4.4.2 | v4.4.3 |
| symfony/mime | v5.0.2 | v5.0.3 |
| symfony/process | v4.4.2 | v4.4.3 |
| symfony/routing | v4.4.2 | v4.4.3 |
| symfony/serializer | v4.4.2 | v4.4.3 |
| symfony/translation | v4.4.2 | v4.4.3 |
| symfony/validator | v4.4.2 | v4.4.3 |
| symfony/var-dumper | v5.0.2 | v5.0.3 |
| symfony/yaml | v4.4.2 | v4.4.3 |
| twig/twig | v2.12.1 | v2.12.3 |
| typo3/phar-stream-wrapper | v3.1.3 | v3.1.4 |
+------------------------------+---------+----------+
+---------------------------+--------+--------+
| Dev Changes | From | To |
+---------------------------+--------+--------+
| composer/ca-bundle | 1.2.4 | 1.2.6 |
| composer/composer | 1.9.1 | 1.9.2 |
| composer/xdebug-handler | 1.3.3 | 1.4.0 |
| fabpot/goutte | v3.2.3 | v3.3.0 |
| instaclick/php-webdriver | 1.4.6 | 1.4.7 |
| justinrainbow/json-schema | 5.2.8 | 5.2.9 |
| seld/jsonlint | 1.7.1 | 1.7.2 |
| seld/phar-utils | 1.0.1 | 1.0.2 |
| squizlabs/php_codesniffer | 3.5.0 | 3.5.3 |
| symfony/browser-kit | v4.4.2 | v4.4.3 |
| symfony/css-selector | v4.4.2 | v4.4.3 |
| symfony/dom-crawler | v4.4.2 | v4.4.3 |
| symfony/filesystem | v4.4.2 | v4.4.3 |
| symfony/finder | v4.4.2 | v4.4.3 |
| symfony/lock | v4.4.2 | v4.4.3 |
| symfony/phpunit-bridge | v4.4.2 | v4.4.3 |
+---------------------------+--------+--------+
| Comment | File | Size | Author |
|---|---|---|---|
| #12 | 3109261-12.patch | 61.34 KB | longwave |
Comments
Comment #2
longwave#3106918: Drop support of PHPUnit 6 in Drupal 9 because it will never get used anyway covers a lot of this for the dev dependencies at least.
Comment #3
DamienMcKennaTagging as a requirement for Drupal 9.0-beta1.
Comment #4
DamienMcKennaComment #5
DamienMcKennaTagging as a requirement for Drupal 9.0-beta1.
Comment #6
longwaveLet's see if a full
composer updatepasses tests.Comment #7
bradjones1While we're at it is it within scope to be more explicit about the PHP version max requirement as well as minimum? This reminds me of #3103255: Add upper PHP constraint to composer.json and/or the installer and #3098281: Ensure that 'composer update' evaluates dependencies using the correct PHP version which would be a straightforward way to make this kind of upgrade path even easier to perform in the future?
The latter of those tickets is RTBC and the former is a one-line change.
Comment #8
longwave#3043471: Replace the DiactorosFactory message factory in symfony/psr-http-message-bridge with a PSR-17 compliant message factory is another upgrade we can get in here.
Comment #9
Gábor HojtsyComment #10
Gábor HojtsyCan we isolate this from #3106918: Drop support of PHPUnit 6 in Drupal 9 because it will never get used anyway so they don't overlap (ie. remove the dependency updates that are there) or should we postpone this?
Comment #11
Gábor Hojtsy#3106918: Drop support of PHPUnit 6 in Drupal 9 because it will never get used anyway landed, so we can move forward with this.
Comment #12
longwaveComment #13
Gábor HojtsyThere looks like only 3 updates that are minor updates, all others are patch updates and no major version updates.
The minor updates are
asm89/stack-cors,composer/xdebug-handlerandfabpot/goutte.Only stack-cors is a non-dev depdency. Their changes are very limited between 1.2.0 and 1.3.0: https://github.com/asm89/stack-cors/compare/1.2.0...1.3.0 -- the only real change is this fix for Chrome's CORB: https://github.com/asm89/stack-cors/commit/426300e8d2d645693cd001077c8f6...
So all in this looks very innocent to me :)
In other words what we turned up is regular dependency updates and not due to PHP 7.3 being allowed now. That was phpunit, but already dealt with :)
Comment #14
longwaveTo confirm this a bit further after applying this patch
composer outdatedshows the only things we are missing are Symfony 5, PHPUnit 8 and some more commits on behat/mink-selenium2-driver. None of those commits are useful to us: https://github.com/minkphp/MinkSelenium2Driver/compare/0a09c43..e2f7a8aComment #15
alexpottCommitted 01793fb and pushed to 9.0.x. Thanks!
Comment #18
xjmPasting the full list in the release notes in lieu of writing a custom release note for alpha2.