Per the parent task, T180231, we should make sure we document thoroughly to run composer with --no-dev for production type sites
This covers both mw.org and mediawiki core as appropriate
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Reedy | T180272 Release MediaWiki 1.27.4/1.28.3/1.29.2 | |||
| Resolved | demon | T169127 Release MediaWiki 1.30 | |||
| Resolved | Reedy | T168823 Tracking bug for 1.27.4/1.28.3/1.29.2 security releases | |||
| Resolved | Reedy | T180231 MW 1.27 and 1.28 require-dev versions of phpunit with known security issues | |||
| Resolved | Reedy | T180232 Document to run composer with `--no-dev` |
Event Timeline
Comment Actions
In checkComposerLockUpToDate.php these add --no-dev to composer update and composer install recommended commands
https://gerrit.wikimedia.org/r/390550
https://gerrit.wikimedia.org/r/390552
https://gerrit.wikimedia.org/r/390553
https://gerrit.wikimedia.org/r/390554
https://gerrit.wikimedia.org/r/390555
Comment Actions
This isn't fixed yet - we still need to review mw.o documentation. https://www.mediawiki.org/wiki/Composer and https://www.mediawiki.org/wiki/Composer/For_extensions at least make no mention of --no-dev.