Composer plugin to automate the most common tasks of applications.

Overview

Narrowspark Automatic

Narrowspark Automatic automates the most common tasks of applications, like installing and removing bundles or providers, copying files, boosting dependencies downloads, creating skeletons and other Composer dependencies based configurations.

How Does Narrowspark Automatic Work

Narrowspark Automatic is a Composer plugin that modifies the behavior of the require, update, create project, and remove commands. When installing or removing dependencies in an Automatic extended app, your Application can perform tasks before and after the execution of Composer tasks.

Consider the following example:

cd your-project
composer require viserio/console

If you execute this command in your Application that doesn’t support Narrowspark Automatic, this command will execute in the normal composer require behavior.

Note The automatic.json and composer.json extra key automatic are used to configure Narrowspark Automatic with configurators, script executors, custom-configurators, and more.

When Narrowspark Automatic is installed in your Application, it will check if a automatic.json file or a composer.json extra key with automatic exists. In the above example, Automatic decided which automated tasks need to be run after the installation.

Note Narrowspark Automatic keeps tracks of the configuration, in a automatic.lock file, which must be committed to your code repository.

Using Narrowspark Automatic in New Applications

Include Narrowspark Automatic as a required dependency to your app with this command: composer require narrospark/automatic.

Using Narrowspark Automatic for Skeleton Application

Narrowspark Automatic supports skeleton generation. For example this is your composer.json file:

{
    "type": "project",
    "license": "MIT",
    "require": {
        "php": "^7.2",
        "ext-mbstring": "*",
        "narrowspark/automatic": "^0.3.5",
        "narrowspark/skeleton-generators": "^0.1.0"
    },
    "extra": {
        "app-dir": "app",
        "config-dir": "config",
        "database-dir": "database",
        "public-dir": "public",
        "resources-dir": "resources",
        "routes-dir": "routes",
        "storage-dir": "storage",
        "tests-dir": "tests"
    },
    "autoload": {
        "psr-4": {
            "App\\": "app/"
        },
        "exclude-from-classmap": [
            "tests/"
        ]
    },
    "autoload-dev": {
        "psr-4": {
            "App\\Tests\\": "tests/"
        }
    },
    "minimum-stability": "dev",
    "prefer-stable": true
}

Automatic search all packages for the package type: automatic-skeleton. If packages are found with this type, all skeletons will be saved in the automatic.lock for the runtime.

This means you can execute the following command: composer create-project your/project to create an Automatic extended app, Automatic will ask which skeleton can be generated for your app.

Read the skeleton documentation to learn everything about how to create skeletons for your own app.

Narrowspark Automatic tasks are defined in a automatic.json file or in the composer extra key automatic and can contain any number of other files and directories. For example, this is the automatic.json for viserio/console:

{
    "configurators": {
        "providers": {
            "Viserio\\Component\\Console\\Provider\\ConsoleServiceProvider": ["global"],
            "Viserio\\Component\\Console\\Provider\\LazilyCommandsServiceProvider": ["global"]
        },
        "proxies": {
            "Viserio\\Component\\Console\\Proxy\\Console": ["global"]
        }
    },
    "script-extenders": [
        "Viserio\\Component\\Console\\Automatic\\CerebroScriptExtender"
    ]
}

The providers and proxies option tells Narrowspark Automatic in which environments this provider, proxy can be turn on automatically (all in this case).

The script-extenders option adds a new script executor to the Narrowspark Automatic auto-scripts. Now you can run viserio console commands in the auto-scripts section of your composer.json app file.

The instructions defined in this automatic.json file are also used by Narrowspark Automatic when uninstalling dependencies (for example composer remove viserio/console) to undo all changes. This means that Automatic can remove the Console Provider and Proxy from the app and remove the script executor from Narrowspark Automatic.

Read the configuration documentation to learn everything about how to create configuration for your own packages.

Automatic extends Composer

Narrowspark Automatic adds a parallel downloader with the feature to skip old dependencies tags for a download boost.

With the below example you can see how to add a skip tag to Narrowspark Automatic, with this it will skip all tags of cakephp that are older then 3.5.

=3.5" } } } }">
{
    "extra": {
        "automatic": {
            "require": {
                "cakephp/cakephp": ">=3.5"
            }
        }
    }
}

You can skip auto discovery for packages with this Narrowspark Automatic key dont-discover in your composer.json extra automatic section. Use the package name to skip the auto discovery, like in this example:

{
    "extra" : {
        "dont-discover": [
            "viserio/console"
        ]
    }
}

Auto discovery will now be skipped for viserio/console.

Automatic Security Audit

Narrowspark Automatic shows you on every composer install and composer update known security vulnerabilities for your installed dependencies based on FriendsOfPHP/security-advisories database.

If you like to change the default HTTP timeout = 20 for the downloader, add audit to your composer.json extra section, like in this example:

{
    "extra" : {
        "audit": {
            "timeout": "30"
        }
    }
}

Testing

You need to run:

$ php vendor/bin/phpunit

Versioning

This library follows semantic versioning, and additions to the code ruleset are performed in major releases.

Changelog

Please have a look at CHANGELOG.md.

Contributing

Please have a look at CONTRIBUTING.md.

Code of Conduct

Please have a look at CODE_OF_CONDUCT.md.

Credits

License

This package is licensed using the MIT License.

Please have a look at LICENSE.md.

Comments
  • Build(deps): Bump textlint from 11.6.3 to 11.7.3

    Build(deps): Bump textlint from 11.6.3 to 11.7.3

    Bumps textlint from 11.6.3 to 11.7.3.

    Release notes

    Sourced from textlint's releases.

    Support "module" filed

    textlint packages like @textlint/kernel support module field.

    It allows npm package CDN service to provide an optimized package.

    Example: https://cdn.skypack.dev/@textlint/kernel

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    If all status checks pass Dependabot will automatically merge this pull request.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in the .dependabot/config.yml file in this repo:

    • Update frequency
    • Automerge options (never/patch/minor, and dev/runtime dependencies)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
    dependency 
    opened by dependabot-preview[bot] 4
  • Build(deps): Bump textlint from 11.6.3 to 11.7.2

    Build(deps): Bump textlint from 11.6.3 to 11.7.2

    Bumps textlint from 11.6.3 to 11.7.2.

    Release notes

    Sourced from textlint's releases.

    Support "module" filed

    textlint packages like @textlint/kernel support module field.

    It allows npm package CDN service to provide an optimized package.

    Example: https://cdn.skypack.dev/@textlint/kernel

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    If all status checks pass Dependabot will automatically merge this pull request.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in the .dependabot/config.yml file in this repo:

    • Update frequency
    • Automerge options (never/patch/minor, and dev/runtime dependencies)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
    dependency 
    opened by dependabot-preview[bot] 4
  • Build(deps-dev): Update phpunit/phpunit requirement from ^8.5.4 to ^8.5.9

    Build(deps-dev): Update phpunit/phpunit requirement from ^8.5.4 to ^8.5.9

    Updates the requirements on phpunit/phpunit to permit the latest version.

    Changelog

    Sourced from phpunit/phpunit's changelog.

    [8.5.9] - 2020-11-10

    Fixed

    • #3965: Process Isolation throws exceptions when PHPDBG is used
    • #4470: Infinite recursion when --static-backup --strict-global-state is used

    [8.5.8] - 2020-06-22

    Fixed

    • #4312: Fix for #4299 breaks backward compatibility

    [8.5.7] - 2020-06-21

    Fixed

    • #4299: "No tests executed" does not always result in exit code 1
    • #4306: Exceptions during code coverage driver initialization are not handled correctly

    [8.5.6] - 2020-06-15

    Fixed

    • #4211: phpdbg_*() functions are scoped to PHPUnit\phpdbg_*()

    [8.5.5] - 2020-05-22

    Fixed

    • #4033: Unexpected behaviour when $GLOBALS is deleted

    [8.5.4] - 2020-04-23

    Changed

    • Changed how PHPUnit\TextUI\Command passes warnings to PHPUnit\TextUI\TestRunner

    [8.5.3] - 2020-03-31

    Fixed

    • #4017: Do not suggest refactoring to something that is also deprecated
    • #4133: expectExceptionMessageRegExp() has been removed in PHPUnit 9 without a deprecation warning being given in PHPUnit 8
    • #4139: Cannot double interfaces that declare a constructor with PHP 8
    • #4144: Empty objects are converted to empty arrays in JSON comparison failure diff

    [8.5.2] - 2020-01-08

    Removed

    Commits

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    If all status checks pass Dependabot will automatically merge this pull request.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in the .dependabot/config.yml file in this repo:

    • Update frequency
    • Automerge options (never/patch/minor, and dev/runtime dependencies)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
    dependency 
    opened by dependabot-preview[bot] 3
  • Build(deps-dev): Update symfony/process requirement from ^5.0.8 to ^5.1.8

    Build(deps-dev): Update symfony/process requirement from ^5.0.8 to ^5.1.8

    Updates the requirements on symfony/process to permit the latest version.

    Release notes

    Sourced from symfony/process's releases.

    v5.1.8

    Changelog (https://github.com/symfony/process/compare/v5.1.7...v5.1.8)

    • no changes
    Changelog

    Sourced from symfony/process's changelog.

    CHANGELOG

    5.2.0

    • added Process::setOptions() to set Process specific options
    • added option create_new_console to allow a subprocess to continue to run after the main script exited, both on Linux and on Windows

    5.1.0

    • added Process::getStartTime() to retrieve the start time of the process as float

    5.0.0

    • removed Process::inheritEnvironmentVariables()
    • removed PhpProcess::setPhpBinary()
    • Process must be instantiated with a command array, use Process::fromShellCommandline() when the command should be parsed by the shell
    • removed Process::setCommandLine()

    4.4.0

    • deprecated Process::inheritEnvironmentVariables(): env variables are always inherited.
    • added Process::getLastOutputTime() method

    4.2.0

    • added the Process::fromShellCommandline() to run commands in a shell wrapper
    • deprecated passing a command as string when creating a Process instance
    • deprecated the Process::setCommandline() and the PhpProcess::setPhpBinary() methods
    • added the Process::waitUntil() method to wait for the process only for a specific output, then continue the normal execution of your application

    4.1.0

    • added the Process::isTtySupported() method that allows to check for TTY support
    • made PhpExecutableFinder look for the PHP_BINARY env var when searching the php binary
    • added the ProcessSignaledException class to properly catch signaled process errors

    4.0.0

    • environment variables will always be inherited
    • added a second array $env = [] argument to the start(), run(),
    Commits
    • f00872c Merge branch '4.4' into 5.1
    • 2f4b049 Merge branch '3.4' into 4.4
    • b8648cf Remove branch-version (keep them for contracts only)
    • 5a6c048 Merge branch '4.4' into 5.1
    • 040cf8e Merge branch '3.4' into 4.4
    • b8783cc Fix branch-version
    • 788a506 Merge branch '4.4' into 5.1
    • 4a18e7e Merge branch '3.4' into 4.4
    • 1582109 Remove "version" from composer.json files, use "branch-version" instead
    • a7401bd Merge branch '4.4' into 5.1
    • Additional commits viewable in compare view

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    If all status checks pass Dependabot will automatically merge this pull request.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in the .dependabot/config.yml file in this repo:

    • Update frequency
    • Automerge options (never/patch/minor, and dev/runtime dependencies)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
    dependency 
    opened by dependabot-preview[bot] 3
  • Build(deps-dev): Update composer/composer requirement from ^1.10.5 to ^1.10.15

    Build(deps-dev): Update composer/composer requirement from ^1.10.5 to ^1.10.15

    Updates the requirements on composer/composer to permit the latest version.

    Release notes

    Sourced from composer/composer's releases.

    1.10.15

    • Fixed path repo version guessing issue
    Changelog

    Sourced from composer/composer's changelog.

    [1.10.15] 2020-10-13

    • Fixed path repo version guessing issue

    [1.10.14] 2020-10-13

    • Fixed version guesser to look at remote branches as well as local ones
    • Fixed path repositories version guessing to handle edge cases where version is different from the VCS-guessed version
    • Fixed COMPOSER env var causing issues when combined with the global command
    • Fixed a few issues dealing with PHP without openssl extension (not recommended at all but sometimes needed for testing)

    [1.10.13] 2020-09-09

    • Fixed regressions with old version validation
    • Fixed invalid root aliases not being reported

    [1.10.12] 2020-09-08

    • Fixed regressions with old version validation

    [1.10.11] 2020-09-08

    • Fixed more PHP 8 compatibility issues
    • Fixed regression in handling of CTRL-C when xdebug is loaded
    • Fixed status handling of broken symlinks

    [1.10.10] 2020-08-03

    • Fixed create-project not triggering events while installing the root package
    • Fixed PHP 8 compatibility issue
    • Fixed self-update to avoid automatically upgrading to the next major version once it becomes stable

    [1.10.9] 2020-07-16

    • Fixed Bitbucket redirect loop when credentials are outdated
    • Fixed GitLab auth prompt wording
    • Fixed self-update handling of files requiring admin permissions to write to on Windows (it now does a UAC prompt)
    • Fixed parsing issues in funding.yml files

    [1.10.8] 2020-06-24

    • Fixed compatibility issue with git being configured to show signatures by default
    • Fixed discarding of local changes when updating packages to include untracked files
    • Several minor fixes

    [1.10.7] 2020-06-03

    • Fixed PHP 8 deprecations
    • Fixed detection of pcntl_signal being in disabled_functions when pcntl_async_signal is allowed
    Commits

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    If all status checks pass Dependabot will automatically merge this pull request.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in the .dependabot/config.yml file in this repo:

    • Update frequency
    • Automerge options (never/patch/minor, and dev/runtime dependencies)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
    dependency 
    opened by dependabot-preview[bot] 3
  • Build(deps-dev): Update symfony/process requirement from ^5.0.8 to ^5.1.7

    Build(deps-dev): Update symfony/process requirement from ^5.0.8 to ^5.1.7

    Updates the requirements on symfony/process to permit the latest version.

    Release notes

    Sourced from symfony/process's releases.

    v5.1.7

    Changelog (https://github.com/symfony/process/compare/v5.1.6...v5.1.7)

    • no changes
    Changelog

    Sourced from symfony/process's changelog.

    CHANGELOG

    5.2.0

    • added Process::setOptions() to set Process specific options
    • added option create_new_console to allow a subprocess to continue to run after the main script exited, both on Linux and on Windows

    5.1.0

    • added Process::getStartTime() to retrieve the start time of the process as float

    5.0.0

    • removed Process::inheritEnvironmentVariables()
    • removed PhpProcess::setPhpBinary()
    • Process must be instantiated with a command array, use Process::fromShellCommandline() when the command should be parsed by the shell
    • removed Process::setCommandLine()

    4.4.0

    • deprecated Process::inheritEnvironmentVariables(): env variables are always inherited.
    • added Process::getLastOutputTime() method

    4.2.0

    • added the Process::fromShellCommandline() to run commands in a shell wrapper
    • deprecated passing a command as string when creating a Process instance
    • deprecated the Process::setCommandline() and the PhpProcess::setPhpBinary() methods
    • added the Process::waitUntil() method to wait for the process only for a specific output, then continue the normal execution of your application

    4.1.0

    • added the Process::isTtySupported() method that allows to check for TTY support
    • made PhpExecutableFinder look for the PHP_BINARY env var when searching the php binary
    • added the ProcessSignaledException class to properly catch signaled process errors

    4.0.0

    • environment variables will always be inherited
    • added a second array $env = [] argument to the start(), run(),
    Commits
    • d3a2e64 Merge branch '4.4' into 5.1
    • 9b887ac Merge branch '3.4' into 4.4
    • 46a862d Enable "native_constant_invocation" CS rule
    • 1864216 Merge branch '5.0' into 5.1
    • f105234 Merge branch '4.4' into 5.0
    • 65e70ba Merge branch '3.4' into 4.4
    • af8d812 [SCA] Minor fixes on tests
    • 441fb20 Merge branch '5.0' into 5.1
    • b521141 Merge branch '4.4' into 5.0
    • b180a89 Merge branch '3.4' into 4.4
    • Additional commits viewable in compare view

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    If all status checks pass Dependabot will automatically merge this pull request.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in the .dependabot/config.yml file in this repo:

    • Update frequency
    • Automerge options (never/patch/minor, and dev/runtime dependencies)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
    dependency 
    opened by dependabot-preview[bot] 3
  • Build(deps-dev): Update symfony/process requirement from ^5.0.8 to ^5.1.6

    Build(deps-dev): Update symfony/process requirement from ^5.0.8 to ^5.1.6

    Updates the requirements on symfony/process to permit the latest version.

