I'm using a Composer setup based on https://github.com/drupal-composer/drupal-project with the Drupal.org repository URL. The version of core installed is 7.50 - 7.51 is not downloaded when running composer update drupal/drupal --with-dependencies.

I've also tried removing the composer.lock file and running composer install, but it has the same result.

If I change the repository URL to https://packagist.drupal-composer.org and run the same command, 7.51 is downloaded.

Here is my composer.json:

{
  "repositories": [{
    "type": "composer",
    "url": "https://packages.drupal.org/7"
  }],
  "require": {
    "composer/installers": "~1.0",
    "derhasi/composer-preserve-paths": "0.1.*",
    "drupal/admin_theme": "^1.0",
    "drupal/adminimal_admin_menu": "^7.1",
    "drupal/adminimal_theme": "^7.1",
    "drupal/contact_google_analytics": "^1.4",
    "drupal/diff": "^3.2",
    "drupal/drupal": "7.*",
    "drupal/email": "^1.3",
    "drupal/entity": "^1.8",
    "drupal/features": "^2.10",
    "drupal/field_collection": "^1.0",
    "drupal/filefield_paths": "^1.0",
    "drupal/ga_tokenizer": "^1.5",
    "drupal/globalredirect": "^1.5",
    "drupal/google_analytics": "^2.3",
    "drupal/imagefield_crop": "^2.0",
    "drupal/libraries": "^2.3",
    "drupal/logintoboggan": "^1.5",
    "drupal/master": "^2.0",
    "drupal/menu_firstchild": "^1.1",
    "drupal/module_filter": "^2.0",
    "drupal/multiselect": "^1.12",
    "drupal/nice_menus": "^2.5",
    "drupal/page_title": "^2.7",
    "drupal/paranoia": "^1.6",
    "drupal/pathauto": "^1.3",
    "drupal/permissions_lock": "^1.0",
    "drupal/redirect": "^1.0",
    "drupal/references": "^2.1",
    "drupal/security_review": "^1.2",
    "drupal/strongarm": "^2.0",
    "drupal/views": "^3.14",
    "drupal/views_bulk_operations": "^3.3",
    "drupal/views_slideshow": "^3.1",
    "drupal/wysiwyg": "^2.2"
  },
  "conflict": {
    "drupal/core": "8.*"
  },
  "scripts": {
    "post-create-project-cmd": [
      "rm README.md LICENSE .travis.yml phpunit.xml.dist"
    ]
  },
  "config": {
    "vendor-dir": "vendor"
  },
  "minimum-stability": "dev",
  "prefer-stable": true,
  "extra": {
    "installer-paths": {
      "web/": ["type:drupal-core"],
      "web/sites/all/modules/contrib/{$name}/": ["type:drupal-module"],
      "web/sites/all/themes/contrib/{$name}/": ["type:drupal-theme"],
      "web/sites/all/libraries/{$name}/": ["type:drupal-library"],
      "web/sites/all/drush/{$name}/": ["type:drupal-drush"],
      "web/profiles/{$name}/": ["type:drupal-profile"]
    },
    "preserve-paths": [
      "web/sites/all/modules/contrib",
      "web/sites/all/modules/custom",
      "web/sites/all/themes/contrib",
      "web/sites/all/themes/custom",
      "web/sites/all/libraries",
      "web/sites/all/drush",
      "web/sites/default/settings.php",
      "web/sites/default/files"
    ],
    "patches": {},
    "branch-alias": {}
  },
  "require-dev": {
    "drupal/devel": "^1.5",
    "drupal/reroute_email": "^1.2",
    "drupal/stage_file_proxy": "^1.7"
  }
}

Comments

opdavies created an issue. See original summary.

webflo’s picture

Hi, could you dump the output of "composer why drupal/drupal"? Thanks!

opdavies’s picture

Sure.

__root__                         dev-master    requires  drupal/drupal (7.*)    
drupal/admin_menu                7.3.0-rc5     requires  drupal/drupal (7.*)    
drupal/admin_theme               1.0.0         requires  drupal/drupal (~7.0)   
drupal/adminimal_admin_menu      7.1.7         requires  drupal/drupal (7.*)    
drupal/adminimal_theme           7.1.24        requires  drupal/drupal (7.*)    
drupal/contact_google_analytics  1.4.0         requires  drupal/drupal (~7.0)   
drupal/ctools                    1.11.0        requires  drupal/drupal (~7.0)   
drupal/devel                     1.5.0         requires  drupal/drupal (~7.0)   
drupal/diff                      3.2.0         requires  drupal/drupal (~7.0)   
drupal/email                     1.3.0         requires  drupal/drupal (~7.0)   
drupal/entity                    1.8.0         requires  drupal/drupal (~7.0)   
drupal/features                  2.10.0        requires  drupal/drupal (~7.0)   
drupal/field_collection          1.0.0-beta11  requires  drupal/drupal (~7.0)   
drupal/filefield_paths           1.0.0         requires  drupal/drupal (~7.0)   
drupal/ga_tokenizer              1.5.0         requires  drupal/drupal (~7.0)   
drupal/globalredirect            1.5.0         requires  drupal/drupal (~7.0)   
drupal/google_analytics          2.3.0         requires  drupal/drupal (~7.0)   
drupal/googleanalytics           2.3.0         requires  drupal/drupal (~7.0)   
drupal/imagefield_crop           2.0.0         requires  drupal/drupal (*)      
drupal/libraries                 2.3.0         requires  drupal/drupal (^7.11)  
drupal/logintoboggan             1.5.0         requires  drupal/drupal (~7.0)   
drupal/master                    2.0.0-beta4   requires  drupal/drupal (~7.0)   
drupal/menu_firstchild           1.1.0         requires  drupal/drupal (*)      
drupal/module_filter             2.0.0         requires  drupal/drupal (~7.0)   
drupal/multiselect               1.12.0        requires  drupal/drupal (~7.0)   
drupal/nice_menus                2.5.0         requires  drupal/drupal (*)      
drupal/page_title                2.7.0         requires  drupal/drupal (~7.0)   
drupal/paranoia                  1.6.0         requires  drupal/drupal (~7.0)   
drupal/pathauto                  1.3.0         requires  drupal/drupal (*)      
drupal/permissions_lock          1.0.0         requires  drupal/drupal (~7.0)   
drupal/redirect                  1.0.0-rc3     requires  drupal/drupal (~7.0)   
drupal/references                2.1.0         requires  drupal/drupal (*)      
drupal/reroute_email             1.2.0         requires  drupal/drupal (~7.0)   
drupal/security_review           1.2.0         requires  drupal/drupal (~7.0)   
drupal/stage_file_proxy          1.7.0         requires  drupal/drupal (~7.0)   
drupal/strongarm                 2.0.0         requires  drupal/drupal (~7.0)   
drupal/token                     1.6.0         requires  drupal/drupal (~7.0)   
drupal/views                     3.14.0        requires  drupal/drupal (~7.0)   
drupal/views_bulk_operations     3.3.0         requires  drupal/drupal (~7.0)   
drupal/views_slideshow           3.1.0         requires  drupal/drupal (~7.0)   
drupal/wysiwyg                   2.2.0         requires  drupal/drupal (~7.0)   
opdavies’s picture

Priority: Major » Critical

Any progress on this issue?

I'm currently stuck on an unsecure version of D7 core and cannot update following https://www.drupal.org/SA-CORE-2016-005.

Mixologic’s picture

Status: Active » Postponed (maintainer needs more info)

Sorry its been so long, I took a look at this and created a composer.json with what you have above and did a composer install.

The first thing that happened was that the package constraints for adminimal_theme and adminimal_admin_menu are set to packagist.drupal-composer.org style version numbers:

Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - The requested package drupal/adminimal_admin_menu ^7.1 exists as drupal/adminimal_admin_menu[dev-1.x, 1.x-dev, 1.7.0, 1.6.0, 1.5.0, 1.4.0, 1.3.0, 1.2.0, 1.1.0] but these are rejected by your constraint.
  Problem 2
    - The requested package drupal/adminimal_theme ^7.1 exists as drupal/adminimal_theme[dev-1.x, 1.x-dev, 1.24.0, 1.23.0, 1.22.0, 1.21.0, 1.20.0, 1.19.0, 1.18.0, 1.17.0, 1.16.0, 1.5.0, 1.4.0, 1.3.0, 1.2.0, 1.1.0, 1.0.0] but these are rejected by your constraint.

I removed the 7's from that, did a composer install and it grabbed drupal/drupal 7.53

All of the metadata for drupal/drupal 7.50 and above exists at the facade, so Im not sure what else might be causing this.

If I edit the composer.json, set it to 7.50 manually, and composer update, it downgrades to 7.50. If I then change it back to 7.* and do a composer update drupal/drupal --with-dependencies it upgrades to 7.53 like I would expect it to.

If, after tweaking the version numbers for adminimal there is still a problem, how about posting the results of composer -vvv update drupal/drupal --with-dependencies

opdavies’s picture

Status: Postponed (maintainer needs more info) » Fixed

Ah, I hadn't spotted the incorrect Adminimal versions. Weird, as I don't think I've used the Packagist repo on that project, aside for testing the core issue.

I've fixed the versions, removed composer.lock and re-run composer install and got 7.53 so it seems like this was the issue.

Also, the composer create-project drupal-composer/drupal-project:7.x-dev some-dir --stability dev --no-interaction command from https://github.com/drupal-composer/drupal-project/tree/7.x gets 7.53 too. :)

Thanks!

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.