Skip to content

Fix composer lock not up to date #1570

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 2 commits into from

Conversation

symfonyaml
Copy link

Problem

When I follow the instructions to install the demo project with the git clone command, I have the following error

Installing dependencies from lock file (including require-dev)
Verifying lock file contents can be installed on current platform.
Warning: The lock file is not up to date with the latest changes in composer.json. You may be getting outdated dependencies. It is recommended that you run `composer update` or `composer update <package name>`.
- Required package "twbs/bootstrap" is not present in the lock file.
This usually happens when composer files are incorrectly merged or the composer.json file is manually edited.
Read more about correctly resolving merge conflicts https://getcomposer.org/doc/articles/resolving-merge-conflicts.md
and prefer using the "require" command over editing the composer.json file directly

Reproduce

Script taken from README Installation guide

git clone https://github.com/symfony/demo.git my_project
cd my_project/
composer install

Solution

I run a composer update and pushed the composer lock file

@javiereguiluz
Copy link
Member

Thanks @symfonyaml and sorry for this issue.

Your proposed solution is correct but, we just merged #1572 to update the project dependencies to fix a security vulnerability. So, that also fixed (indirectly) the problem reported in this pull request.

That's why we are closing this one without merging it. Thanks.

@xabbuh
Copy link
Member

xabbuh commented May 21, 2025

I think if @symfonyaml rebases these changes and amends the commit to something like "update dependencies" it's still worth to merge it.

@javiereguiluz javiereguiluz reopened this May 21, 2025
@javiereguiluz
Copy link
Member

Let's reopen then!

@symfonyaml symfonyaml closed this May 21, 2025
@symfonyaml symfonyaml deleted the fix-composer branch May 21, 2025 10:33
@symfonyaml symfonyaml mentioned this pull request May 21, 2025
@symfonyaml
Copy link
Author

I think if @symfonyaml rebases these changes and amends the commit to something like "update dependencies" it's still worth to merge it.

@xabbuh done in #1573

javiereguiluz added a commit that referenced this pull request May 21, 2025
This PR was merged into the main branch.

Discussion
----------

Update dependencies

As `@xabbuh` suggested in [the comment of this closed PR](#1570 (comment)) #1570, I updated the dependencies.

Commits
-------

08380ed Update dependencies
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants