Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Composer: controlled update of CS dependencies #71

Merged
merged 3 commits into from Mar 20, 2023

Conversation

jrfnl
Copy link
Collaborator

@jrfnl jrfnl commented Mar 20, 2023

Composer: allow the PHPCS plugin

The dealerdirect/phpcodesniffer-composer-installer Composer plugin is used by the DMS Coding Standard to register external PHPCS standards with PHPCS.

As of Composer 2.2.0, Composer plugins need to be explicitly allowed to run. This adds the necessary configuration for that.

Refs:

Composer: remove explicit PHPCS dependency

The squizlabs/php_codesniffer package is a dependency of the dms/coding-standard package, not of this package.

Better to let the dms/coding-standard package (and its dependencies) manage the minimum require PHPCS version.

Composer: controlled update of CS dependencies

... without changing the version constraints.

The `dealerdirect/phpcodesniffer-composer-installer` Composer plugin is used by the DMS Coding Standard to register external PHPCS standards with PHPCS.

As of Composer 2.2.0, Composer plugins need to be explicitly allowed to run. This adds the necessary configuration for that.

Refs:
* https://blog.packagist.com/composer-2-2/#more-secure-plugin-execution
The `squizlabs/php_codesniffer` package is a dependency of the `dms/coding-standard` package, not of **_this_** package.

Better to let the `dms/coding-standard` package (and its dependencies) manage the minimum require PHPCS version.
... without changing the version constraints.
@jrfnl jrfnl added the CI This issue or pull request is related to the build process label Mar 20, 2023
@jrfnl jrfnl added this to the v0.5.0 milestone Mar 20, 2023
@jrfnl jrfnl requested a review from rdohms March 20, 2023 05:19
@jrfnl jrfnl mentioned this pull request Mar 20, 2023
@rdohms rdohms merged commit 24a52e7 into master Mar 20, 2023
19 checks passed
@rdohms rdohms deleted the feature/composer-controlled-cs-update branch March 20, 2023 10:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
CI This issue or pull request is related to the build process
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants