Commit Graph

68 Commits

Author SHA1 Message Date
Pol Dellaiera
8aeb30ae73
php.packages.composer: 2.7.6 -> 2.7.7 (#318910)
diff: https://github.com/composer/composer/compare/2.7.6..2.7.7
changelog: https://github.com/composer/composer/releases/tag/2.7.7

Fix: CVE-2024-35241, CVE-2024-35242
2024-06-11 03:51:50 +02:00
Pol Dellaiera
450e9396fd
php.packages.composer: do not use buildComposerProject
I decided to avoid the use of `buildComposerProject because it requires `composer-local-repo-plugin` which is going to be refactored.
2024-05-19 22:10:03 +02:00
Pol Dellaiera
66ffcefea5
php.packages.composer: 2.7.3 -> 2.7.6
diff: https://github.com/composer/composer/compare/2.7.3..2.7.6
2024-05-05 07:56:06 +02:00
Pol Dellaiera
c759efa5e7
workflows/check-nix-format: enforce for php-packages 2024-05-04 23:04:36 +02:00
Thomas Gerbet
f30d13d04a phpPackages.composer: 2.7.2 -> 2.7.3
Changes:
https://github.com/composer/composer/releases/tag/2.7.3
2024-04-21 01:12:19 +02:00
Thomas Gerbet
b80593840b phpPackages.composer: 2.7.1 -> 2.7.2
Changes:
https://github.com/composer/composer/releases/tag/2.7.2
2024-03-12 00:10:17 +01:00
Pol Dellaiera
cf9e77ef8e
phpPackages.composer: 2.6.6 -> 2.7.1
Diff: https://github.com/composer/composer/compare/2.6.6..2.7.1
Changelog: https://github.com/composer/composer/releases/tag/2.7.1
Fix CVE: CVE-2024-24821
2024-03-05 19:39:35 +01:00
Thomas Gerbet
2ed28e8f2d phpPackages.composer: apply patch for CVE-2024-24821
Upgrade to the 2.7.x branch needs some work (see #288574), let's patch
the security issue in the meantime.
2024-02-14 20:46:32 +01:00
Gaël Reyrol
84d8f6ad7a
phpPackages.composer: 2.6.5 -> 2.6.6
Diff: https://github.com/composer/composer/compare/2.6.5...2.6.6

Changelog: https://github.com/composer/composer/releases/tag/2.6.6
2023-12-08 20:42:17 +01:00
Pol Dellaiera
fbb493629f
phpPackages.composer: add meta.mainProgram 2023-12-05 16:40:46 +01:00
Elis Hirwing
f0987a05a9
php.packages.composer: Make sure that both composers use the same version
So in php we have a bootstrapping composer (that lives in
composer-phar.nix) that downloads the binary distribution of composer
to be able to bootstrap and build a composer built from source.

However, it's desirable to keep composer updated at all time, and this
includes the phar one that isn't used by users directly. So this makes
sure we don't "forget" about the phar one since it now borrows the
version from the source version. However, then it also made sense to
move the hash for the phar to the same file as the source
composer. Then we can control the full upgrade life cycle of both the
phar and source versions of composer from the same file.
2023-10-06 20:09:48 +02:00
Pol Dellaiera
3360cb0bb0 phpPackages.composer: 2.6.4 -> 2.6.5 2023-10-06 10:30:07 +02:00
Pol Dellaiera
1231c76417
phpPackages.composer: use fetchgit
Using `fetchgit` prevent the `composer.lock` from being stripped out when `fetchFromGitHub` is being used
2023-10-01 10:52:43 +02:00
Pol Dellaiera
a39417a673 phpPackages.composer: 2.6.3 -> 2.6.4
Security release: To be mitigated since we are not using a publicly accessible composer.phar (GHSA-jm6m-4632-36hf / CVE-2023-43655).