    Release notes

    Sourced from symfony/process's releases.

    v5.1.6

    Changelog (https://github.com/symfony/process/compare/v5.1.5...v5.1.6)

    • no changes
    Changelog

    Sourced from symfony/process's changelog.

    CHANGELOG

    5.2.0

    • added Process::setOptions() to set Process specific options
    • added option create_new_console to allow a subprocess to continue to run after the main script exited, both on Linux and on Windows

    5.1.0

    • added Process::getStartTime() to retrieve the start time of the process as float

    5.0.0

    • removed Process::inheritEnvironmentVariables()
    • removed PhpProcess::setPhpBinary()
    • Process must be instantiated with a command array, use Process::fromShellCommandline() when the command should be parsed by the shell
    • removed Process::setCommandLine()

    4.4.0

    • deprecated Process::inheritEnvironmentVariables(): env variables are always inherited.
    • added Process::getLastOutputTime() method

    4.2.0

    • added the Process::fromShellCommandline() to run commands in a shell wrapper
    • deprecated passing a command as string when creating a Process instance
    • deprecated the Process::setCommandline() and the PhpProcess::setPhpBinary() methods
    • added the Process::waitUntil() method to wait for the process only for a specific output, then continue the normal execution of your application

    4.1.0

    • added the Process::isTtySupported() method that allows to check for TTY support
    • made PhpExecutableFinder look for the PHP_BINARY env var when searching the php binary
    • added the ProcessSignaledException class to properly catch signaled process errors

    4.0.0

    • environment variables will always be inherited
    • added a second array $env = [] argument to the start(), run(),
    Commits
    • d3a2e64 Merge branch '4.4' into 5.1
    • 9b887ac Merge branch '3.4' into 4.4
    • 46a862d Enable "native_constant_invocation" CS rule
    • 1864216 Merge branch '5.0' into 5.1
    • f105234 Merge branch '4.4' into 5.0
    • 65e70ba Merge branch '3.4' into 4.4
    • af8d812 [SCA] Minor fixes on tests
    • 441fb20 Merge branch '5.0' into 5.1
    • b521141 Merge branch '4.4' into 5.0
    • b180a89 Merge branch '3.4' into 4.4
    • Additional commits viewable in compare view

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    If all status checks pass Dependabot will automatically merge this pull request.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in the .dependabot/config.yml file in this repo:

    • Update frequency
    • Automerge options (never/patch/minor, and dev/runtime dependencies)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
    dependency 
    opened by dependabot-preview[bot] 3
  • Build(deps-dev): Update composer/composer requirement from ^1.10.5 to ^1.10.13

    Build(deps-dev): Update composer/composer requirement from ^1.10.5 to ^1.10.13

    Updates the requirements on composer/composer to permit the latest version.

    Release notes

    Sourced from composer/composer's releases.

    1.10.13

    • Fixed regressions with old version validation
    • Fixed invalid root aliases not being reported
    Changelog

    Sourced from composer/composer's changelog.

    [1.10.13] 2020-09-09

    • Fixed regressions with old version validation
    • Fixed invalid root aliases not being reported

    [1.10.12] 2020-09-08

    • Fixed regressions with old version validation

    [1.10.11] 2020-09-08

    • Fixed more PHP 8 compatibility issues
    • Fixed regression in handling of CTRL-C when xdebug is loaded
    • Fixed status handling of broken symlinks

    [1.10.10] 2020-08-03

    • Fixed create-project not triggering events while installing the root package
    • Fixed PHP 8 compatibility issue
    • Fixed self-update to avoid automatically upgrading to the next major version once it becomes stable

    [1.10.9] 2020-07-16

    • Fixed Bitbucket redirect loop when credentials are outdated
    • Fixed GitLab auth prompt wording
    • Fixed self-update handling of files requiring admin permissions to write to on Windows (it now does a UAC prompt)
    • Fixed parsing issues in funding.yml files

    [1.10.8] 2020-06-24

    • Fixed compatibility issue with git being configured to show signatures by default
    • Fixed discarding of local changes when updating packages to include untracked files
    • Several minor fixes

    [1.10.7] 2020-06-03

    • Fixed PHP 8 deprecations
    • Fixed detection of pcntl_signal being in disabled_functions when pcntl_async_signal is allowed

    [1.10.6] 2020-05-06

    • Fixed version guessing to take composer-runtime-api and composer-plugin-api requirements into account to avoid selecting packages which require Composer 2
    • Fixed package name validation to allow several dashes following each other
    • Fixed post-status-cmd script not firing when there were no changes to be displayed
    • Fixed composer-runtime-api support on Composer 1.x, the package is now present as 1.0.0
    • Fixed support for composer show --name-only --self
    • Fixed detection of GitLab URLs when handling authentication in some cases

    [1.10.5] 2020-04-10

    Commits
    • 47c841b Release 1.10.13
    • 4450831 Update semver and changelog
    • 4a02768 Fail hard if an invalid root alias is detected
    • d61c1cc Update changelog
    • a5f5838 Update semver to latest
    • f4f952f Update changelog
    • e11d19c Update deps
    • e6b45e8 Fix status command handling of symlinks, and especially broken ones, fixes #9169
    • 960413d Merge pull request #9183 from derrabus/bugfix/numeric-user-func-array
    • fc961dc Call call_user_func_array() with a numeric arguments array.
    • Additional commits viewable in compare view

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    If all status checks pass Dependabot will automatically merge this pull request.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in the .dependabot/config.yml file in this repo:

    • Update frequency
    • Automerge options (never/patch/minor, and dev/runtime dependencies)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
    dependency 
    opened by dependabot-preview[bot] 3
  • Build(deps-dev): Update composer/composer requirement from ^1.10.5 to ^1.10.12

    Build(deps-dev): Update composer/composer requirement from ^1.10.5 to ^1.10.12

    Updates the requirements on composer/composer to permit the latest version.

