
Problem/Motivation
Some dependencies need updating, some need to be reconsidered and removed or replaced.
Proposed resolution
Must haves:
Completed issues and should-haves:
- #3088369: Update Drupal 9 to Symfony 4.4-dev
- #3041076: Update Drupal 9 to Twig 2
- #2950132: Support PHPUnit 7 optionally in Drupal 8, while keeping support for ^6.5
- #3091418: Update composer dependencies on 9.0.x following PHP 7.2 requirement (and followups)
- #3104473: Use version of guzzlehttp/guzzle ^6.5.2
- #3078671: Pin behat/mink and behat/mink-selenium2-driver to use resolvable release
- #3105181: Remove egulias/EmailValidator
- #3104265: Update Composer dependencies on Doctrine components in 9.0.x
- #3104015: Replace ZendFramework/* dependencies with their Laminas equivalents
- #3104354: Update Laminas components including Diactoros
- #3104353: Upgrade to Guzzle 7
- #3104265: Update Composer dependencies on Doctrine components in 9.0.x
- #3109261: Update composer dependencies on 9.0.x following PHP 7.3 requirement
- #3043471: Replace the DiactorosFactory message factory in symfony/psr-http-message-bridge with a PSR-17 compliant message factory
- #3117342: Update dependencies for Drupal 9
There is also an ongoing issue at #2864037: [META] Update core PHP dependencies which is not Drupal-9-specific.
The following will happen later after Drupal 9.0.0 sometime in Drupal 9's lifetime:
The following are considered for removal or replacement: #3080837: [meta] PHP (and JS) dependencies to consider decoupling or removing
The following are already not used by Drupal 8 and will be removed in Drupal 9: #3032686: Remove references to unused packages in Drupal 9's vendor hardening
Remaining tasks
See above.
User interface changes
Likely none, depends on updates with UIs.
API changes
Depend on updated dependencies that Drupal is exposing as-is.
Data model changes
Depend on updates.
Comments
Comment #2
gábor hojtsyComment #3
gábor hojtsyComment #4
gábor hojtsyComment #5
gábor hojtsyComment #6
gábor hojtsyComment #7
gábor hojtsyComment #8
gábor hojtsyAdd ckeditor.
Comment #9
gábor hojtsyRetitling to make this distinct from #3080837: [meta] PHP (and JS) dependencies to consider decoupling or removing. Removing items tracked there from this issue.
Comment #10
gábor hojtsyComment #11
xjmIt doesn't have an issue yet so I'm not sure where to put it, but we need to make sure we continue to use one of the LTS releases of Diactoros: https://framework.zend.com/long-term-support So far, that's still 1.7.
Comment #13
xjmComment #14
gábor hojtsyReparenting to beta requirements since Drupal 9 is open for development.
Comment #15
xjmAdding #3094468: [plan] Update core JavaScript (and CSS) dependencies prior to 9.0.0-beta1 to the IS list.
Comment #16
xjmUpdating the list of issues in the IS.
Comment #17
xjm#3104265: Update Composer dependencies on Doctrine components in 9.0.x was split out.
Comment #18
xjmA couple additional issues to find or file:
Guzzle 7 went into beta this week: https://github.com/guzzle/guzzle/releases/tag/7.0.0-beta.1 We should at least test increasing Drupal 9's dependency to Guzzle 7.
We should increase Drupal 9's Diactoros requirement to 2.1. As we learned in #3087531: Use Diactoros LTS version 1.7, not 1.8 which is out of security coverage and from the maintainers, the information documented on their Support and LTS support policy is somewhat misleading, but the 2.x major version will eventually include some LTS minor that should be supported throughout D9's lifetime.
Comment #19
xjmFiled #3104354: Update Laminas components including Diactoros and #3104353: Upgrade to Guzzle 7.
Comment #20
catchComment #21
andypost@catch 11 duplicates 7 now, is this reordering?
Comment #22
fgm@xjm Diactoros also needs to be replaced by its Laminas version, as discussed on #3104015: Replace ZendFramework/* dependencies with their Laminas equivalents.
Comment #23
xjmComment #24
xjmComment #25
xjmAdding #3107927: Update Node.js to a more recent version on DrupalCI and #3107918: Require Node.js 12, which are more than just another frontend dependency since DrupalCI depends on the old version of Node.js.
Comment #26
xjmComment #27
gábor hojtsyOpened #3109261: Update composer dependencies on 9.0.x following PHP 7.3 requirement following #3106075: Bump minimum PHP for Drupal 9 to PHP 7.3. Added to issue summary. Who is taking it? :)
Comment #28
longwaveOpened #3113985: Update dependencies for Drupal 9 to bump dependencies following 9.0.0-alpha1.
Comment #29
catchComment #30
catchComment #31
catchComment #32
longwaveWould it be good to get #3043471: Replace the DiactorosFactory message factory in symfony/psr-http-message-bridge with a PSR-17 compliant message factory in before Drupal 9.0.0?
Comment #33
catchNow that #3020296: Remove Symfony's classloader as it does not exist in Symfony 4 has landed, downgrading to major - still some should-have issues here.
Comment #34
longwaveOpened #3117342: Update dependencies for Drupal 9 as our dependencies are out of date again.
Comment #36
gábor hojtsyOpened the Drupal 10 equivalent at #3197484: [META] Update / reconsider PHP dependencies for Drupal 10, thanks @longwave for pointing this out.