2.2 in December stops running Composer plugins that have not been explicitly permitted, and a non-interactive install refuses rather than prompting. A Composer plugin runs arbitrary code during…
October brought a rewritten solver and parallel downloads, and the lock file format changed in a way that produces a confusing diff when two people are on different…
An application resolved against PHP 7.4 and deployed to a 7.3 server used to fail at some arbitrary point inside a library, with an error nobody connects to…
Downloading eighty packages on every push is thirty seconds of every build, and the fix is a cache keyed on the thing that determines the contents. Caching the…