Skip to content

Repair wp/5.7 branch Actions: Let the current Composer release install this branch's dependencies - #84777

Open
desrosj wants to merge 3 commits into
fix-actions-5.7/fix-xdebug-pecl-php7from
fix-actions-5.7/fix-php-matrix-wp-env-compat
Open

desrosj wants to merge 3 commits into
fix-actions-5.7/fix-xdebug-pecl-php7from
fix-actions-5.7/fix-php-matrix-wp-env-compat

Conversation

@desrosj

@desrosj desrosj commented Oct 15, 2026 •

Copy link
Copy Markdown
Member

Part of #82936.

What?

Three changes, one commit each:

  1. Declares config.allow-plugins for the two Composer plugins this repository uses.
  2. Declares config.platform.php as 7.4 and require.php as >=5.6.20, and regenerates composer.lock to match.
  3. Pins wp-env's composer service to the composer:2 image instead of the floating composer image (packages/env/lib/build-docker-compose-config.js), with a packages/env/CHANGELOG.md entry.

Why?

allow-plugins: Composer 2.2+ requires plugins to be explicitly allowed. Older Composer only warned, but current Composer fails with composer/installers contains a Composer plugin which is blocked by your allow-plugins config. That breaks the Install a PHPUnit release this PHP version can load step from #84774 and the phpcs job's composer install from #84775. --no-plugins isn't a workaround, because dealerdirect/phpcodesniffer-composer-installer is the plugin that registers the PHPCS standards.

platform.php: The lock was resolved for PHP 7.4 but didn't record it, so Composer checked it against the container's PHP (8.5) and refused to install phpspec/prophecy 1.12.2 (requires php ^7.2 || ~8.0, <8.1). Declaring the platform makes the lock install the same way at any container PHP. 7.4 satisfies every locked package and matches the PHP version the phpcs job uses. require.php records WordPress's minimum PHP version as the project's floor.

The lock was regenerated with composer update --lock, so no package versions changed. The only differences are the platform fields, the content-hash, plugin-api-version, some empty [] written as {}, and the squizlabs/php_codesniffer URLs now pointing to PHPCSStandards (same release and commit).

composer:2: The image is pinned to composer:2 rather than an exact release. composer:2 still gets every Composer 2 release, including security fixes, but a future Composer 3 can't change how this branch installs its dependencies until someone updates the tag. The PHP version inside the image still follows the tag (PHP 8.5 today); that doesn't change which packages get installed, because composer.lock decides that.

Testing Instructions

In the composer image (Composer 2.10.3, PHP 8.5.10). composer:2 is currently the same image as the floating composer image, so these results apply to it.

command before after
composer install exit 2 exit 0
vendor/bin/phpcs -i — lists PHPCompatibility, VariableAnalysis and the WordPress standards

Use of AI Tools

This PR was created by Claude Code under my supervision. All code should be treated as AI-produced and not yet reviewed by a human until this PR is marked Ready for Review.

🤖 Generated with Claude Code

@desrosj desrosj added [Type] Build Tooling Issues or PRs related to build tooling [Tool] Env /packages/env labels Oct 15, 2026
@desrosj desrosj self-assigned this Oct 15, 2026
@github-actions github-actions Bot removed the [Tool] Env /packages/env label Oct 15, 2026
@coderabbitai

coderabbitai Bot commented Oct 15, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 60e18628-4903-4775-8f76-9dcfa9a0d882

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown

The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs. You can also manually ask me to refresh this list by adding the props-bot label.

If you're merging code through a pull request on GitHub, copy and paste the following into the bottom of the merge commit message.

Co-authored-by: desrosj <desrosj@git.wordpress.org>

To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook.

@desrosj
desrosj removed this pull request from stack #84872 October 16, 2026 15:52
@desrosj
desrosj force-pushed the fix-actions-5.7/fix-php-matrix-wp-env-compat branch from 2f35569 to 65aab42 Compare October 16, 2026 15:52
@desrosj
desrosj added this pull request to stack #84945 October 16, 2026 15:53
@desrosj desrosj changed the title Repair wp/5.7 branch Actions: Run the newest Composer against a declared PHP version Repair wp/5.7 branch Actions: Let the current Composer release install this branch's dependencies Oct 16, 2026
@desrosj
desrosj force-pushed the fix-actions-5.7/fix-php-matrix-wp-env-compat branch from 65aab42 to 10cf2d5 Compare October 19, 2026 17:09
@desrosj
desrosj removed this pull request from stack #84945 October 21, 2026 19:48
@desrosj
desrosj added this pull request to stack #85354 October 21, 2026 19:48
@github-actions github-actions Bot added the [Tool] Env /packages/env label Oct 23, 2026

@ntsekouras ntsekouras left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, thanks!

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

[Tool] Env /packages/env [Type] Build Tooling Issues or PRs related to build tooling

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants