[TASK] composer.json should stick to explicit dependencies 53/39153/2
authorXavier Perseguers <xavier@typo3.org>
Fri, 1 May 2015 12:22:02 +0000 (14:22 +0200)
committerMathias Schreiber <mathias.schreiber@wmdb.de>
Tue, 5 May 2015 10:21:07 +0000 (12:21 +0200)
Having non-strict version dependencies in composer.json makes packaging
of TYPO3 CMS unreliable since:

- Cannot prevent a faulty 3rd-party package being committed right before
  the packaging script is run
- Cannot install TYPO3 CMS from git tags as a later point of time using
  the exact same 3rd-party package list

Change-Id: I7418bb856fcc79257ddb9920608b1cd435cb616c
Releases: master
Resolves: #66703
Reviewed-on: http://review.typo3.org/39153
Reviewed-by: Benjamin Mack <benni@typo3.org>
Reviewed-by: Thomas Maroschik <tmaroschik@dfau.de>
Reviewed-by: Wouter Wolters <typo3@wouterwolters.nl>
Reviewed-by: Helmut Hummel <helmut.hummel@typo3.org>
Tested-by: Helmut Hummel <helmut.hummel@typo3.org>
composer.json

index ed3ead1..3070fbe 100644 (file)
@@ -37,9 +37,9 @@
                "pear/http_request2": "2.2.1",
                "phpwhois/idna-convert": "0.8.2",
                "swiftmailer/swiftmailer": "5.2.1",
-               "symfony/console": "2.5.*",
-               "helhum/class-alias-loader": "~1.1",
-               "typo3/cms-composer-installers": "1.1.*@dev"
+               "symfony/console": "2.5.11",
+               "helhum/class-alias-loader": "1.1.4",
+               "typo3/cms-composer-installers": "1.1.2"
        },
        "require-dev": {
                "mikey179/vfsStream": "1.4.*@dev",