Skip to content

convivial-demo-46472: Update composer packages (Drupal Core to 11.3.10) and remove abandoned oomphinc package.#408

Merged
radimklaska merged 3 commits into
mainfrom
c-46472
May 28, 2026
Merged

convivial-demo-46472: Update composer packages (Drupal Core to 11.3.10) and remove abandoned oomphinc package.#408
radimklaska merged 3 commits into
mainfrom
c-46472

Conversation

@convivial-bot

Copy link
Copy Markdown
Contributor

Mirrored from (c-46472).

…0) and remove abandoned oomphinc package.

Mirrored from (c-46472).
…le composer.json.

Restores deterministic install layout for the morpht/convivial mirror repo CI, where this composer.json becomes root after mirror_profile.yml runs. Without oomphinc/composer-installers-extender (removed earlier in this PR), drupal/core was landing somewhere drupal-check couldn't reach from modules/custom, breaking the build. No effect inside convivial-demo since the top-level composer.json's installer-paths take precedence.

Mirrored from (c-46472).
@convivial-bot

Copy link
Copy Markdown
Contributor Author

Mirrored from (c-46472).

…ll composer audit to ignore abandoned packages.

Replaces the installer-paths approach (cca4faec) which only fixed drupal-check and then broke Drush bootstrap further along the convivial repo's CI ("Setup Application" step).

oomphinc/composer-installers-extender is what registers drupal-core's install location implicitly for the convivial profile when its composer.json becomes root in the mirror repo. To keep oomphinc without breaking GrumPHP's securitychecker_composeraudit, this commit:

* re-adds oomphinc/composer-installers-extender to web/profiles/custom/convivial/composer.json (require + allow-plugins)
* re-adds the matching allow-plugins entry in the top-level composer.json
* configures securitychecker_composeraudit with abandoned: ignore in both grumphp.yml files
* bumps composer to 2.8.13 (in .lando.yml and the CI workflow) so the --abandoned flag is available
* refreshes composer.lock with oomphinc back

The installer-paths and drupal-scaffold blocks added in cca4faec to the profile composer.json are removed.

Mirrored from (c-46472).
@convivial-bot

Copy link
Copy Markdown
Contributor Author

Mirrored from (c-46472).

@radimklaska radimklaska merged commit 0012b26 into main May 28, 2026
2 checks passed
@radimklaska radimklaska deleted the c-46472 branch May 28, 2026 10:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants