Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update for Composer 2.2 #291

Merged
merged 1 commit into from Feb 17, 2022
Merged

Conversation

jrfnl
Copy link
Member

@jrfnl jrfnl commented Feb 17, 2022

The dealerdirect/phpcodesniffer-composer-installer Composer plugin is a non-dev requirement for PHPCSUtils.

As of Composer 2.2.0, Composer plugins need to be explicitly allowed to run.

This commit updates the installation instructions to handle this.
It also adds an info block suggesting how to handle this for external standards including PHPCSUtils.

Includes updating the URL references to the plugin to point to the new home of the plugin. (see upstream issue #146)

Refs:

The `dealerdirect/phpcodesniffer-composer-installer` Composer plugin is a non-dev requirement for PHPCSUtils.

As of Composer 2.2.0, Composer plugins need to be explicitly allowed to run.

This commit updates the installation instructions to handle this.
It also adds an info block suggesting how to handle this for external standards including PHPCSUtils.

Includes updating the URL references to the plugin to point to the new home of the plugin. (see [upstream issue #146](PHPCSStandards/composer-installer#146))

Refs:
* https://blog.packagist.com/composer-2-2/#more-secure-plugin-execution
@jrfnl jrfnl added this to the 1.0.0-alpha4 milestone Feb 17, 2022
@jrfnl jrfnl merged commit 6e5b233 into develop Feb 17, 2022
@jrfnl jrfnl deleted the feature/readme-update-for-composer-2.2 branch February 17, 2022 22:59
jrfnl added a commit that referenced this pull request Feb 17, 2022
Follow up on #291
@jrfnl jrfnl mentioned this pull request Feb 17, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant