Require PHP-TUF's Composer integration plugin

Given Drupal core release managers have indicated this is a hard requirement … updating issue metadata accordingly.

This is AFAICT hard-blocked on #3325040: [Packaging Pipeline] Securely sign packages hosted on Drupal.org using the TUF framework and Rugged → too. Once 📌 Add a validator to check that PHP-TUF's Composer integration is present and configured correctly Fixed lands, this will be down to PP-1.

📌 Add a validator to check that PHP-TUF's Composer integration is present and configured correctly Fixed is in.

@phenaproxima Can we already get a patch/MR in place? 🤓

Not until PHP-TUF (both the library and the plugin) are published on Packagist.

Right, but I mean an outline of a MR that shows which code would need to change. While it's still fresh in your head.

I would not expect this MR to pass obviously!

Splendid! 🤩

Thanks 😊

https://packagist.org/packages/php-tuf/ should mean this is unblocked?

Moving to core.

I think this still might only be partially implemented in package_manager - we need to figure out exactly what's left to do here.