diff options
| author | nsfisis <nsfisis@gmail.com> | 2026-05-03 22:18:32 +0900 |
|---|---|---|
| committer | nsfisis <nsfisis@gmail.com> | 2026-05-03 22:18:32 +0900 |
| commit | 55e6f5367bf86d1dc6e99b7492d86c5208dd1f1c (patch) | |
| tree | f923e44b120790aa1244f5183aba4f908754029b /composer | |
| parent | 9a467625ff8d135c650c7fefacfa0358002ce4d2 (diff) | |
| download | php-mozart-55e6f5367bf86d1dc6e99b7492d86c5208dd1f1c.tar.gz php-mozart-55e6f5367bf86d1dc6e99b7492d86c5208dd1f1c.tar.zst php-mozart-55e6f5367bf86d1dc6e99b7492d86c5208dd1f1c.zip | |
fix(resolver): reject partial update when locked version fails stability
A partial update reuses every non-allow-listed locked package as a
fixed pool entry, ignoring stability filters. So when a user tightens
`minimum-stability` (or drops a `stability-flags` entry the lock used
to ride on), Mozart silently kept the rejected version and produced a
plan Composer would have failed on. Mirror Composer's
`Pool::isUnacceptableFixedOrLockedPackage` path: walk the locked
packages before pool construction, surface every entry whose version
no longer passes `passes_stability_filter`, and bail with the same
"fixed to <v> (lock file version) ... rejected by your
minimum-stability" pointer Composer prints from
`Problem::getPrettyString`.
Diffstat (limited to 'composer')
0 files changed, 0 insertions, 0 deletions
