[#36338] - [4.1] Enable Composer plugins - dealerdirect/phpcodesniffer-composer-installer
- Closed
- 8 Jan 2022
- Medium
- Build: 4.1-dev
- # 36338
- Diff
- PhilETaylor:composer-plugins
User tests: Successful: Unsuccessful:
Composer 2.2 brings with it new security features, one of these is to disable composer plugins for security with allow-plugins
Composer 2.2 will be a LTS Version
Use composer self-update --preview to try the latest prerelease version to test this PR.
Use composer self-update --stable to go back to stable releases..
https://github.com/composer/composer/releases/tag/2.2.0-RC1
https://getcomposer.org/doc/06-config.md#allow-plugins
When installing Joomla 4 using composer 2.2 you will get this:
Composer plugins should be disabled by default, unless there is a compelling reason for them to run.
Unless this PR is merged, you will be asked each time if you want to run this plugin or not.
| Status | New | ⇒ | Pending |
joomla-cms-bot
- | Category | ⇒ | External Library Composer Change |
| Title |
|
||||||
| Labels |
Added:
Composer Dependency Changed
?
|
||
can you redo this for 4.0 or should I do it by my self?
| Status | Pending | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2022-01-08 22:43:32 |
| Closed_By | ⇒ | Quy |
Composer 2.2 has now been released
https://blog.packagist.com/composer-2-2/