Your message dated Sat, 10 Feb 2024 13:11:21 +0000
with message-id <[email protected]>
and subject line Bug#1061291: fixed in composer 2.7.1-1
has caused the Debian Bug report #1061291,
regarding composer: recommends missing: php-curl
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1061291: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061291
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: composer
Version: 2.6.6-1
Severity: normal
X-Debbugs-Cc: [email protected]
Dear Maintainer,
When using the command `composer upgrade`, composer displays a warning
> Composer is operating significantly slower than normal because you
> do not have the PHP curl extension enabled.
When the package 'php-curl' is installed, no warning appears with that
command. I would have expected that php-curl is listed as a Recommends-
dependency when composer is slowed down otherwise.
A detailed report follows (some output removed and replaced by '[...]').
* What led up to the situation?
I created a minimal test for this bug as follows:
$ echo "today is: $(date)"
today is: Mon 22 Jan 10:37:33 CET 2024
$ docker container run -ti --rm debian:sid
root@c16e8b892f02:/# apt update
[...]
root@c16e8b892f02:/# apt install --install-recommends --yes composer
[...]
root@c16e8b892f02:/# mkdir /project
root@c16e8b892f02:/project# cd /project
root@c16e8b892f02:/project# composer require slim/slim
[...]
Now using the command `composer upgrade` gives out the warning:
root@c16e8b892f02:/project# composer upgrade
Composer is operating significantly slower than normal because you do not
have the PHP curl extension enabled.
[...]
However, when installing php-curl, the warning is no longer there:
root@c16e8b892f02:/project# apt install --yes php-curl
[...]
root@c16e8b892f02:/project# composer upgrade
[..no warning..]
* What exactly did you do (or not do) that was effective (or
ineffective)?
Installing the package 'php-curl' made the warning go away.
Hoever, compose works fine without 'php-curl' being installed.
Note: The actual speed-effect was not meassured.
* What did you expect instead?
I would have expected, that composer would have a 'Recommends:'
dependency on any package that is not strictly necessary but is warned
about.
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.1.0-17-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect
Versions of packages composer depends on:
ii jsonlint 1.10.1-1
ii php-cli 2:8.2+93
ii php-common 2:93
ii php-composer-ca-bundle 1.4.0-1
ii php-composer-class-map-generator 1.1.0-1
ii php-composer-metadata-minifier 1.0.0-2
ii php-composer-pcre 3.1.1-1
ii php-composer-semver 3.4.0-1
ii php-composer-spdx-licenses 1.5.8-1
ii php-composer-xdebug-handler 3.0.3-2
ii php-json-schema 5.2.13-1
ii php-psr-log 1.1.4-2
ii php-react-promise 3.1.0-1
ii php-seld-signal-handler 2.0.2-1
ii php-symfony-console 5.4.34+dfsg-2
ii php-symfony-filesystem 5.4.34+dfsg-2
ii php-symfony-finder 5.4.34+dfsg-2
ii php-symfony-process 5.4.34+dfsg-2
ii php8.2-cli [php-cli] 8.2.12-1+b1
Versions of packages composer recommends:
ii git 1:2.43.0-1
ii unzip 6.0-28
Versions of packages composer suggests:
pn fossil <none>
pn mercurial <none>
pn php-zip <none>
pn subversion <none>
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: composer
Source-Version: 2.7.1-1
Done: David Prévot <[email protected]>
We believe that the bug you reported is fixed in the latest version of
composer, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
David Prévot <[email protected]> (supplier of updated composer package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 10 Feb 2024 11:18:19 +0100
Source: composer
Architecture: source
Version: 2.7.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP PEAR Maintainers <[email protected]>
Changed-By: David Prévot <[email protected]>
Closes: 1061291 1063603
Changes:
composer (2.7.1-1) unstable; urgency=medium
.
[ Jordi Boggiano ]
* Merge pull request from GHSA-7c6p-848j-wh5h [CVE-2024-24821]
(Closes: #1063603)
* Release 2.7.1
.
[ David Prévot ]
* Extend recommended packages list (Closes: #1061291)
Checksums-Sha1:
2bb260346e20febbb761adf104fbe8bad497b8c7 2319 composer_2.7.1-1.dsc
2ca791fcbda58871f8c99993f2067c5aff50a99f 656568 composer_2.7.1.orig.tar.xz
900c8ce598b05a97079154f7b074f72429917a75 14828 composer_2.7.1-1.debian.tar.xz
2a086c71a8aee3b24e6fe14d40f9d1e52980dcd4 9780 composer_2.7.1-1_amd64.buildinfo
Checksums-Sha256:
23efd15fbe114f027d680cd033414d8457828e65b01d369a8d73aa46489493a9 2319
composer_2.7.1-1.dsc
f5b6f31279976d5f7a7a94549919fdeb5ae93441f301106c2e00863a554401f3 656568
composer_2.7.1.orig.tar.xz
823b8a26ffcc9ce8e3d93eae611e1843ad0529280e50d53d0b526b76a29fb4f9 14828
composer_2.7.1-1.debian.tar.xz
56ca7728c4bd037b739041d6d58fc5eb859a5660ce9ce67b93229de06a136aae 9780
composer_2.7.1-1_amd64.buildinfo
Files:
b55f58eee9d4b011dadc6735bc1f9345 2319 php optional composer_2.7.1-1.dsc
84d2ce883c00f0cd5f122087d960dde5 656568 php optional composer_2.7.1.orig.tar.xz
002420de756501167af182c8e3c91479 14828 php optional
composer_2.7.1-1.debian.tar.xz
9f429bf5517dfd2795d97d28becc56f5 9780 php optional
composer_2.7.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFGBAEBCAAwFiEEeHVNB7wJXHRI941mBYwc+UT2vTwFAmXHVNMSHHRhZmZpdEBk
ZWJpYW4ub3JnAAoJEAWMHPlE9r08R/wH/0TeDE8xTEtQngn7jpDB5zAi93JvoKCb
F1QPZQsjMWOSuOsS4S9XYaW5ppXuMrxFlmzJC9jXgILzwtiMK6tJzZuT9ttdWGu6
ZicnPG7DAuEhgw8Id3QEZBKpnf7h6Gw2yl3fvy5ZRI35aKnrJuAk/5LFSCJxeBQK
chsZpjUuzW7CwpWYllK7tQsUl2Swsd1jnF1wzhKbGTqK6QJtoDCwrNc/lVhDwYet
zhrIwA2GOfYYXCwUsxFVexkuW9fIhcEKltFhDXLxKqigNUa4+E7+70LMa+9ipadZ
t3nnIHJSJ1UUoWiHV5FGdFG2nTTHrvKy3RWmyv4a2eZ/LWCs0b3Wnyk=
=7Ky8
-----END PGP SIGNATURE-----
--- End Message ---