Changelog: https://github.com/composer/composer/releases/tag/2.6.4
2023-09-29 12:25:04 +02:00
Pol Dellaiera
c8b9e229e1
phpPackages.composer: 2.6.2 -> 2.6.3 2023-09-20 16:53:03 +02:00
Pol Dellaiera
1173a34d15
build-support/php: move internal tools in php/build-support/php/pkgs 2023-09-13 17:07:48 +02:00
Elis Hirwing
2160ed2bcc
composer: Stop exposing composer built from a phar file 2023-09-13 15:00:04 +02:00
Pol Dellaiera
248e8f3cba
phpPackages.composer: use buildComposerProject builder 2023-09-13 15:00:03 +02:00
Pol Dellaiera
7c7b05f357
phpPackages.composer: 2.5.8 -> 2.6.2 2023-09-10 10:22:47 +02:00
Pol Dellaiera
39bea5f1ba
phpPackages.composer: switch to finalAttrs pattern 2023-07-03 18:37:43 +02:00
Pol Dellaiera
1bcbba5012
phpPackages.composer: 2.5.7 -> 2.5.8 2023-07-03 18:36:24 +02:00
Soner Sayakci
a5dcc37cd4
php82Packages.composer: 2.5.5 -> 2.5.7 2023-06-03 10:24:34 +02:00
R. Ryantm
272266886c php82Packages.composer: 2.5.4 -> 2.5.5 2023-04-18 18:57:33 +00:00
Pol Dellaiera
d2629daf0d
php.packages.composer: 2.5.1 -> 2.5.4 2023-03-20 22:33:27 +01:00
Pol Dellaiera
50b6e06bfe
php.packages.composer: update src attribute
So it can be automatically updated with `nix-update`
2022-12-29 18:19:45 +01:00
R. Ryantm
19efc99aee php80Packages.composer: 2.5.0 -> 2.5.1 2022-12-27 08:48:00 +00:00
Pol Dellaiera
b39d5afa75
php.packages.composer: 2.4.4 -> 2.5.0 2022-12-21 10:36:25 +01:00
Thomas Gerbet
915165d379 phpPackages.composer: 2.4.2 -> 2.4.4
https://github.com/composer/composer/releases/tag/2.4.4
https://github.com/composer/composer/releases/tag/2.4.3
2022-10-29 17:16:41 +02:00
R. Ryantm
70a9cd7229 php80Packages.composer: 2.4.1 -> 2.4.2 2022-09-23 01:44:34 +00:00
R. Ryantm
0014103da6 php80Packages.composer: 2.4.0 -> 2.4.1 2022-08-21 00:02:33 +00:00
Pol Dellaiera
56a79b5653
php81.packages.composer: 2.3.10 -> 2.4.0 2022-08-16 21:20:46 +02:00
Pol Dellaiera
7d48fb88a8
php81Packages.composer: 2.3.7 -> 2.3.10 2022-07-19 18:09:44 +02:00
Soner Sayakci
66756aeab9
php80Packages.composer: 2.3.5 -> 2.3.7 2022-06-10 13:15:34 +02:00
Pol Dellaiera
6f2f0aaeb7 php74Packages.composer: 2.3.3 -> 2.3.5
https://github.com/composer/composer/releases/tag/2.3.4
https://github.com/composer/composer/releases/tag/2.3.5
https://github.com/composer/composer/security/advisories/GHSA-x7cr-6qr6-2hh6

Fixes: CVE-2022-24828
2022-04-15 15:32:36 +02:00
R. Ryantm
3aa6277c43
php74Packages.composer: 2.2.9 -> 2.3.3 2022-04-02 18:24:03 +02:00
R. Ryantm
8bf228ce2a php74Packages.composer: 2.2.7 -> 2.2.9 2022-03-18 21:26:48 +00:00
R. Ryantm
d118f55e23 php74Packages.composer: 2.2.6 -> 2.2.7 2022-02-27 09:57:04 +00:00
R. Ryantm
2b225076c7 php74Packages.composer: 2.2.3 -> 2.2.6 2022-02-13 02:45:49 +00:00
R. Ryantm
cb9f7cafde php74Packages.composer: 2.2.1 -> 2.2.3 2022-01-02 04:05:16 +00:00
R. Ryantm
5c6e813ba3 php74Packages.composer: 2.1.14 -> 2.2.1 2021-12-25 11:03:14 +00:00
R. Ryantm
0782984c05 php74Packages.composer: 2.1.9 -> 2.1.14 2021-12-08 10:57:41 +00:00
Thomas Gerbet
b62cda1af2 phpPackages.composer: 2.1.8 -> 2.1.9
https://github.com/composer/composer/releases/tag/2.1.9
2021-10-09 20:35:44 +02:00
Thomas Gerbet
b7f5baafb0 phpPackages.composer: 2.1.5 -> 2.1.8
https://github.com/composer/composer/releases/tag/2.1.6
https://github.com/composer/composer/releases/tag/2.1.7
https://github.com/composer/composer/releases/tag/2.1.8
2021-10-05 08:51:25 +02:00
Thomas Gerbet
8c59a77a04 phpPackages.composer: 2.1.3 -> 2.1.5
https://github.com/composer/composer/releases/tag/2.1.4
https://github.com/composer/composer/releases/tag/2.1.5
2021-07-25 15:59:26 +02:00
Thomas Gerbet
2db2aa2b95 phpPackages.composer: 2.1.2 -> 2.1.3
https://github.com/composer/composer/releases/tag/2.1.3
2021-06-10 08:29:39 +02:00
Thomas Gerbet
b30d8c49e8 phpPackages.composer: 2.1.1 -> 2.1.2
https://github.com/composer/composer/releases/tag/2.1.2
2021-06-08 08:48:51 +02:00
Kim Lindberger
8960c09eed
Merge pull request #125500 from etu/php-spring-release-cleaning
php: post-release spring cleaning and upgrade to 8.0 as default
2021-06-04 17:48:47 +02:00
Thomas Gerbet
5ae9ac3e88 phpPackages.composer: 2.1.0 -> 2.1.1
https://github.com/composer/composer/releases/tag/2.1.1
2021-06-04 09:28:34 +02:00
Elis Hirwing
fb644190a0
php: Drop package composer1
Composer2 has been stable for some time now.
2021-06-04 09:27:04 +02:00
Elis Hirwing
5880c1c4bf
php.packages.composer: 2.0.14 -> 2.1.0 2021-06-03 20:46:34 +02:00