332c46af8b
Merge pull request from GHSA-h5h8-pc6h-jvvx
...
* Fix external process calls to avoid user input being able to pass extra parameters
* Tweak some fixes
3 years ago
2a50a9400f
Fix install step at the end of init command
3 years ago
e6cede4a61
Make sure update mirrors/--lock keeps the release date of the original reference when dev versions have newer commits, refs #9812
3 years ago
0ab4013788
Fix output listing some updates that do not really happen when updating mirrors/--lock, fixes #9812
3 years ago
d519fb8a53
Add warning when loading plugins of type composer-installer as they are unlikely to function correctly and should be upgraded to the composer-plugin type
3 years ago
ddc3693725
Switch to composer/metadata-minifier, fixes #9727
3 years ago
cf69f3194a
Fix doctype annotations
3 years ago
29befaa94b
Make ComposerRepository::configurePackageTransportOptions() protected. ( #9818 )
3 years ago
52a452c885
Improve InstalledVersions docs slightly
3 years ago
c3ae317a71
Support --no-dev combined with --locked in outdated/show commands, fixes #9788
3 years ago
18e268556d
Fix type warning on php8.1, refs #9770
3 years ago
dc84dbbbf7
Fixed detection of hg version when localized, fixes #9753
3 years ago
53a974f9c9
Tweak virtualbox detection and improve it by detecting vbox additions, refs #9627
3 years ago
836ca051d3
Merge branch '1.10' into 2.0
3 years ago
96acad1e45
Update github token pattern to match their latest updates
3 years ago
63c086c208
Add source package name to debug info when enabling plugins
3 years ago
3b89a9c3b4
Also attempt working around Vagrant filesystem issues when installing plugins initially, refs #9627
3 years ago
2f4b99eacd
MaxFileSizeException should reject download job ( #9778 )
3 years ago
7652408829
Only call sapi_windows_set_ctrl_handler() for CLI requests ( #9771 )
3 years ago
414586ba05
Attempt working around Vagrant filesystem issues, added COMPOSER_RUNTIME_ENV env var (set to vagrant), fixes #9627
3 years ago
17747181d0
Clarify behavior of name in VCS repo, closes #9752
3 years ago
c81562b343
Merge branch '1.10' into 2.0
3 years ago
54889ca109
Document GH token usage and also make sure we redact them in Process debug output, refs #9757
3 years ago
dc83ba93f3
Update GitHub token pattern
...
GitHub is updating the format of auth tokens from `a-z0-9` to `A-Za-z0-9` ([notice](https://github.blog/changelog/2021-03-04-authentication-token-format-updates/ )).
I'm not sure why `.` is allowed, but I dare not to remove it. In this PR, the token validation regex is updated to allow `A-Za-z0-9` instead of the current all lower-case `a-z` and disallowed `_`.
3 years ago
ab84916422
Fix unclear error when a package can be found in lock but not in the remote repo, fixes #9750
3 years ago
de8a737015
Fix var shadowing
3 years ago
4a8e7daf56
Make sure that single files installed via file downloader get the executable bit set if they are a binary file, refs #9742
3 years ago
4bedd8379a
Fix php-proxying of binaries to avoid proxying phar files, fixes #9742
3 years ago
e9d405ff18
Avoid using str_replace for dev-master replacement as that may be a valid part of a branch name, fixes #9739
3 years ago
b451bcb1ac
Fix issue extracting archives into paths that already exist, fixes composer/installers#479
3 years ago
4f47a4c667
Proxy handling docs and tweaks ( #9735 )
3 years ago
07f59a9162
Preserve file permissions on Windows self-update ( #9733 )
...
Windows file operations result in different file permissions depending
if the file is copied or moved. A copy operation applies permissions
from the destination folder (or file if it already exists and does not
use inheritance), while a move operation generally preserves the source
file permissions.
Windows PHP `rename` uses MoveFileEx so if the user is running as an
admin and the destination is in a common (non-user) location, then the
permission for other users will be replaced by the admin user. Likewise
for the UAC elevation feature, which uses the cmd.exe `move` command.
This fix uses copy and delete operations on Windows, so that other users
can continue to run composer.phar
3 years ago
e3af4ee606
Include stdout as well as stderr if git stash/diff/.. fails, fixes #9720
3 years ago
7c910e6bfa
Revert autoload order fix, force bundled dependencies to be used over local dependencies, fixes #9721 , fixes #9717
3 years ago
bbd87934e9
Make sure we always pass a string to strtoupper
3 years ago
2597e195ef
Merge remote-tracking branch 'Sweetchuck/i9703-event-dispatcher-last-winner'
3 years ago
d855986c39
Also allow backslashes to work on cmd.exe for plain executable paths, fixes #9707
3 years ago
cf2128a889
Merge pull request #9713 from Seldaek/fix-unixy-proxy
...
Generate binary proxy in PHP if the target binary is detected as a PHP script
3 years ago
31d9f51572
Auto-detect mingw and assume it is interactive, fixes #9690
3 years ago
b3b0cf629e
Generate binary proxy in PHP if the target binary is detected as a PHP script, so custom PHP processes can be used to call them via the bin proxy path, fixes #9325
3 years ago
057006da4f
Make sure @php path/to/bla gets executed as php path\to\bla on windows, fixes #6968
3 years ago
8f7597da22
Use a different way to suppress output than changing output verbosity in exec command, fixes #9711
3 years ago
03e8cacd12
Merge pull request #9696 from Seldaek/fix_installed_versions_during_update
...
Fix installed versions usage issues when using it in plugins during a Composer update process
3 years ago
d91fe67a80
Remove default branch alias from versions which are numeric, fixes #9705
3 years ago
f7e8f7625f
Remove plugin installer hackery
3 years ago
360966dcdf
EventDispatcher uses only the return value of the last one listener, refs #9703
3 years ago
62af444821
Check if SODIUM_LIBRARY_VERSION is defined
3 years ago
cf324ee664
Make sure the plugins can use InstalledVersions to introspect themselves when being activated right after initial install
3 years ago
d4073a40f9
Prepend runtime-autoloaders so that dependencies get loaded over Composer bundled packages
...
As Composer is generally compatible with newer versions of Symfony than the bundled ones, this should
not be a problem if dependencies are shared, and it ensures that the most relevant code gets loaded.
3 years ago
1c715b5821
Never load dev requirements, refs #9683
3 years ago
Jordi Boggiano
Adam
Stephan
Brandon Kelly
Ayesh Karunaratne
John Stevenson
Dávid Andor