Skip to content

Updated Drupal dependencies and held 'rector/rector' at 2.6.2. #321

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
AlexSkrypnyk merged 5 commits into from
Aug 31, 2026
Merged

Updated Drupal dependencies and held 'rector/rector' at 2.6.2. #321

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
4ece8f7
Updated Drupal core dependencies.
AlexSkrypnyk Aug 31, 2026
98f1c5b
Updated contrib modules.
AlexSkrypnyk Aug 31, 2026
96a35a8
Restored Drupal deprecation set selection in 'rector.php'.
AlexSkrypnyk Aug 31, 2026
fd4be53
Replaced isset guards with null coalescing assignment.
AlexSkrypnyk Aug 31, 2026
e686b38
Held 'rector/rector' at 2.6.2 and reverted its configuration change.
AlexSkrypnyk Aug 31, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 9 additions & 9 deletions composer.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
"drevops/test-private-package": "^1.0",
"drevops/vortex-tooling": "~1.4.0",
"drupal/ai_image_alt_text": "^1.0.2",
"drupal/ai_provider_openai": "^1.2.4",
"drupal/ai_provider_openai": "^1.2.5",

@AlexSkrypnyk AlexSkrypnyk Aug 31, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Routine maintenance round - no security releases. composer audit --locked returns zero advisories against the resulting lock, and drupal.org's contrib advisories list none for any project updated here.

None of these nine constraint changes were hand-edited. This repo sets "bump-after-update": true under config (line 140), so Composer raises each direct dependency's floor to whatever the update resolved. That is why the constraints move in lockstep with the lock file and why the diff carries no deliberate version decisions to review.

One package was deliberately excluded: rector/rector stays on 2.6.2. Its ^2.6.2 constraint is visible here as unchanged context, and it is intentionally left as a range rather than pinned - the newer release is still permitted, this round simply does not take it. The reason is that rector 2.6.5 turns RectorConfigBuilder::withSetProviders() into a deprecated no-op, and its documented replacement withComposerBased(drupal: true) is inert against the installed palantirnet/drupal-rector, which ships no DrupalSetList class. Taking that release would leave this project's Drupal deprecation rule sets loading from nowhere while ahoy lint still reported green - a silent loss of coverage. Holding at 2.6.2 keeps rector.php working as written and out of this diff entirely. Once drupal-rector ships DrupalSetList::COMPOSER_BASED, a later round can take 2.6.5 without any configuration change.

vincentlanglet/twig-cs-fixer ^4.0.2 → ^4.1.0 is the only minor bump among the direct dependencies. It added no findings against this codebase; ahoy lint is clean.

The remaining eight are patch-level floor raises on drupal/ai_provider_openai, drupal/drupal_helpers, drupal/generated_content, drupal/key_auth, drupal/preview_link, drupal/testmode, symfony/http-client and phpstan/phpstan. No package was added or removed, no major version moved, and nothing here changes configuration or database schema, so the deployment needs no config import or update hook beyond the usual.

drupal/core itself stays on 11.4.5 - no newer release existed at the time of this run - so the core phase of the update moved only core's transitive Symfony and Guzzle stack, visible in composer.lock rather than here.

"drupal/civictheme": "~1.13.0",
"drupal/clamav": "^2.1",
"drupal/cloudflare": "^2@beta",
Expand All @@ -23,24 +23,24 @@
"drupal/csp": "^2.2.4",
"drupal/devel": "^5.5.0",
"drupal/diff": "^2.1.1",
"drupal/drupal_helpers": "^2.1.0",
"drupal/drupal_helpers": "^2.1.1",
"drupal/entity_clone": "^2.1@beta",
"drupal/entity_usage": "^2.2@beta",
"drupal/environment_indicator": "^4.0.25",
"drupal/field_group": "^4",
"drupal/gemini_provider": "^1.0.1",
"drupal/generated_content": "^2.1.0",
"drupal/generated_content": "^2.1.1",
"drupal/gin": "^5.0.15",
"drupal/google_tag": "^2.0.9",
"drupal/highlight_js": "^1.3",
"drupal/key_auth": "^2.2",
"drupal/key_auth": "^2.2.3",
"drupal/lagoon_logs": "^3.0.1",
"drupal/menu_trail_by_path": "^2.2",
"drupal/metatag": "^2.2",
"drupal/moderated_content_bulk_publish": "^2.0",
"drupal/navigation_extra_tools": "^1.3.2",
"drupal/pathauto": "^1.15",
"drupal/preview_link": "^2.2.1",
"drupal/preview_link": "^2.2.3",
"drupal/purge": "^3.7",
"drupal/purge_control": "^2.1",
"drupal/recaptcha_v3": "^2.0.5",
Expand All @@ -57,12 +57,12 @@
"drupal/shield": "^1.8",
"drupal/stage_file_proxy": "^4.0.0",
"drupal/subrequests": "^3.0.12",
"drupal/testmode": "^2.7.1",
"drupal/testmode": "^2.7.2",
"drupal/views_bulk_operations": "^4.4.7",
"drupal/webform": "^6.3@beta",
"drupal/xmlsitemap": "^2.0",
"drush/drush": "^13.7.6",
"symfony/http-client": "^6.4.43",
"symfony/http-client": "^6.4.45",
"webflo/drupal-finder": "^1.3.1"
},
"require-dev": {
Expand All @@ -85,12 +85,12 @@
"phpcompatibility/php-compatibility": "^10.0@alpha",
"phpspec/prophecy-phpunit": "^2.5",
"phpstan/extension-installer": "^1.4.3",
"phpstan/phpstan": "^2.2.8",
"phpstan/phpstan": "^2.2.10",
"phpunit/phpunit": "^11.5.56",
"pyrech/composer-changelogs": "^2.2",
"rector/rector": "^2.6.2",
"softcreatr/jsonpath": "^0.10 || ^1.0",
"vincentlanglet/twig-cs-fixer": "^4.0.2"
"vincentlanglet/twig-cs-fixer": "^4.1.0"
},
"conflict": {
"drupal/drupal": "*"
Expand Down
Loading
Loading