Problem/Motivation
As with #3281578: Increase Composer dependency constraints to latest minors for forward-compatibility: Our Composer constraints for 10.0 and 9.5 should require the latest minor versions of things so that dependency updates can be done safely in case of security releases.
Proposed resolution
Update 10.0 and 9.5 dependencies to the latest versions.
Remaining tasks
TBD
User interface changes
N/A
API changes
N/A
Data model changes
N/A
Release notes snippet
Drupal core’s composer constraints have been increased to require the latest minor versions for forward compatibility. This ensures that if any composer package that Drupal core depends upon has a security release, the Drupal core security update will be non-disruptive, because if possible no minor version increase will occur for the affected dependency, only a patch version increase.
| Comment | File | Size | Author |
|---|---|---|---|
| #4 | interdiff-4.txt | 10.99 KB | xjm |
| #4 | composer-3306946-4-10.0.x.patch | 62.74 KB | xjm |
| #3 | composer-3306946-3-9.5.x.patch | 29.29 KB | xjm |
| #2 | composer-3306946-2-10.0.x.patch | 53.34 KB | xjm |
Comments
Comment #2
xjmComment #3
xjmComment #4
xjmI forgot to mention that I initially left out the coding standards packages in case they would introduce fails for HEAD. Here is a version of the 10.0.x patch that attempts to update them. Lets's see if this passes. (If it fails we'll need a separate issue.)
Comment #5
spokjeThere's also an RTBC #3306515: Update dependencies for Drupal 10.0 and an (outdated) #3295519: Update dependencies for Drupal 9.5
Comment #6
xjmWhoops. Mine increases constraints though which is a beta requirement so I think we should maybe do this version.... hmm will comment there.
Comment #7
andypostLet's get it in!
reasons
-
sebastian/typeadds "true" type to fulfill compatibility with PHP 8.2 https://wiki.php.net/rfc/true-type- composer 2.4 allows to use SF 6.2
Comment #8
alexpottCrediting @andypost and @Spokje due to work on the duplicate #3306515: Update dependencies for Drupal 10.0
Comment #10
alexpottCrediting @longwave for #3295519: Update dependencies for Drupal 9.5
Comment #11
alexpottCommitted and pushed f1e6390ca5 to 10.1.x and 4b1b424dcd to 10.0.x. Thanks!
Committed bd29f2e and pushed to 9.5.x. Thanks!