Problem/Motivation

As with #3281578: Increase Composer dependency constraints to latest minors for forward-compatibility: Our Composer constraints for 10.0 and 9.5 should require the latest minor versions of things so that dependency updates can be done safely in case of security releases.

Proposed resolution

Update 10.0 and 9.5 dependencies to the latest versions.

Remaining tasks

TBD

User interface changes

N/A

API changes

N/A

Data model changes

N/A

Release notes snippet

Drupal core’s composer constraints have been increased to require the latest minor versions for forward compatibility. This ensures that if any composer package that Drupal core depends upon has a security release, the Drupal core security update will be non-disruptive, because if possible no minor version increase will occur for the affected dependency, only a patch version increase.

Comments

xjm created an issue. See original summary.

xjm’s picture

StatusFileSize
new53.34 KB
xjm’s picture

StatusFileSize
new29.29 KB
xjm’s picture

StatusFileSize
new62.74 KB
new10.99 KB

I forgot to mention that I initially left out the coding standards packages in case they would introduce fails for HEAD. Here is a version of the 10.0.x patch that attempts to update them. Lets's see if this passes. (If it fails we'll need a separate issue.)

spokje’s picture

xjm’s picture

Whoops. Mine increases constraints though which is a beta requirement so I think we should maybe do this version.... hmm will comment there.

andypost’s picture

Component: other » composer
Status: Needs review » Reviewed & tested by the community

Let's get it in!

reasons
- sebastian/type adds "true" type to fulfill compatibility with PHP 8.2 https://wiki.php.net/rfc/true-type
- composer 2.4 allows to use SF 6.2

alexpott’s picture

Crediting @andypost and @Spokje due to work on the duplicate #3306515: Update dependencies for Drupal 10.0

alexpott credited longwave.

alexpott’s picture

alexpott’s picture

Status: Reviewed & tested by the community » Fixed

Committed and pushed f1e6390ca5 to 10.1.x and 4b1b424dcd to 10.0.x. Thanks!
Committed bd29f2e and pushed to 9.5.x. Thanks!

  • alexpott committed f1e6390 on 10.1.x
    Issue #3306946 by xjm, Spokje, andypost, longwave: Update Composer...

  • alexpott committed 4b1b424 on 10.0.x
    Issue #3306946 by xjm, Spokje, andypost, longwave: Update Composer...

  • alexpott committed bd29f2e on 9.5.x
    Issue #3306946 by xjm, Spokje, andypost, longwave: Update Composer...

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.