Create a maintenance script that when run will validate the contents of the first of ( $IP/composer.lock, $IP/vendor/composer.lock ) against the required library versions in $IP/composer.json. This validation script should assert that all libraries required in composer.json are present in composer.lock and that the versions in composer.lock match the versions specified in composer.json. If any library is found to be missing or not of a matching version the script should exit with a non-zero status and provide a list of the out of date dependencies.
Description
Description
Details
Details
Related Changes in Gerrit:
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| Add checkComposerLockUpToDate.php script | mediawiki/core | master | +1 K -0 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | bd808 | T74777 [Regression] MediaWiki should detect absent or outdated vendor | |||
| Resolved | Legoktm | T77388 Create maintenance script to validate composer.lock against composer.json |
Event Timeline
Comment Actions
The core business logic for this maintenance script should probably be implemented by a class in includes/libs so that it would be possible to implement additional features that validate Composer installed libraries.
Comment Actions
Change 178264 had a related patch set uploaded (by Legoktm):
Add checkComposerLockUpToDate.php script