Composer always git clones instead of using a dist URL

  - Downloading nusje2000/phpstan-monolith (v0.1.4)
  - Downloading php-parallel-lint/php-parallel-lint (v1.4.0)
  - Downloading psr/http-server-handler (1.0.2)
  - Downloading psr/http-server-middleware (1.0.2)
  - Downloading riverline/multipart-parser (2.1.2)
  - Downloading lstrojny/fxmlrpc (0.22.0)
  - Downloading supervisorphp/supervisor (5.1.0)
  - Downloading drupal/supervisor (2.0.0-rc2)
  - Downloading league/openapi-psr7-validator (0.21)
  - Syncing weitzman/drupal-test-traits (2.3.0) into cache

From my experience Composer typically hangs on this step.

I've seen that too, for many years. Its frustrating. I did some experimenting and a possible fix for this is indeed to make releases in Gitlab, instead of just tags. That causes downloads of URLs like https://gitlab.com/api/v4/projects/weitzman%2Flogintrait/repository/arch... for the project https://gitlab.com/weitzman/logintrait. Unfortunately drupalcode.org prohibits making Gitlab releases. I get 404 at https://www.drupal.org/project/dtt/releases/new →

I found https://www.drupal.org/project/project_composer/issues/3464712 ✨ Regression: RC releases have empty dist information Needs work which looks very related.

I get 404 at https://www.drupal.org/project/dtt/releases/new →

What about https://www.drupal.org/node/add/project-release/3433020 → ?

I just created a release there for 2.3.1 and its been packaged. The Gitlab Packagist integration doesn't report any communication with packagist.org in its logs so this issue persists. I think we need to follow https://www.drupal.org/project/project_composer/issues/3464712 ✨ Regression: RC releases have empty dist information Needs work for updates.

That issue is now fixed so this one is too.

$ composer require weitzman/drupal-test-traits --dev -vvv
...
Installs: weitzman/drupal-test-traits:2.3.1
  - Downloading weitzman/drupal-test-traits (2.3.1)
Downloading https://git.drupalcode.org/api/v4/projects/project%2Fdtt/repository/archive.zip?sha=5e3df23c93f4f3e4f34fd7677df10bc06616f4ce

Automatically closed - issue fixed for 2 weeks with no activity.