Require specific versions of dependencies in composer.json

Created on 8 March 2014, over 10 years ago
Updated 1 July 2024, 2 months ago

We have a lot of great libraries in Drupal 8 now, which is awesome. It's somewhat confusing why were aren't being explicit about the precise version we're using.

While we're developing and getting Drupal 8 ready, it kind of makes sense why we're using wild cards for the version numbers of the libraries we're using. That makes it easier for us to update our libraries and push out a fresh patch updating everything (which is great, as long as that doesn't break anything).

But once Drupal 8 enters into beta stage we need to be mindful of what versions we want to ship. Should we promote a development methodology where we allow Drupal developers to update their libraries without concern (for example at the start of a new project).

Or should we ship Drupal with specific version (specific now to the patch version: MAJOR.MINOR.PATCH)? And thus promoting a methodology of keeping the vendor libraries we ship alone (unless you really know what you're doing).

For the most part I just want to resolve a pet peeve of mine where I can run "composer update" in the root of a Drupal 8 site and get a ton of updated files.

That's what I think should be our policy here: Executing "composer update" in the root of a Drupal 8 site shouldn't update anything because the version we list in composer.json are completely explicit so that there is no misunderstanding about what versions we're using.

πŸ“Œ Task
Status

Closed: outdated

Version

11.0 πŸ”₯

Component
OtherΒ  β†’

Last updated about 8 hours ago

Created by

πŸ‡ΊπŸ‡ΈUnited States cosmicdreams Minneapolis/St. Paul

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024