    Changelog

    Sourced from composer/composer's changelog.

    [1.10.12] 2020-09-08

    • Fixed regressions with old version validation

    [1.10.11] 2020-09-08

    • Fixed more PHP 8 compatibility issues
    • Fixed regression in handling of CTRL-C when xdebug is loaded
    • Fixed status handling of broken symlinks

    [1.10.10] 2020-08-03

    • Fixed create-project not triggering events while installing the root package
    • Fixed PHP 8 compatibility issue
    • Fixed self-update to avoid automatically upgrading to the next major version once it becomes stable

    [1.10.9] 2020-07-16

    • Fixed Bitbucket redirect loop when credentials are outdated
    • Fixed GitLab auth prompt wording
    • Fixed self-update handling of files requiring admin permissions to write to on Windows (it now does a UAC prompt)
    • Fixed parsing issues in funding.yml files

    [1.10.8] 2020-06-24

    • Fixed compatibility issue with git being configured to show signatures by default
    • Fixed discarding of local changes when updating packages to include untracked files
    • Several minor fixes

    [1.10.7] 2020-06-03

    • Fixed PHP 8 deprecations
    • Fixed detection of pcntl_signal being in disabled_functions when pcntl_async_signal is allowed

    [1.10.6] 2020-05-06

    • Fixed version guessing to take composer-runtime-api and composer-plugin-api requirements into account to avoid selecting packages which require Composer 2
    • Fixed package name validation to allow several dashes following each other
    • Fixed post-status-cmd script not firing when there were no changes to be displayed
    • Fixed composer-runtime-api support on Composer 1.x, the package is now present as 1.0.0
    • Fixed support for composer show --name-only --self
    • Fixed detection of GitLab URLs when handling authentication in some cases

    [1.10.5] 2020-04-10

    • Fixed self-update on PHP <5.6, seriously please upgrade people, it's time
    • Fixed 1.10.2 regression with PATH resolution in scripts

    [1.10.4] 2020-04-09

    Commits
    • a6cc92b Release 1.10.12
    • d61c1cc Update changelog
    • a5f5838 Update semver to latest
    • f4f952f Update changelog
    • e11d19c Update deps
    • e6b45e8 Fix status command handling of symlinks, and especially broken ones, fixes #9169
    • 960413d Merge pull request #9183 from derrabus/bugfix/numeric-user-func-array
    • fc961dc Call call_user_func_array() with a numeric arguments array.
    • 3e56ec2 Merge pull request #9170 from glaubinix/f/composer-repository-withou-sha1-inc...
    • 773635e ComposerRepository: avoid notice if includes do not provide a sha1
    • Additional commits viewable in compare view

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    If all status checks pass Dependabot will automatically merge this pull request.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in the .dependabot/config.yml file in this repo:

    • Update frequency
    • Automerge options (never/patch/minor, and dev/runtime dependencies)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
    dependency 
    opened by dependabot-preview[bot] 3
  • Build(deps-dev): Update symfony/process requirement from ^5.0.8 to ^5.1.5

    Build(deps-dev): Update symfony/process requirement from ^5.0.8 to ^5.1.5

    Updates the requirements on symfony/process to permit the latest version.

    Release notes

    Sourced from symfony/process's releases.

    v5.1.5

    Changelog (https://github.com/symfony/process/compare/v5.1.4...v5.1.5)

    • no changes
    Changelog

    Sourced from symfony/process's changelog.

    CHANGELOG

    5.1.0

    • added Process::getStartTime() to retrieve the start time of the process as float

    5.0.0

    • removed Process::inheritEnvironmentVariables()
    • removed PhpProcess::setPhpBinary()
    • Process must be instantiated with a command array, use Process::fromShellCommandline() when the command should be parsed by the shell
    • removed Process::setCommandLine()

    4.4.0

    • deprecated Process::inheritEnvironmentVariables(): env variables are always inherited.
    • added Process::getLastOutputTime() method

    4.2.0

    • added the Process::fromShellCommandline() to run commands in a shell wrapper
    • deprecated passing a command as string when creating a Process instance
    • deprecated the Process::setCommandline() and the PhpProcess::setPhpBinary() methods
    • added the Process::waitUntil() method to wait for the process only for a specific output, then continue the normal execution of your application

    4.1.0

    • added the Process::isTtySupported() method that allows to check for TTY support
    • made PhpExecutableFinder look for the PHP_BINARY env var when searching the php binary
    • added the ProcessSignaledException class to properly catch signaled process errors

    4.0.0

    • environment variables will always be inherited
    • added a second array $env = [] argument to the start(), run(), mustRun(), and restart() methods of the Process class
    • added a second array $env = [] argument to the start() method of the PhpProcess class
    • the ProcessUtils::escapeArgument() method has been removed
    • the areEnvironmentVariablesInherited(), getOptions(), and setOptions() methods of the Process class have been removed
    • support for passing proc_open() options has been removed
    Commits
    • 1864216 Merge branch '5.0' into 5.1
    • f105234 Merge branch '4.4' into 5.0
    • 65e70ba Merge branch '3.4' into 4.4
    • af8d812 [SCA] Minor fixes on tests
    • 441fb20 Merge branch '5.0' into 5.1
    • b521141 Merge branch '4.4' into 5.0
    • b180a89 Merge branch '3.4' into 4.4
    • 721cceb [Process] Fix Permission Denied error when writing sf_proc_00 lock files on W...
    • a39907a Use ">=" for the "php" requirement
    • 7f6378c Merge branch '5.0' into 5.1
    • Additional commits viewable in compare view

