Skip to content

Conversation

@Chekote
Copy link
Contributor

@Chekote Chekote commented Jul 6, 2022

Problem:

When running the workflow, it fails at the "Install symfony/flex" step with the following error:

Error: symfony/flex contains a Composer plugin which is blocked by your allow-plugins config. You may add it to the list if you consider it safe.

Cause:

A newer version of Composer has introduced a strict check whereby all plugins have to be explicitly allowed for security reasons.

Fix:

Explicitly allow the global plugin before installing it.

# Problem:
When running the workflow, it fails at the "Install symfony/flex" step with the following error:

Error: symfony/flex contains a Composer plugin which is blocked by your allow-plugins config. You may add it to the list if you consider it safe.

## Cause:
A newer version of Composer has introduced a strict check whereby all plugins have to be explicitly allowed for security reasons.

## Fix:
Explicitly allow the global plugin before installing it.
@ciaranmcnulty
Copy link
Contributor

Why do we need Flex here, again?

@stof
Copy link
Member

stof commented Jul 6, 2022

This is used to restrict Symfony versions with SYMFONY_REQUIRE

@ciaranmcnulty
Copy link
Contributor

ok but why do we need that outside of what composer does?

@stof
Copy link
Member

stof commented Jul 6, 2022

Composer does not have a built-in way to restrict symfony/* packages to the LTS version (as 6.1 is a higher version number than 5.4). This requires using a plugin to filter the pool (which is one of the features of symfony/flex).

@ciaranmcnulty
Copy link
Contributor

@stof I'll bother you on slack about this, I'm totally in the dark as to why this is necessary / isn't something can be done with composer

@ciaranmcnulty
Copy link
Contributor

Thanks @Chekote

@ciaranmcnulty ciaranmcnulty merged commit 5cc0f44 into Behat:master Jul 6, 2022
@Chekote Chekote deleted the patch-1 branch July 6, 2022 18:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants