Problem/Motivation
TFA switches to dev branch when upgrading Drupal 9 to 10 if you want to keep ckeditor 4.
Steps to reproduce
I have TFA version 1.4 installed
I run composer require drupal/module in Drupal 9
I get an error reporting Im using the wrong branch for TFA that its not compatible
I run composer require drupal/tfa
It switches to TFA dev branch in composer.json.
Happened again today. I thought it was resolved. The thing is composer.json still reports us using tfa ^1.4.
composer update
Gathering patches for root package.
Loading composer repositories with package information
Updating dependencies
Lock file operations: 0 installs, 2 updates, 0 removals
- Upgrading drupal/tfa (dev-1.x ba25b7d => dev-1.x ea76a6d)
- Upgrading phpstan/phpstan (1.10.50 => 1.10.54)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 0 installs, 2 updates, 0 removals
- Syncing drupal/tfa (dev-1.x ea76a6d) into cache
- Downloading phpstan/phpstan (1.10.54)
Gathering patches for root package.
Gathering patches for dependencies. This might take a minute.
drupal/tfa has modified files:
M .gitlab-ci.yml
M README.md
M composer.json
M config/install/tfa.settings.yml
M config/schema/tfa.schema.yml
M drush.services.yml
M services_tfa/services_tfa.info.yml
M services_tfa/src/Plugin/ServiceDefinition/GenericValidation.php
M src/Commands/TfaCommands.php
M src/Commands/TfaTokenManagement.php
30 more files modified, choose "v" to view the full list
Discard changes [y,n,v,d,s,?]? y
- Upgrading drupal/tfa (dev-1.x ba25b7d => dev-1.x ea76a6d): Checking out ea76a6d3f8 from cache
- Upgrading phpstan/phpstan (1.10.50 => 1.10.54): Extracting archive
Package doctrine/reflection is abandoned, you should avoid using it. Use roave/better-reflection instead.
Package microsoft/application-insights is abandoned, you should avoid using it. No replacement was suggested.
Package symfony/debug is abandoned, you should avoid using it. Use symfony/error-handler instead.
Generating optimized autoload files
Hardening vendor directory with .htaccess and web.config files.
68 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
Cleaning installed packages.
You are using Drupal packages that are not supported by the Drupal Security Team!
- drupal/tfa:dev-1.x: Dev releases are not covered by Drupal security advisories.
See
https://www.drupal.org/security-advisory-policy →
for more information.
No security vulnerability advisories found
Proposed resolution
Not sure.
Remaining tasks
User interface changes
API changes
Data model changes