Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.Problem/Motivation
Since Drupal 9.0.0-alpha1 several of our dependencies have new releases.
Proposed resolution
Run composer update --with-dependencies
Remaining tasks
Check that dependency updates pass tests and any new major releases don't cause issues.
User interface changes
None
API changes
New features may become available.
Data model changes
None
Release notes snippet
Drupal's dependencies have been updated to their latest versions.
+------------------------------+---------+---------+
| Production Changes | From | To |
+------------------------------+---------+---------+
| composer/installers | v1.7.0 | v1.8.0 |
| egulias/email-validator | 2.1.15 | 2.1.17 |
| stack/builder | v1.0.5 | v1.0.6 |
| symfony/console | v4.4.3 | v4.4.4 |
| symfony/debug | v4.4.3 | v4.4.4 |
| symfony/dependency-injection | v4.4.3 | v4.4.4 |
| symfony/error-handler | v4.4.3 | v4.4.4 |
| symfony/event-dispatcher | v4.4.3 | v4.4.4 |
| symfony/http-foundation | v4.4.3 | v4.4.4 |
| symfony/http-kernel | v4.4.3 | v4.4.4 |
| symfony/mime | v5.0.3 | v5.0.4 |
| symfony/polyfill-ctype | v1.13.1 | v1.14.0 |
| symfony/polyfill-iconv | v1.13.1 | v1.14.0 |
| symfony/polyfill-intl-idn | v1.13.1 | v1.14.0 |
| symfony/polyfill-mbstring | v1.13.1 | v1.14.0 |
| symfony/polyfill-php72 | v1.13.1 | v1.14.0 |
| symfony/polyfill-php73 | v1.13.1 | v1.14.0 |
| symfony/process | v4.4.3 | v4.4.4 |
| symfony/routing | v4.4.3 | v4.4.4 |
| symfony/serializer | v4.4.3 | v4.4.4 |
| symfony/translation | v4.4.3 | v4.4.4 |
| symfony/validator | v4.4.3 | v4.4.4 |
| symfony/var-dumper | v5.0.3 | v5.0.4 |
| symfony/yaml | v4.4.3 | v4.4.4 |
| twig/twig | v2.12.3 | v2.12.5 |
+------------------------------+---------+---------+
+-----------------------------------+--------+--------+
| Dev Changes | From | To |
+-----------------------------------+--------+--------+
| composer/composer | 1.9.2 | 1.9.3 |
| composer/spdx-licenses | 1.5.2 | 1.5.3 |
| phpdocumentor/reflection-docblock | 4.3.4 | 5.0.0 |
| seld/phar-utils | 1.0.2 | 1.1.0 |
| squizlabs/php_codesniffer | 3.5.3 | 3.5.4 |
| symfony/browser-kit | v4.4.3 | v4.4.4 |
| symfony/css-selector | v4.4.3 | v4.4.4 |
| symfony/dom-crawler | v4.4.3 | v4.4.4 |
| symfony/filesystem | v4.4.3 | v4.4.4 |
| symfony/finder | v4.4.3 | v4.4.4 |
| symfony/lock | v4.4.3 | v4.4.4 |
| symfony/phpunit-bridge | v4.4.3 | v4.4.4 |
| webmozart/assert | 1.6.0 | 1.7.0 |
+-----------------------------------+--------+--------+
| Comment | File | Size | Author |
|---|---|---|---|
| #2 | 3113985.patch | 44.79 KB | longwave |
Comments
Comment #2
longwaveI knew about the Symfony point release but there are far more than I expected.
New major releases:
phpdocumentor/reflection-docblock
New minor releases:
Symfony polyfills
composer/installers
seld/phar-utils
webmozart/assert
Comment #3
longwaveComment #4
berdirTests pass, patch looks OK, the regular dependencies are only patch updates, dev dependencies also has some minor and even a major update, but I would say that's fine as it's not actually an API that we consider to "provide"?
So I think this is fine?
Only argument would be to hold this off until just before beta, as especially if we miss the first deadline, we're going to have to repeat this anyway.
Comment #5
alexpottUndoubtedly will have to be done again but doing this often is helpful because
* if you install via composer create-project and don't use the core recommended meta-package then these are dependencies you get anyway.
* helps find any new bugs earlier
Committed 0eae5aa and pushed to 9.0.x. Thanks!
Comment #7
xjmComment #8
xjmPutting the summary of changes in the IS in lieu of a custom release note for alpha2.