Problem/Motivation

The current version of drupal/core-dev requires phpunit/phpunit: ^9.6.13 which itself requires sebastian/resource-operations: ^3.0.3 which has been marked as abandoned/archived in GitHub as of March 13 2024.

Steps to reproduce

  1. Start an empty drupal/recommended-project composer project
  2. Run composer require --dev drupal/core-dev
  3. Run composer audit and see the failure due to the abandoned package.

This affects current code for Drupal 10.2, 10.3 and 11.x.

Proposed resolution

Likely this would be solved by updating to PHPUnit 10. According to https://github.com/sebastianbergmann/phpunit/issues/4828, PHPUnit 9 is no longer receiving any updates or releases so it is also considered abandoned.

This also can be avoided by using composer audit --no-dev

Remaining tasks

User interface changes

API changes

Data model changes

Release notes snippet

Comments

Dave Reid created an issue. See original summary.

cilefen’s picture

cilefen commented
Related issues: +#3427695: phpunit 9.6.* dependency sebastian/resource-operations was abandoned

This was reported.

dave reid’s picture

dave reid
he/him
Primary language English
Location Nebraska USA
commented
Status: Active » Closed (duplicate)

Yeah apparently searching for things with a dash in the middle caused no results to show up.

I think this can be marked as closed since the original maintainer of that package has added the desired abandoned: false to the package, created a new release, and then re-archived the repository.