I'm going to close this PR because it's actually not correct but also I'll explain why.
First, the declared minimum dbunit version is ~1.3, unless we change the composer.json files to list the explicit versions that the CMS is shipping/using this is still acceptable (with that said does our unit test suite depend on anything in newer dbunit versions?).
Second, the change in the composer.lock file is invalid. Specifically, the line you changed comes from an auto-generated object from the Session package's dependencies. The 1.3.1 tag declares ~1.2 as the minimum, so the edit there actually causes the data for the included release to be incorrect.
Lastly, if you make a change to the composer.json file and run composer update the hash and content-hash keys should be updated. They aren't here, which means you manually edited the lock file. Short of a merge conflict, you should never manually edit that file.
I'm going to close this PR because it's actually not correct but also I'll explain why.
First, the declared minimum dbunit version is ~1.3, unless we change the composer.json files to list the explicit versions that the CMS is shipping/using this is still acceptable (with that said does our unit test suite depend on anything in newer dbunit versions?).
Second, the change in the composer.lock file is invalid. Specifically, the line you changed comes from an auto-generated object from the Session package's dependencies. The 1.3.1 tag declares ~1.2 as the minimum, so the edit there actually causes the data for the included release to be incorrect.
Lastly, if you make a change to the composer.json file and run
composer update
the hash and content-hash keys should be updated. They aren't here, which means you manually edited the lock file. Short of a merge conflict, you should never manually edit that file.