After update still showing old version?

Created on 4 January 2025, about 1 month ago

Problem/Motivation

I used Composer to update this module to latest version, however still showing old insecure module

Steps to reproduce

So I'm not great at this, and am working with a site built by someone else.

1) "Available updates" list shows 8.x.1.21. Release not supported.
2) I run composer update but it says "nothing to update". Looks like this module was installed without compsoer for some stupid reason.
3) so I run composer remove drupal/site_settings. This may have been a very stupid move, because it creates WSOD on site.
4) So then I run composer require drupal/site_settings, which appears to install version 1.20.
5) I run composer update drupal/site_settings and it say "nothing to modify". OK so far.
6) Then I run composer show drupal/site_settings. The source shows source : [git] https://git.drupalcode.org/project/site_settings.git 8.x-1.20
dist : [zip] https://ftp.drupal.org/files/projects/site_settings-8.x-1.20.zip 8.x-1.20
7) I look at "available updates" again and it says I am still on the deprecated 8.x version.
I am sure I am doing something idiotic but unclear what.

πŸ’¬ Support request
Status

Active

Version

1.20

Component

Code

Created by

πŸ‡ΊπŸ‡ΈUnited States katharine_gates

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

  • Issue created by @katharine_gates
  • πŸ‡¬πŸ‡§United Kingdom scott_euser

    If I understand correctly the issue, I believe your composer.json is locking you within an outdated/unsupported version. The easiest way to see this is with composer outdated command (so if using ddev, then ddev composer outdated).

    First make sure that in composer.json you have "drupal/site_settings": "^2.0@RC|^2.0", so it takes the current supported version (which is version 2 if you look at module homepage). It has an update hook to update from 1x (which is 8.x-1.x in the old format). Its a big update so worth checking things, but it is meant to be backwards compatible with new features as "opt-in" essentially.

    Then you can run composer update

    Note: You can watch the update look, or event search "name": "drupal/site_settings", in the updated composer.lock file (which might be quicker than checking available updates page).

    If you still have issues updating, sometimes with composer stuff you can even resort to deleting the project from the contrib folder to make sure composer caching (depending on your local env) does not get in the way and it truly updates.

    Hope that helps!

  • πŸ‡ΊπŸ‡ΈUnited States katharine_gates

    Thank you so much for your patience and help. I did in fact have to delete the module files from contrib folder, empty caches, and run cron.

  • πŸ‡¬πŸ‡§United Kingdom scott_euser

    Great glad that helped!

  • Automatically closed - issue fixed for 2 weeks with no activity.

Production build 0.71.5 2024