Tests using Composer (version 2.9.0-RC1) are failing

Created on 13 November 2025, 2 months ago

Problem/Motivation

The upcoming composer release is going to cause problems for our test suite - see https://git.drupalcode.org/issue/drupal-3523596/-/jobs/7271837 and https://git.drupalcode.org/issue/drupal-3523596/-/jobs/7271767

  Problem 1                                                              
       β”œ     - Root composer.json requires drupal/core 9.8.0 (exact version match: 9.8.0 or 9.8.0.0), found drupal/core[9.8.0] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("SA-CORE-2024-001", "SA-CORE-2024-003", "SA-CORE-2024-004", "SA-CORE-2024-006", "SA-CORE-2024-007", "SA-CORE-2024-008", "SA-CORE-2025-001", "SA-CORE-2025-002", "SA-CORE-2025-003", "SA-CORE-2025-004", "SA-CORE-2025-007", "SA-CORE-2025-008", "SA-CORE-2025-005", "SA-CORE-2025-006") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.

Looks like a new security feature is coming.

Steps to reproduce

Run \Drupal\Tests\package_manager\Kernel\PhpTufValidatorTest or some of the build tests

Proposed resolution

TBD

Remaining tasks

User interface changes

Introduced terminology

API changes

Data model changes

Release notes snippet

πŸ“Œ Task
Status

Active

Version

11.0 πŸ”₯

Component

base system

Created by

πŸ‡¬πŸ‡§United Kingdom alexpott πŸ‡ͺπŸ‡ΊπŸŒ

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • Merge request !13828Composer 2.9.2 β†’ (Closed) created by longwave
  • Pipeline finished with Success
    2 months ago
    Total: 2929s
    #658994
  • Merge request !13830Resolve #3557585 "Composer 2 9" β†’ (Open) created by andypost
  • Pipeline finished with Failed
    2 months ago
    Total: 717s
    #659090
  • Pipeline finished with Failed
    2 months ago
    Total: 951s
    #659092
  • Merge request !13831WIP: using :dev image with composer 2.9 β†’ (Open) created by andypost
  • Pipeline finished with Failed
    2 months ago
    Total: 699s
    #659174
  • Pipeline finished with Failed
    about 2 months ago
    Total: 759s
    #660114
  • Pipeline finished with Failed
    about 2 months ago
    Total: 1093s
    #660157
  • Pipeline finished with Failed
    about 2 months ago
    Total: 763s
    #660621
  • Pipeline finished with Failed
    about 2 months ago
    Total: 744s
    #660623
  • Pipeline finished with Failed
    about 2 months ago
    Total: 645s
    #660641
  • Pipeline finished with Failed
    about 2 months ago
    Total: 800s
    #660637
  • Pipeline finished with Failed
    about 2 months ago
    Total: 819s
    #660636
  • Pipeline finished with Failed
    about 2 months ago
    #663871
  • Pipeline finished with Failed
    about 2 months ago
    #663873
  • Pipeline finished with Failed
    about 2 months ago
    #665593
  • Pipeline finished with Failed
    about 2 months ago
    #667489
  • Pipeline finished with Running
    about 2 months ago
    #668123
  • Pipeline finished with Failed
    about 2 months ago
    #670384
  • Pipeline finished with Canceled
    about 2 months ago
    #670436
  • Pipeline finished with Canceled
    about 2 months ago
    #670439
  • Pipeline finished with Failed
    about 2 months ago
    #670446
  • Pipeline finished with Failed
    about 2 months ago
    #670448
  • Pipeline finished with Success
    about 2 months ago
    #670469
  • Pipeline finished with Success
    about 2 months ago
    #670470
  • Pipeline finished with Failed
    25 days ago
    #690844
  • Pipeline finished with Failed
    25 days ago
    #690845
  • Pipeline finished with Failed
    24 days ago
    #690865
  • Pipeline finished with Failed
    24 days ago
    #690876
  • Pipeline finished with Success
    24 days ago
    #690885
  • Pipeline finished with Success
    24 days ago
    #690896
  • Merge request !14168fix: #3557585 Update to Composer 2.9.2 β†’ (Closed) created by dww
  • Pipeline finished with Success
    19 days ago
    Total: 6966s
    #694106
  • Merge request !14223fix: #3557585 Update to Composer 2.9.2 β†’ (Closed) created by godotislate
  • Merge request !14224fix: #3557585 Update to Composer 2.9.2 β†’ (Closed) created by godotislate
  • Pipeline finished with Success
    7 days ago
    Total: 2558s
    #702168
  • Pipeline finished with Success
    7 days ago
    Total: 2384s
    #702171
  • Pipeline finished with Success
    6 days ago
    Total: 1028s
    #703131
Production build 0.71.5 2024