git clone --single-branch --branch REL1_35 --depth 1 https://gerrit.wikimedia.org/r/mediawiki/extensions/Flow
COMPOSER_ALLOW_SUPERUSER=1 composer update --no-plugins --no-scripts --no-dev
generates the following error:
... Your requirements could not be resolved to an installable set of packages. Problem 1 - Root composer.json requires mediawiki/mediawiki-codesniffer 31.0.0 -> satisfiable by mediawiki/mediawiki-codesniffer[v31.0.0]. - phan/phan 2.6.1 requires composer/semver ^1.4 -> satisfiable by composer/semver[1.4.0, ..., 1.7.2]. - You can only install one version of a package, so only one of these can be installed: composer/semver[1.4.0, ..., 1.7.2, 2.0.0]. - mediawiki/mediawiki-phan-config 0.10.2 requires phan/phan 2.6.1 -> satisfiable by phan/phan[2.6.1]. - mediawiki/mediawiki-codesniffer v31.0.0 requires composer/semver 1.5.1|2.0.0 -> satisfiable by composer/semver[1.5.1, 2.0.0]. - Root composer.json requires mediawiki/mediawiki-phan-config 0.10.2 -> satisfiable by mediawiki/mediawiki-phan-config[0.10.2]. Running update with --no-dev does not mean require-dev is ignored, it just means the packages will not be installed. If dev requirements are blocking the update you have to resolve those problems.
Which is caused by mediawiki/mediawiki-codesniffer (v31.0.0) not being available any longer. At the time of writing the closest one available was v38.0.0.
My current workaround is to change composer.json to look like: "mediawiki/mediawiki-codesniffer": ">=31.0.0",, so that v38.0.0 also meets the "require-dev".
Is this relaxation of the version the correct fix here?