Page MenuHomePhabricator
Create Task
Maniphest T376409

Upgrade composer to 2.8.x
Closed, ResolvedPublic
Actions

Description

T360973: Upgrade composer from 2.6.4 to 2.7.2 | T410453: Upgrade composer to >= 2.9.1

https://getcomposer.org/changelog/2.7.3 PHP 8.4 support
https://getcomposer.org/changelog/2.7.4
https://getcomposer.org/changelog/2.7.5
https://getcomposer.org/changelog/2.7.6
https://getcomposer.org/changelog/2.7.7 Security
https://getcomposer.org/changelog/2.7.8 PHP 8.4 support
https://getcomposer.org/changelog/2.7.9
https://getcomposer.org/changelog/2.8.0
https://getcomposer.org/changelog/2.8.1

Fixes their E_STRICT issues on PHP 8.4 (same as T375707: Avoid E_STRICT in MediaWiki and WMF-deployed extension (Deprecated in PHP 8.4))

Also, the various security issues fixed in 2.7.7 probably warrant updating within 2.7.x for good measure, but might as well go to >= 2.8.1

  • Upgrade the CI docker images (patch)
  • Switch the first jenkins jobs over and test
  • Switch all remaining jobs (patch)
  • Re-build vendor (patch)
  • Update any documentation
  • Upgrade the developer docker images

Details

Related Changes in Gerrit:
SubjectAuthorRepoBranchLines +/-
Re-build with composer 2.8.1 (and update docs to match)Reedymediawiki/vendorREL1_39+6 -6
Re-build with composer 2.8.1 (and update docs to match)Reedymediawiki/vendorREL1_41+6 -6
Re-build with composer 2.8.1 (and update docs to match)Reedymediawiki/vendorREL1_42+6 -6
Re-build with composer 2.8.1 (and update docs to match)Jforrestermediawiki/vendormaster+5 -5
jjb: Switch PHP jobs to use images with Composer v2.8.1Jforresterintegration/configmaster+84 -84
Docker: [composer-scratch] Upgrade composer from 2.7.2 to 2.8.1Reedyintegration/configmaster+246 -2
Customize query in gerrit
Related Changes in GitLab:
TitleReferenceAuthorSource BranchDest Branch
Add bookworm + PHP 8.3 imagesrepos/releng/dev-images!69daimonawork/daimona/bookwormmain
Customize query in GitLab

Related Objects

Event Timeline

Reedy created this task.Oct 3 2024, 5:25 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 3 2024, 5:25 PM
Reedy triaged this task as Low priority.Oct 3 2024, 5:25 PM
Reedy mentioned this in T360973: Upgrade composer from 2.6.4 to 2.7.2.
Reedy moved this task from Backlog to Other on the PHP 8.4 support board.
Reedy updated the task description. (Show Details)Oct 3 2024, 5:42 PM
Reedy renamed this task from Upgrade composer to 2.8.0+ to Upgrade composer to 2.8.x.Oct 6 2024, 1:03 PM
Reedy updated the task description. (Show Details)
Reedy updated the task description. (Show Details)Oct 6 2024, 1:11 PM
Reedy raised the priority of this task from Low to Medium.Oct 6 2024, 1:15 PM
Reedy updated the task description. (Show Details)
Reedy added a project: Security.
Reedy mentioned this in T376566: ValueError: Was not able to match version 8.1.29-1-wmf11u1.Oct 6 2024, 1:28 PM
gerritbot added a comment.Oct 6 2024, 1:29 PM

Change #1078078 had a related patch set uploaded (by Reedy; author: Reedy):

[integration/config@master] WIP: dockerfiles: [composer-scratch] Upgrade composer from 2.7.2 to 2.8.1

https://gerrit.wikimedia.org/r/1078078

gerritbot added a project: Patch-For-Review.Oct 6 2024, 1:29 PM
gerritbot added a comment.Oct 6 2024, 8:50 PM

Change #1078078 merged by jenkins-bot:

[integration/config@master] Docker: [composer-scratch] Upgrade composer from 2.7.2 to 2.8.1

https://gerrit.wikimedia.org/r/1078078

Stashbot added a comment.Oct 6 2024, 8:51 PM

Mentioned in SAL (#wikimedia-releng) [2024-10-06T20:51:46Z] <James_F> Docker: Re-building PHP images with composer v2.8.1, for T376409, and PHP 8.1 images with PHP 8.1.30-1+wmf11u1

gerritbot added a comment.Oct 6 2024, 9:04 PM

Change #1078110 had a related patch set uploaded (by Jforrester; author: Jforrester):