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    If all status checks pass Dependabot will automatically merge this pull request.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in the .dependabot/config.yml file in this repo:

    • Update frequency
    • Automerge options (never/patch/minor, and dev/runtime dependencies)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
    dependency 
    opened by dependabot-preview[bot] 3
  • Build(deps-dev): Update symfony/process requirement from ^5.0.8 to ^5.1.4

    Build(deps-dev): Update symfony/process requirement from ^5.0.8 to ^5.1.4

    Updates the requirements on symfony/process to permit the latest version.

    Release notes

    Sourced from symfony/process's releases.

    v5.1.4

    Changelog (https://github.com/symfony/process/compare/v5.1.3...v5.1.4)

    • no changes
    Changelog

    Sourced from symfony/process's changelog.

    CHANGELOG

    5.1.0

    • added Process::getStartTime() to retrieve the start time of the process as float

    5.0.0

    • removed Process::inheritEnvironmentVariables()
    • removed PhpProcess::setPhpBinary()
    • Process must be instantiated with a command array, use Process::fromShellCommandline() when the command should be parsed by the shell
    • removed Process::setCommandLine()

    4.4.0

    • deprecated Process::inheritEnvironmentVariables(): env variables are always inherited.
    • added Process::getLastOutputTime() method

    4.2.0

    • added the Process::fromShellCommandline() to run commands in a shell wrapper
    • deprecated passing a command as string when creating a Process instance
    • deprecated the Process::setCommandline() and the PhpProcess::setPhpBinary() methods
    • added the Process::waitUntil() method to wait for the process only for a specific output, then continue the normal execution of your application

    4.1.0

    • added the Process::isTtySupported() method that allows to check for TTY support
    • made PhpExecutableFinder look for the PHP_BINARY env var when searching the php binary
    • added the ProcessSignaledException class to properly catch signaled process errors

    4.0.0

    • environment variables will always be inherited
    • added a second array $env = [] argument to the start(), run(), mustRun(), and restart() methods of the Process class
    • added a second array $env = [] argument to the start() method of the PhpProcess class
    • the ProcessUtils::escapeArgument() method has been removed
    • the areEnvironmentVariablesInherited(), getOptions(), and setOptions() methods of the Process class have been removed
    • support for passing proc_open() options has been removed
    Commits
    • 1864216 Merge branch '5.0' into 5.1
    • f105234 Merge branch '4.4' into 5.0
    • 65e70ba Merge branch '3.4' into 4.4
    • af8d812 [SCA] Minor fixes on tests
    • 441fb20 Merge branch '5.0' into 5.1
    • b521141 Merge branch '4.4' into 5.0
    • b180a89 Merge branch '3.4' into 4.4
    • 721cceb [Process] Fix Permission Denied error when writing sf_proc_00 lock files on W...
    • a39907a Use ">=" for the "php" requirement
    • 7f6378c Merge branch '5.0' into 5.1
    • Additional commits viewable in compare view

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    If all status checks pass Dependabot will automatically merge this pull request.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in the .dependabot/config.yml file in this repo:

    • Update frequency
    • Automerge options (never/patch/minor, and dev/runtime dependencies)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
    dependency 
    opened by dependabot-preview[bot] 3
  • Build(deps): Bump json5 from 2.1.1 to 2.2.3

    Build(deps): Bump json5 from 2.1.1 to 2.2.3

    Bumps json5 from 2.1.1 to 2.2.3.

    Release notes

    Sourced from json5's releases.

    v2.2.3

    v2.2.2

    • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

    v2.2.1

    • Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

    v2.2.0

    • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

    v2.1.3 [code, diff]

    • Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

    v2.1.2

    • Fix: Bump minimist to v1.2.5. (#222)
    Changelog

    Sourced from json5's changelog.

    v2.2.3 [code, diff]

    v2.2.2 [code, diff]

    • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

    v2.2.1 [code, diff]

    • Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

    v2.2.0 [code, diff]

    • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

    v2.1.3 [code, diff]

    • Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

    v2.1.2 [code, diff]

    • Fix: Bump minimist to v1.2.5. (#222)
    Commits
    • c3a7524 2.2.3
    • 94fd06d docs: update CHANGELOG for v2.2.3
    • 3b8cebf docs(security): use GitHub security advisories
    • f0fd9e1 docs: publish a security policy
    • 6a91a05 docs(template): bug -> bug report
    • 14f8cb1 2.2.2
    • 10cc7ca docs: update CHANGELOG for v2.2.2
    • 7774c10 fix: add proto to objects and arrays
    • edde30a Readme: slight tweak to intro
    • 97286f8 Improve example in readme
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

    You can disable automated security fix PRs for this repo from the Security Alerts page.

    dependency javascript 
    opened by dependabot[bot] 0
  • Build(deps): Bump node-fetch from 2.6.0 to 2.6.7

    Build(deps): Bump node-fetch from 2.6.0 to 2.6.7

    Bumps node-fetch from 2.6.0 to 2.6.7.

    Release notes

    Sourced from node-fetch's releases.

    v2.6.7

    Security patch release

    Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

    What's Changed

    Full Changelog: https://github.com/node-fetch/node-fetch/compare/v2.6.6...v2.6.7

    v2.6.6

    What's Changed

    Full Changelog: https://github.com/node-fetch/node-fetch/compare/v2.6.5...v2.6.6

    v2.6.2

    fixed main path in package.json

    v2.6.1

    This is an important security release. It is strongly recommended to update as soon as possible.

