All Versions
166
Latest Version
Avg Release Cycle
13 days
Latest Release
518 days ago
Changelog History
Page 8
Changelog History
Page 8
-
v2.0.0-RC1 Changes
September 10, 2020๐ Not up to date with Composer 2 yet? Check the alpha1 changelog and alpha2 changelog and alpha3 changelog and especially the UPGRADE guide first.
๐ Try it out now and get ready for the upcoming stable release
- โก๏ธ Use
composer self-update --preview
to try the latest RC version (2.x). - โก๏ธ Use
composer self-update --snapshot
to try the latest dev build (2.x). - ๐ Use
composer self-update --stable
to go back to stable releases (1.x for now). - ๐ Use
composer self-update --1
in CI/scripts if you want to pin Composer to 1.x until you are ready to migrate, this will ensure you stay on 1.x releases even once a 2.0 stable comes out.
๐ Changelog
- โ Added more advanced filtering to avoid loading all versions of all referenced packages when resolving dependencies, which should reduce memory usage further in some cases
- ๐ฆ Added support for many new lib-* packages in the platform repository and improved version detection for some ext-* and lib-* packages
- โ Added an
--ask
flag tocreate-project
command to make Composer prompt for the install dir name, useful for project install instructions - โ Added support for tar in artifact repositories
- โ Added a
cache-read-only
config option to make the cache usable in read only mode for containers and such - โ Added better error reporting for a few more specific cases
- โ Added a new optional
available-package-patterns
attribute for v2-format Composer repositories, see UPGRADE for details - ๐ Fixed more PHP 8 compatibility issues
- ๐ Lots of minor bug fixes for regressions
- โก๏ธ Use
-
v2.0.0-alpha3 Changes
August 03, 2020๐ Not up to date with Composer 2 yet? Check the alpha1 changelog and alpha2 changelog and UPGRADE guide first.
๐ Try it out now and get ready for the upcoming stable release
- ๐ Use
composer self-update --preview
to try the latest alpha/prerelease version (2.x). - โก๏ธ Use
composer self-update --snapshot
to try the latest dev build (2.x). - ๐ Use
composer self-update --stable
to go back to stable releases (1.x for now). - ๐ Use
composer self-update --1
in CI/scripts if you want to pin Composer to 1.x until you are ready to migrate, this will ensure you stay on 1.x releases even once a 2.0 stable comes out.
๐ Changelog
- ๐ฅ Breaking: Zip archives loaded by artifact repositories must now have a composer.json on top level, or a max of one folder on top level of the archive
- โ Added --no-dev support to
show
andoutdated
commands to skip dev requirements - โ Added support for multiple --repository flags being passed into the
create-project
command, only useful in combination with--add-repository
to persist them to composer.json - โ Added a new optional
list
API endpoint for v2-format composer repositories, see UPGRADE for details - ๐ Fixed
show -a
command not listing anything - ๐ Fixed solver bug where it ended in a "Reached invalid decision id 0"
- ๐ Fixed updates of git-installed packages on windows
- ๐ Lots of minor bug fixes
- ๐ Use
-
v2.0.0-alpha2 Changes
June 24, 2020๐ Not up to date with Composer 2 yet? Check the alpha1 changelog and UPGRADE guide first.
๐ Try it out now and get ready for the upcoming stable release
- ๐ Use
composer self-update --preview
to try the latest alpha/prerelease version (2.x). - โก๏ธ Use
composer self-update --snapshot
to try the latest dev build (2.x). - ๐ Use
composer self-update --stable
to go back to stable releases (1.x for now). - ๐ Use
composer self-update --1
in CI/scripts if you want to pin Composer to 1.x until you are ready to migrate, this will ensure you stay on 1.x releases even once a 2.0 stable comes out.
๐ Changelog
- โ Added parallel installation of packages (requires OSX/Linux/WSL, and that
unzip
is present in PATH) - โ Added optimization of constraints by compiling them to PHP code, which should reduce CPU time of updates
- โ Added handling of Ctrl-C on Windows for PHP 7.4+
- โ Added better support for default branch names other than
master
- โ Added --format=summary flag to
license
command - ๐ Fixed issue in platform check when requiring ext-zend-opcache
- ๐ Fixed inline aliases issues
- ๐ Fixed git integration issue when signatures are set to be shown by default
- ๐ Use
-
v2.0.0-alpha1 Changes
June 03, 2020๐ Try it out now and get ready for the upcoming stable release
- ๐ Use
composer self-update --preview
to try the latest alpha/prerelease version (2.x). - โก๏ธ Use
composer self-update --snapshot
to try the latest dev build (2.x). - ๐ Use
composer self-update --stable
to go back to stable releases (1.x for now). - ๐ Use
composer self-update --1
in CI/scripts if you want to pin Composer to 1.x until you are ready to migrate, this will ensure you stay on 1.x releases even once a 2.0 stable comes out.
๐ Changelog
- ๐ฅ Breaking: This is a major release and while we tried to keep things compatible for most users, you might want to have a look at the UPGRADE guides
- ๐ Many CPU and memory performance improvements
- โก๏ธ The update command is now much more deterministic as it does not take the already installed packages into account
- โก๏ธ Package installation now performs all network operations first before doing any changes on disk, to reduce the chances of ending up with a partially updated vendor dir
- ๐ Partial updates and require/remove are now much faster as they only load the metadata required for the updated packages
- โ Added a platform-check step when vendor/autoload.php gets initialized which checks the current PHP version/extensions match what is expected and fails hard otherwise. Can be disabled with the platform-check config option
- โ Added a
Composer\InstalledVersions
class which is autoloaded in every project and lets you check which packages/versions are present at runtime - โ Added a
composer-runtime-api
virtual package which you can require (as e.g.^2.0
) to ensure things like the InstalledVersions class above are present. It will effectively force people to use Composer 2.x to install your project - โ Added support for parallel downloads of package metadata and zip files, this requires that the curl extension is present and we thus strongly recommend enabling curl
- โ Added much clearer dependency resolution error reporting for common error cases
- โ Added support for updating to a specific version with partial updates, as well as a --with flag to pass in temporary constraint overrides
- โ Added support for TTY mode on Linux/OSX/WSL so that script handlers now run in interactive mode
- โ Added
only
,exclude
andcanonical
options to all repositories, see repository priorities for details - โ Added support for lib-zip platform package
- โ Added
pre-operations-exec
event to be fired before the packages get installed/upgraded/removed - โ Added
pre-pool-create
event to be fired before the package pool for the dependency solver is created, which lets you modify the list of packages going in - โ Added
post-file-download
event to be fired after package dist files are downloaded, which lets you do additional checks on the files - โ Added --locked flag to
show
command to see the packages from the composer.lock file - โ Added --unused flag to
remove
command to make sure any packages which are not needed anymore get removed - โ Added --dry-run flag to
require
andremove
commands - โ Added --no-install flag to
update
,require
andremove
commands to disable the install step and only do the update step (composer.lock file update) - โ Added --with-dependencies and --with-all-dependencies flag aliases to
require
andremove
commands for consistency withupdate
- โ Added more info to
vendor/composer/installed.json
, a dev key stores whether dev requirements were installed, and every package now has an install-path key with its install location - Added COMPOSER_DISABLE_NETWORK which if set makes Composer do its best to run offline. This can be useful when you have poor connectivity or to do benchmarking without network jitter
- โ Added --json and --merge flags to
config
command to allow editing complexextra.*
values by using json as input - โ Added confirmation prompt when running Composer as superuser in interactive mode
- โ Added --no-check-version to
validate
command to remove the warning in case the version is defined - โ Added --ignore-platform-req (without s) to all commands supporting --ignore-platform-reqs, which accepts a package name so you can ignore only specific platform requirements
- โ Added support for wildcards (
*
) in classmap autoloader paths - โ Added support for configuring GitLab deploy tokens in addition to private tokens, see gitlab-token
- โ Added support for package version guessing for require and init command to take all platform packages into account, not just php version
- ๐ Fixed package ordering when autoloading and especially when loading plugins, to make sure dependencies are loaded before their dependents
- ๐ Fixed suggest output being very spammy, it now is only one line long and shows more rarely
- ๐ Fixed conflict rules like e.g. >=5 from matching dev-master, as it is not normalized to 9999999-dev internally anymore
- ๐ Use
-
v1.10.23 Changes
October 05, 2021- Security: Fixed command injection vulnerability on Windows (GHSA-frqg-7g38-6gcf / CVE-2021-41116)
-
v1.10.22 Changes
April 27, 2021- Security: Fixed command injection vulnerability in HgDriver/HgDownloader and hardened other VCS drivers and downloaders (GHSA-h5h8-pc6h-jvvx / CVE-2021-29472)
-
v1.10.21 Changes
April 01, 2021- Fixed support for new GitHub OAuth token format
- Fixed processes silently ignoring the CWD when it does not exist
-
v1.10.20 Changes
January 27, 2021- Fixed exclude-from-classmap causing regex issues when having too many paths
- Fixed compatibility issue with Symfony 4/5
-
v1.10.19 Changes
December 04, 2020- Fixed regression on PHP 8.0
-
v1.10.18 Changes
December 03, 2020- Allow installation on PHP 8.0