[integration/config@master] jjb: Switch PHP jobs to use images with Composer v2.8.1

https://gerrit.wikimedia.org/r/1078110

gerritbot added a comment.Oct 8 2024, 5:50 PM

Change #1078717 had a related patch set uploaded (by Jforrester; author: Jforrester):

[mediawiki/vendor@master] Re-build with composer 2.8.1 (and update docs to match)

https://gerrit.wikimedia.org/r/1078717

gerritbot added a comment.Oct 8 2024, 5:51 PM

Change #1078110 merged by jenkins-bot:

[integration/config@master] jjb: Switch PHP jobs to use images with Composer v2.8.1

https://gerrit.wikimedia.org/r/1078110

Jdforrester-WMF updated the task description. (Show Details)Oct 8 2024, 5:52 PM
gerritbot added a comment.Oct 15 2024, 2:57 PM

Change #1078717 merged by jenkins-bot:

[mediawiki/vendor@master] Re-build with composer 2.8.1 (and update docs to match)

https://gerrit.wikimedia.org/r/1078717

ReleaseTaggerBot added a project: MW-1.43-notes (1.43.0-wmf.28; 2024-10-22).Oct 15 2024, 3:00 PM
Jdforrester-WMF updated the task description. (Show Details)Oct 15 2024, 3:27 PM
Maintenance_bot removed a project: Patch-For-Review.Oct 15 2024, 3:31 PM
gerritbot added a comment.Oct 15 2024, 4:41 PM

Change #1080324 had a related patch set uploaded (by Reedy; author: Jforrester):

[mediawiki/vendor@REL1_42] Re-build with composer 2.8.1 (and update docs to match)

https://gerrit.wikimedia.org/r/1080324

gerritbot added a project: Patch-For-Review.Oct 15 2024, 4:41 PM
gerritbot added a comment.Oct 15 2024, 4:45 PM

Change #1080324 merged by Jforrester:

[mediawiki/vendor@REL1_42] Re-build with composer 2.8.1 (and update docs to match)

https://gerrit.wikimedia.org/r/1080324

gerritbot added a comment.Oct 15 2024, 4:48 PM

Change #1080326 had a related patch set uploaded (by Reedy; author: Jforrester):

[mediawiki/vendor@REL1_41] Re-build with composer 2.8.1 (and update docs to match)

https://gerrit.wikimedia.org/r/1080326

gerritbot added a comment.Oct 15 2024, 4:49 PM

Change #1080326 merged by Jforrester:

[mediawiki/vendor@REL1_41] Re-build with composer 2.8.1 (and update docs to match)

https://gerrit.wikimedia.org/r/1080326

gerritbot added a comment.Oct 15 2024, 4:50 PM

Change #1080329 had a related patch set uploaded (by Reedy; author: Jforrester):

[mediawiki/vendor@REL1_39] Re-build with composer 2.8.1 (and update docs to match)

https://gerrit.wikimedia.org/r/1080329

gerritbot added a comment.Oct 15 2024, 4:52 PM

Change #1080329 merged by Reedy:

[mediawiki/vendor@REL1_39] Re-build with composer 2.8.1 (and update docs to match)

https://gerrit.wikimedia.org/r/1080329

Maintenance_bot removed a project: Patch-For-Review.Oct 15 2024, 5:30 PM
Reedy closed this task as Resolved.Nov 7 2024, 9:31 PM
Reedy claimed this task.
Jdforrester-WMF subscribed.Nov 7 2024, 10:55 PM

"Upgrade the developer docker images" still isn't done even for composer 2.4 (they're on 2.3.3). Should we track that differently, as it keeps not getting done?

Reedy added a comment.Nov 7 2024, 11:19 PM

Which even are they? docker-compose.yml? Who uses them?

Jdforrester-WMF added a comment.Nov 7 2024, 11:23 PM
In T376409#10302399, @Reedy wrote:

Which even are they? docker-compose.yml? Who uses them?

Most MW developers (including me); they're the primary guidance for how we tell people to develop and test MW.

CodeReviewBot added a comment.Dec 10 2024, 3:39 PM

daimona updated https://gitlab.wikimedia.org/repos/releng/dev-images/-/merge_requests/69

Add bookworm + PHP 8.3 images

CodeReviewBot added a comment.Dec 16 2024, 8:15 PM

brennen merged https://gitlab.wikimedia.org/repos/releng/dev-images/-/merge_requests/69

Add bookworm + PHP 8.3 images

Reedy mentioned this in T410453: Upgrade composer to >= 2.9.1.Nov 18 2025, 7:52 PM
Jdforrester-WMF updated the task description. (Show Details)Nov 18 2025, 10:36 PM
Jdforrester-WMF updated the task description. (Show Details)Nov 24 2025, 7:07 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits