Skip to content

Composer: controlled update of CS dependencies - #71

Merged
rdohms merged 3 commits into
masterfrom
feature/composer-controlled-cs-update
Mar 20, 2023
Merged

Composer: controlled update of CS dependencies#71
rdohms merged 3 commits into
masterfrom
feature/composer-controlled-cs-update

Conversation

@jrfnl

@jrfnl jrfnl commented Mar 20, 2023

Copy link
Copy Markdown
Collaborator

Composer: allow the PHPCS plugin

The dealerdirect/phpcodesniffer-composer-installer Composer plugin is used by the DMS Coding Standard to register external PHPCS standards with PHPCS.

As of Composer 2.2.0, Composer plugins need to be explicitly allowed to run. This adds the necessary configuration for that.

Refs:

Composer: remove explicit PHPCS dependency

The squizlabs/php_codesniffer package is a dependency of the dms/coding-standard package, not of this package.

Better to let the dms/coding-standard package (and its dependencies) manage the minimum require PHPCS version.

Composer: controlled update of CS dependencies

... without changing the version constraints.

jrfnl added 3 commits March 20, 2023 06:09
The `dealerdirect/phpcodesniffer-composer-installer` Composer plugin is used by the DMS Coding Standard to register external PHPCS standards with PHPCS.

As of Composer 2.2.0, Composer plugins need to be explicitly allowed to run. This adds the necessary configuration for that.

Refs:
* https://blog.packagist.com/composer-2-2/#more-secure-plugin-execution
The `squizlabs/php_codesniffer` package is a dependency of the `dms/coding-standard` package, not of **_this_** package.

Better to let the `dms/coding-standard` package (and its dependencies) manage the minimum require PHPCS version.
... without changing the version constraints.
@jrfnl jrfnl added the CI This issue or pull request is related to the build process label Mar 20, 2023
@jrfnl jrfnl added this to the v0.5.0 milestone Mar 20, 2023
@jrfnl
jrfnl requested a review from rdohms March 20, 2023 05:19
@jrfnl jrfnl mentioned this pull request Mar 20, 2023
@rdohms
rdohms merged commit 24a52e7 into master Mar 20, 2023
@rdohms
rdohms deleted the feature/composer-controlled-cs-update branch March 20, 2023 10:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CI This issue or pull request is related to the build process

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants