Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.Problem/Motivation
In #2912387: Stop using wikimedia/composer-merge-plugin we are enforcing Composer 1.9.0 as minimum version for development but, weirdly, we are still allowing ^1.8 in composer.json require-dev, and are actually locked at 1.8.5.
Proposed resolution
Update composer.json and composer.lock with expectations.
Remaining tasks
User interface changes
API changes
Data model changes
Release notes snippet
| Comment | File | Size | Author |
|---|---|---|---|
| #9 | 3075785-9-9.0.x.patch | 3.46 KB | alexpott |
| #9 | 3075785-9-8.9.x.patch | 3.46 KB | alexpott |
| #9 | 3075785-9-8.8.x.patch | 3.46 KB | alexpott |
| #8 | 3075785-8.9-5.patch | 3.46 KB | andypost |
| #7 | 3075785-4.patch | 3.81 KB | andypost |
Comments
Comment #2
greg.1.anderson commentedComposer 1.9 is only required for Drupal core development. If you are using a drupal-composer/drupal-project based site, then older versions of Composer still work.
Comment #3
MixologicAlso we require composer 1.9 to be installed as your global tool when working with the git clone of drupal as a core developer, *however* when we require composer/composer as a dev dependency that is so that we can use it for testing the composer plugins that are written into core, and as such it acts like a library and not a tool in that case.
It probably wouldnt hurt to bump it to 1.9, but its not totally necessary.
Comment #5
mondrakeThis is becoming critical in the path to get Drupal 8.8 tests pass with PHP 7.4.
Relaeas 1.9.0 upstream is not yet 7.4 compatible, so marking postponed.
Comment #6
mondrakecomposer/composer 1.9.1 was released, it includes PHP 7.4 compatibility fixes.
Comment #7
andypostHere's attempt
Comment #8
andypostthe one for 8.9.x
Comment #9
alexpottSo in order to generate this patch you need to:
1. Update composer.json
2. Run composer update composer/composer
3. Run composer update --lock (to remove the composer bin entry from the lock file)
That last step is not fun.
This patch is only a reroll of the last patch...
Comment #14
alexpottComment #15
MixologicIm very much unsure why this is happening, or why it keeps coming back.
Comment #16
xjm