Maniphest T180232

Document to run composer with `--no-dev`
Closed, ResolvedPublic
Actions

Description

Per the parent task, T180231, we should make sure we document thoroughly to run composer with --no-dev for production type sites

This covers both mw.org and mediawiki core as appropriate

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		Reedy	T180272 Release MediaWiki 1.27.4/1.28.3/1.29.2
		Resolved		demon	T169127 Release MediaWiki 1.30
		Resolved		Reedy	T168823 Tracking bug for 1.27.4/1.28.3/1.29.2 security releases
		Resolved		Reedy	T180231 MW 1.27 and 1.28 require-dev versions of phpunit with known security issues
		Resolved		Reedy	T180232 Document to run composer with `--no-dev`

Event Timeline

Reedy created this task.Nov 10 2017, 2:16 PM

Reedy created this object with visibility "Custom Policy".

Restricted Application added a project: Documentation. · View Herald TranscriptNov 10 2017, 2:16 PM

Reedy mentioned this in T180233: Set `no-dev` as the default config in composer.json.Nov 10 2017, 2:18 PM

Reedy added a subscriber: Hutchy68.Nov 10 2017, 2:35 PM

Reedy updated the task description. (Show Details)Nov 10 2017, 7:15 PM

In checkComposerLockUpToDate.php these add --no-dev to composer update and composer install recommended commands

https://gerrit.wikimedia.org/r/390550
https://gerrit.wikimedia.org/r/390552
https://gerrit.wikimedia.org/r/390553
https://gerrit.wikimedia.org/r/390554
https://gerrit.wikimedia.org/r/390555

Krinkle closed this task as Resolved.Nov 11 2017, 5:24 AM

Krinkle claimed this task.

Krinkle reassigned this task from Krinkle to Reedy.

Krinkle added a subscriber: Krinkle.

This isn't fixed yet - we still need to review mw.o documentation. https://www.mediawiki.org/wiki/Composer and https://www.mediawiki.org/wiki/Composer/For_extensions at least make no mention of --no-dev.

Reedy changed the visibility from "Custom Policy" to "Public (No Login Required)".Nov 15 2017, 12:05 AM

Fixed

chasemp added a project: Security Related.Mon, Feb 10, 10:52 PM