Closed (duplicate)
Project:
Drupal core
Version:
main
Component:
composer
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Issue tags:
Reporter:
Created:
23 Jul 2026 at 16:12 UTC
Updated:
25 Jul 2026 at 05:45 UTC
Jump to comment: Most recent
Comments
Comment #2
catchComment #3
catchBenefits ComposerTaggedReleaseTest more but potentially both: https://git.drupalcode.org/project/drupal/-/jobs/11123115
Comment #5
catchHandling ComponentsIsolatedBuildTest in #3612922: Optimize ComponentsIsolatedBuildTest.
Comment #6
mstrelan commentedShould we also skip this in package_manager tests? Some of them are skipped, but should be updated anyway. I believe
\Drupal\Tests\package_manager\Build\PackageInstallDirectWriteTest::testPackageInstallis not skipped, and AFAICT audit runs even forcomposer update --lock.FWIW we already use
COMPOSER_NO_AUDIT=1in\Drupal\BuildTests\Composer\Plugin\Unpack\Functional\UnpackRecipeTest. It might be feasible to set that somewhere globally in CI? Unless of course we have tests that depend on it.Comment #7
catch@mstrelan yes it's worth doing, in profiling it adds about 3s to every operation.
Setting it globally in CI sounds good, not sure if we add it to .gitlab-ci.yml envrinment variables whether it'll successfully get set for composer but that'd probably be easiest?
Comment #8
catchDuplicate of #3491268: Look into skipping audit of composer operations in package manager tests.