https://bugzilla.wikimedia.org/show_bug.cgi?id=73672
Tisza Gergő <gti...@wikimedia.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |INVALID
--- Comment #2 from Tisza Gergő <gti...@wikimedia.org> ---
> composer install does not touch already installed libraries, so no code gets
> updated without the user's consent, it just the ones which have been added to
> mediawiki/composer.json, and have not been installed at all yet
Actually that's not true (yeah, yeah, I should test before I file). Install
does not do anything at all if there is a lock file, and update has no option
to only touch completely missing packages, so there does not seem to be a way
to say "add missing packages but don't touch existing ones". Probably not a
good idea anyway as it would result in inconsistent versions of the vendor
packages.
--
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