    See CHANGELOG for details.

    Changelog

    Sourced from node-fetch's changelog.

    Changelog

    All notable changes will be recorded here.

    The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

    What's Changed

    New Contributors

    Full Changelog: https://github.com/node-fetch/node-fetch/compare/v3.1.0...v3.1.2

    3.1.0

    What's Changed

    ... (truncated)

    Commits
    • 1ef4b56 backport of #1449 (#1453)
    • 8fe5c4e 2.x: Specify encoding as an optional peer dependency in package.json (#1310)
    • f56b0c6 fix(URL): prefer built in URL version when available and fallback to whatwg (...
    • b5417ae fix: import whatwg-url in a way compatible with ESM Node (#1303)
    • 18193c5 fix v2.6.3 that did not sending query params (#1301)
    • ace7536 fix: properly encode url with unicode characters (#1291)
    • 152214c Fix(package.json): Corrected main file path in package.json (#1274)
    • b5e2e41 update version number
    • 2358a6c Honor the size option after following a redirect and revert data uri support
    • 8c197f8 docs: Fix typos and grammatical errors in README.md (#686)
    • Additional commits viewable in compare view
    Maintainer changes

    This version was pushed to npm by endless, a new releaser for node-fetch since your current version.


    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

    You can disable automated security fix PRs for this repo from the Security Alerts page.

    dependency javascript 
    opened by dependabot[bot] 0
  • Build(deps): Bump path-parse from 1.0.6 to 1.0.7

    Build(deps): Bump path-parse from 1.0.6 to 1.0.7

    Bumps path-parse from 1.0.6 to 1.0.7.

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

    You can disable automated security fix PRs for this repo from the Security Alerts page.

    dependency javascript 
    opened by dependabot[bot] 0
  • Build(deps): Bump textlint from 11.6.3 to 12.0.2

    Build(deps): Bump textlint from 11.6.3 to 12.0.2

    Bumps textlint from 11.6.3 to 12.0.2.

    Release notes

    Sourced from textlint's releases.

    [email protected]

    11.9.1 (2021-05-08)

    Bug Fixes

    • deps: update patch updates (#761) (73e81f9)
    • text-to-ast: correct to parse CRLF empty line (#763) (a3288e0)

    [email protected]

    11.9.0 (2021-03-21)

    Features

    For more details, See Ignoring Text · textlint

    [email protected]

    11.8.3 (2021-03-19)

    Fixes

    • linter-formatter: escape XML control characters in ruleId (#747) (2d1cc87)

    Chores

    Changelog

    Sourced from textlint's changelog.

    12.0.2 (2021-07-09)

    Bug Fixes

    • deps: update babel monorepo to ^7.14.5 (360fa5a)
    • deps: update babel monorepo to ^7.14.5 (f51ef8d)
    • deps: update dependency @​babel/core to ^7.14.6 (f457b2b)
    • deps: update dependency @​babel/preset-env to ^7.14.4 (5e16dbf)
    • deps: update dependency @​babel/preset-env to ^7.14.7 (c0054fd)
    • deps: update dependency debug to ^4.3.2 (8cb5498)

    12.0.1 (2021-05-24)

    Bug Fixes

    • textlint-scripts: fix example code (90a564f)
    • textlint-scripts: fix example code (125fdb2)

    12.0.0 (2021-05-24)

    Commits
    • a7826f5 v12.0.2
    • bec461f Update npm dependency table from 3.8.3 to 6.7.1 (#801)
    • dcb4c4c chore(deps): update dependency @​monorepo-utils/workspaces-to-typescript-proje...
    • 6d26bc9 chore(deps): update dependency @​types/node to ^14.17.5
    • 4eaf40d chore(deps): update dependency @​types/mocha to v8.2.3
    • aadf5ac chore(deps): update typescript-eslint monorepo to ^4.28.2
    • 8cb5498 fix(deps): update dependency debug to ^4.3.2
    • 941f447 chore(deps): update dependency @​types/debug to ^4.1.6
    • cfa3972 CI: update permissions (#799)
    • 80ff6e5 Update README.md
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    If all status checks pass Dependabot will automatically merge this pull request.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in the .dependabot/config.yml file in this repo:

    • Update frequency
    • Automerge options (never/patch/minor, and dev/runtime dependencies)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
    dependency 
    opened by dependabot-preview[bot] 1
  • Build(deps): Bump textlint-rule-write-good from 1.6.2 to 2.0.0

    Build(deps): Bump textlint-rule-write-good from 1.6.2 to 2.0.0

    Bumps textlint-rule-write-good from 1.6.2 to 2.0.0.

    Release notes

    Sourced from textlint-rule-write-good's releases.

    v2.0.0

    Features

    • deps: update write-good 1.x (eac8eea)
    Commits
    Maintainer changes

    This version was pushed to npm by azu, a new releaser for textlint-rule-write-good since your current version.


    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    If all status checks pass Dependabot will automatically merge this pull request.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in the .dependabot/config.yml file in this repo:

    • Update frequency
    • Automerge options (never/patch/minor, and dev/runtime dependencies)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
    dependency 
    opened by dependabot-preview[bot] 1
  • Dependabot can't resolve your PHP dependency files

    Dependabot can't resolve your PHP dependency files

    Dependabot can't resolve your PHP dependency files.

    As a result, Dependabot couldn't update your dependencies.

