Source: php-nesbot-carbon
Version: 1.27.0-1
Severity: serious
Tags: sid

Hi,
I was debugging issues in Ubuntu with dependencies of symfony that are
broken with symfony 4.x
Those are essentially unusable/uninstallable.

Initially reported to Ubuntu in [1] but applying to both Distributions
just as much. The bug [1] contains a much more detailed overview of
the cross-relations and the most likely options to resolve. Please
take look there avoiding to re-post the same (huge) text over and over
again.

Reporting in Debian against the direct dependencies to symfony so that
you are aware (thanks Steve for the reminder to do so). Overall that
means movim, ratchetphp, php-nesbot-carbon, php-robmorgan-phinx

Here the snippet for this package from there copy&pasted:

3. php-nesbot-carbon
- Debian/Ubuntu 1.27.0-1
- Upstream 2.23.1

Symfony support is in actually since 1.23.0
=> 
https://github.com/briannesbitt/Carbon/commit/23d299fdc24e8e7ff7f239846a9f8398ffb5a263
And it should be in 1.27 that we have:
$ git show 1.27.0:composer.json | grep symfony
        "symfony/translation": "~2.6 || ~3.0 || ~4.0"
Note: 1.26 would have been a stable release with much more updates

What is in the Archive clearly isn't 1.27
=> https://github.com/briannesbitt/Carbon/archive/1.27.0.zip
$ grep symfony composer.json
        "symfony/translation": "~2.6 || ~3.0 || ~4.0"

There never was an upstream tarball for 1.27 (d/watch finds nothing,
only a zip file).
And the used content of the tarball never really existed, upstream went
    "symfony/translation": "~2.6"
    "symfony/translation": "~2.6|~3.0"
    "symfony/translation": "~2.6 || ~3.0 || ~4.0"
        "symfony/translation": "^4.0"
        "symfony/translation": "^3.4 || ^4.0"

Solution:
a) replace with real upstream source of 1.27, maybe something much newer.
b) removal along movim


[1]: https://bugs.launchpad.net/ubuntu/+bug/1842019

-- 
Christian Ehrhardt
Software Engineer, Ubuntu Server
Canonical Ltd

Reply via email to