Problem/Motivation
Drupal 10.2.0 is due in the week of December 11, 2023
A number of composer dependencies have minor and patch level release bumps that we should try to incorporate in the release.
Notes:
- This issue is chasing the ever moving target to keep as up-to-date as possible.
It will be kept updated until the release of Drupal 10.2.0.Until the week of December 11, 2023, this issue will not be on Needs Review in order to get the most up-to-date list of composer dependencies in the 10.2.0 release.There will be an up-to-date with the current state of the MR$ composer-lock-diff --no-linksin #2.
Steps to reproduce
$ composer outdated
Proposed resolution
- Remove the "conflict": { "phpstan/phpstan": "1.10.45 || 1.10.46" in the root composer.json. PHPStan 1.10.47 should incorporate the fix for the regression (https://github.com/phpstan/phpstan-src/pull/2794) we avoided by adding that.
- Bump minimal version of phpstan/phpstan to 1.10.47 since the baseline won't pass on the above mentioned versions.
- $ composer update --with=phpunit/phpunit:^9
Remaining tasks
User interface changes
API changes
Data model changes
Release notes snippet
Issue fork drupal-3405696
Show commands
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
- 3405696-update-composer-dependencies
changes, plain diff MR !5654
Comments
Comment #2
spokjeThis list is up-to-date up to and including #10.
Comment #3
spokjeComment #4
spokjeComment #5
spokjeComment #7
spokjeComment #8
spokjeAlso see #3405704: symfony/psr-http-message-bridge major version bump.
Comment #9
spokjeComment #10
spokjehttps://github.com/guzzle/guzzle/releases/tag/7.8.1
https://github.com/guzzle/promises/releases/tag/2.0.2
https://github.com/guzzle/psr7/releases/tag/2.6.2
Updated MR and #2.
Comment #11
andypostRelated could be merged here but may leave alone
Comment #12
andypostAdded changes from #3406622: Upgrade phpspec/prophecy to v1.18.0 to support PHP 8.3 to the MR
Comment #13
spokjeSince this is now (apparently, since marked so by @andypost) ready for review, I've:
- "Striken-through" some lines in the IS that are now invalid.
- Clarified in #2 up to what commit the list in there is valid.
- Unassigned myself.
- Shrugged off my amazement.
- Unfollowed the issue.
Comment #14
spokjeComment #15
smustgrave commentedSeems to be all minor releases. Though with 10.2 out in 3 days wonder if it's too late?
Comment #16
mondrakephpspec/prophecy-phpunit 2.1.0 was just released, https://github.com/phpspec/prophecy-phpunit/releases/tag/v2.1.0
Comment #17
andypostAdded following changes
Needs review and fixes issues with PHP 8.3 deprecations https://github.com/PHPCSStandards/PHP_CodeSniffer/releases/tag/3.8.0
Composer prevents SF7 https://getcomposer.org/changelog/2.6.6
Comment #18
andypostone functional test repeatedly fails
Comment #20
longwaveinstaclick/php-webdriver1.4.17 changed attribute(): https://github.com/instaclick/php-webdriver/releases/tag/1.4.17The relevant code change is https://github.com/instaclick/php-webdriver/compare/1.4.16..1.4.18#diff-...
Previously we were calling it as
getAttribute()which has stopped working but switching toattribute()appears to work on both the old and new releases in local testing.Comment #21
andypostThank you!
Today mink has releases to append here
- https://github.com/minkphp/Mink/releases/tag/v1.11.0
- https://github.com/minkphp/MinkBrowserKitDriver/releases/tag/v2.2.0
- https://github.com/minkphp/MinkSelenium2Driver/releases/tag/v1.7.0
Comment #22
smustgrave commentedIf this is targeting 10.2 is there a date this needs to be reviewed by?
Comment #23
andypostI think a bit more packages may add declaration and CI runs for PHP 8.3 in next week, also compatibility with SF7 a bonus
I bet right before 10.2 it should be considered for review
Comment #24
spokjeAnother interesting question: Why is this NR when there are (a lot of) failing functional tests after the update of
behat/minkand friends?Comment #25
longwaveThe 10.2.0 release window is 11-15 December, really this needs to be completed towards the start of that window to ensure we have a stable release.
Comment #26
longwaveBehat has added more strict typing and the test failures all look related to that. At least two differentissues so far:
Will continue to investigate.
Comment #27
longwaveWe can work around both these issues, we should probably issue deprecations and fix the callers properly though.
Comment #28
longwaveOpened https://github.com/minkphp/Mink/issues/862 as there appears to be no supported way to check for a non-existent header in Mink, however we do have
responseHeaderExists()already which we should convert all cases to use, perhaps in a followup.Comment #29
longwaveWe also incorrectly pass headers to
drupalGet()in a number of places. The docs say the array should be keyed by header name with the value being the header value; but in some cases we passed numeric arrays with both the header and value concatenated into the array value. This apparently still worked in older versions of Mink but now it is stricter, so I fixed all the cases I could find.An alternative way around this might be to detect it in
drupalGet()and issue a deprecation, maybe we should do that instead?Comment #30
longwaveThere are quite a lot of changes here. Unsure if we should just break these out to another issue, and avoid upgrading Mink in 10.2.0.
Comment #31
longwaveNot sure what is up with BlockDragTest.
Comment #32
longwaveGuessing it is related to the upgrade of the Syn library in the Selenium driver: https://github.com/minkphp/MinkSelenium2Driver/releases/tag/v1.7.0
Syn is used for drag operations, we have had issues with it before.
This makes me think it might be better to defer this upgrade until 10.3.
Comment #33
andypost+1 to move mink to separate issue it could be upgraded in bugfix release
Comment #35
quietone commentedI created an Issue for Behat #3407834: Update behat/mink and friends and reverted those changes from the MR.
Comment #36
smustgrave commentedSince today is the start of the 10.2 window mentioned #25 took a look at this again.
Tests appear green, applied locally and didn't notice anything weird.
Going to mark but guess it could be left open till the 15th? Or whenever the cutoff is.
Comment #39
catchCommitted/pushed to 11.x and cherry-picked to 10.2.x, thanks!
Do we have an issue already to switch to https://github.com/PHPCSStandards/PHP_CodeSniffer ?
Comment #40
longwave@catch We don't depend on it directly:
Also as per https://github.com/PHPCSStandards/PHP_CodeSniffer/issues/109 only the GitHub repo is changing now, the namespace on Packagist will stay the same (this has changed since the original announcement).
Comment #41
catchOh interesting, I though there was going to be a 301 and we'd eventually want to update, but if it's 100% indirect and also we don't need to change anyway, all good then.