    The error Dependabot encountered was:

    Your requirements could not be resolved to an installable set of packages.
      Problem 1
        - Root composer.json requires wikimedia/composer-merge-plugin ^1.4.1 -> satisfiable by wikimedia/composer-merge-plugin[v1.4.1].
        - wikimedia/composer-merge-plugin v1.4.1 requires composer-plugin-api ^1.0 -> found composer-plugin-api[2.0.0] but it does not match the constraint.
    
    You are using Composer 2, which some of your plugins seem to be incompatible with. Make sure you update your plugins or report a plugin-issue to ask them to support Composer 2.
    

    If you think the above is an error on Dependabot's side please don't hesitate to get in touch - we'll do whatever we can to fix it.

    View the update logs.

    opened by dependabot-preview[bot] 0
Releases(0.13.1)
Owner
Narrowspark
Narrowspark
Box of Tricks for common PrePress related tasks.

PrePress Tricks Library Box of Tricks for common PrePress related tasks. Table of Contents Purpose Installation Basic Usage Purpose If you have ever a

null 1 Jul 26, 2022
A composer plugin, to install differenty types of composer packages in custom directories outside the default composer default installation path which is in the vendor folder.

composer-custom-directory-installer A composer plugin, to install differenty types of composer packages in custom directories outside the default comp

Mina Nabil Sami 136 Dec 30, 2022
Rocket Web Prime theme based on Magento Blank that includes our most common customizations.

RW Prime - Magento 2 boilerplate theme RW Prime theme is based on Magento Blank and includes our most common customizations that we make on the majori

Rocket Web FED 37 Aug 8, 2022
Ied plugin composer - Inspired Plugin Composer: Create, publish and edit plugins from within Textpattern CMS.

ied_plugin_composer Create, publish and edit plugins from within Textpattern CMS. Creates a new page under the Extensions tab where you can edit and e

Stef Dawson 8 Oct 3, 2020
Opinionated version of Wikimedia composer-merge-plugin to work in pair with Bamarni composer-bin-plugin.

Composer Inheritance Plugin Opinionated version of Wikimedia composer-merge-plugin to work in pair with bamarni/composer-bin-plugin. Usage If you are

Théo FIDRY 25 Dec 2, 2022
Laradeploy offers you to automate deployment using a GitHub webhook.

Introduction Laradeploy offers you to automate deployment using a GitHub webhook. Simple and fast just make a git push to GitHub deploy the new modifi

Gentrit Abazi 10 Feb 21, 2022
Automate aggregation tools to standard alerts from SAP PI/PO (CBMA) for internal support team

✅ PiAlert PiAlert is system for automating the work of SAP PI/PO support team via aggregation of alerts (CBMA messages). Language support: English Рус

Ivan Shashurin 3 Dec 2, 2022
Laravel-Crowdin Integration - Automate translations uploading/downloading

Laravel-Crowdin Integration Automate uploading/downloading translations Installation Install the package via composer: composer require georgii-web/la

Joris van Willigen 0 May 25, 2022
Composer plugin that wraps all composer vendor packages inside your own namespace. Intended for WordPress plugins.

Imposter Plugin Composer plugin that wraps all composer vendor packages inside your own namespace. Intended for WordPress plugins. Built with ♥ by Typ

Typist Tech 127 Dec 17, 2022
Composer Registrar Composer Plugin for Magento 2

This module add a global registration.php that replace the default glob search performed for each request to discover the components not installed from composer.

OpenGento 3 Mar 22, 2022
Magento-composer-installer - Composer installer for Magento modules

!!! support the maintainer of this project via Patreon: https://www.patreon.com/Flyingmana Magento Composer Installer The purpose of this project is t

null 213 Sep 24, 2022
Composer Repository Manager for selling Magento 2 extension and offering composer installation for ordered packages.

Magento 2 Composer Repository Credits We got inspired by https://github.com/Genmato. Composer Repository for Magento 2 This extension works as a Magen

EAdesign 18 Dec 16, 2021
Composer registry manager that help to easily switch to the composer repository you want

CRM - Composer Registry Manager Composer Registry Manager can help you easily and quickly switch between different composer repositories. 简体中文 Install

Tao 500 Dec 29, 2022
Dependency graph visualization for composer.json (PHP + Composer)

clue/graph-composer Graph visualization for your project's composer.json and its dependencies: Table of contents Usage graph-composer show graph-compo

Christian Lück 797 Jan 5, 2023
Drupal Composer Scaffold - A flexible Composer project scaffold builder

This project provides a composer plugin for placing scaffold files (like index.php, update.php, …) from the drupal/core project into their desired location inside the web root. Only individual files may be scaffolded with this plugin.

Drupal 44 Sep 22, 2022
Victor The Cleaner for Composer - This tool removes unnecessary files and directories from Composer vendor directory.

Victor The Cleaner for Composer This tool removes unnecessary files and directories from Composer vendor directory. The Cleaner leaves only directorie

David Grudl 133 Oct 26, 2022
A Pocketmine-MP (PMMP) plugin to prevent players from doing most glitches.

AntiGlitch AntiGlitch is an all-in-one Pocketmine-MP (PMMP) plugin made to prevent as many known glitches. Setup Guide To start using the plugin, down

ItsMax123 12 Sep 17, 2022
The instant SPA WordPress plugin that will most likely break your site.

Bonfire The instant SPA plugin that will most likely break your site. A https://github.com/fireship-io/flamethrower wrapper. Installation Clone or dow

Andrew Rhyand 7 Sep 3, 2022
Open-source library used in Gigadrive projects with common PHP utilities

PHP Commons This library provides PHP utilities used in Gigadrive projects, provided for the open-source community. Functions are registered globally

Gigadrive UG 3 Nov 10, 2021