Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 1, 2025

Bumps composer/composer from 2.8.6 to 2.8.8.

Release notes

Sourced from composer/composer's releases.

2.8.8

  • Fixed json schema issues with version validation (#12367)
  • Fixed issues running on 32bit machines (#12365)

Full Changelog: composer/composer@2.8.7...2.8.8

2.8.7

  • Bumped justinrainbow/json-schema dependency to 6.x (#12348)
  • Added COMPOSER_MAX_PARALLEL_PROCESS env var to control max amount of parallel processes Composer will start (#12356)
  • Added zstd/brotli presence in diagnose command output
  • Fixed error handler to avoid spamming deprecation notices (#12360)
  • Fixed InstalledVersions returning duplicate data at Composer runtime (#12225)
  • Fixed handling of --with ... constraints to make them apply to packages replaced a package with a different name (#12353)
  • Fixed deprecation warnings showing up in IDE code inspections within the vendor dir (#12331)
  • Fixed a few json schema completeness issues (#12332, #12321)
  • Fixed issue autoloading files with a .phar inside the path (#12326)

Full Changelog: composer/composer@2.8.6...2.8.7

Changelog

Sourced from composer/composer's changelog.

[2.8.8] 2025-04-04

  • Fixed json schema issues with version validation (#12367)
  • Fixed issues running on 32bit machines (#12365)

[2.8.7] 2025-04-03

  • Bumped justinrainbow/json-schema dependency to 6.x (#12348)
  • Added COMPOSER_MAX_PARALLEL_PROCESS env var to control max amount of parallel processes Composer will start (#12356)
  • Added zstd/brotli presence in diagnose command output
  • Fixed error handler to avoid spamming deprecation notices (#12360)
  • Fixed InstalledVersions returning duplicate data at Composer runtime (#12225)
  • Fixed handling of --with ... constraints to make them apply to packages replaced a package with a different name (#12353)
  • Fixed deprecation warnings showing up in IDE code inspections within the vendor dir (#12331)
  • Fixed a few json schema completeness issues (#12332, #12321)
  • Fixed issue autoloading files with a .phar inside the path (#12326)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels May 1, 2025
@asgrim
Copy link
Collaborator

asgrim commented May 1, 2025

@dependabot rebase

@asgrim asgrim self-assigned this May 1, 2025
@asgrim asgrim added this to the 0.10.0 milestone May 1, 2025
Bumps [composer/composer](https://github.com/composer/composer) from 2.8.6 to 2.8.8.
- [Release notes](https://github.com/composer/composer/releases)
- [Changelog](https://github.com/composer/composer/blob/main/CHANGELOG.md)
- [Commits](composer/composer@2.8.6...2.8.8)

---
updated-dependencies:
- dependency-name: composer/composer
  dependency-version: 2.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/composer/composer/composer-2.8.8 branch from 7d3afea to df48832 Compare May 1, 2025 19:10
@asgrim asgrim merged commit 453a462 into main May 1, 2025
38 checks passed
@dependabot dependabot bot deleted the dependabot/composer/composer/composer-2.8.8 branch May 1, 2025 19:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file php Pull requests that update Php code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant