Create php-composer branch to test Composer v2 lockfiles
Problem to solve
The purpose of this issue is to create a branch in the php-composer test project to test a Composer v2 lockfile.
See this discussion for background.
Proposal
- Create a branch in the php-composer project
- Use a
>= 2.0.0release of Composer to generate a newcomposer.lockfile - Add the new
php-composerbranch as a downstream QA test in gemnasium - Update the
Tested Versionsentry forComposerin theObtaining dependendency information by parsing lockfilestable in the Dependency Scanning documentation to show that2.xofComposeris also supported
User experience goal
Testing is improved for gemnasium
Documentation
Dependency Scanning documentation will be updated as part of this issue.
Availability & Testing
New tests will be added to the php-composer test project
What does success look like, and how can we measure that?
Tests are added to the php-composer project to confirm that Composer >= 2.0.0 lockfiles are supported
What is the type of buyer?
Enterprise Edition GitLab Ultimate
Is this a cross-stage feature?
No, this only affects ~"Category:Dependency Scanning"
/cc @NicoleSchwartz @gonzoyumo @fcatteau
This page may contain information related to upcoming products, features and functionality. It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes. Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.