Create new release to fix deprecation warnings about phpcs-security-audit HOT 8 OPEN

We've just tested & locked to a specific commit on master to support composer v2 alpha testing and remove the deprecation warnings, a return to semver would be good :)

Wish I could submit a PR for this!

from phpcs-security-audit.

Note that Composer 2 will be released in a few weeks, at which point these won't be just warnings any more, but potentially critical errors.

from phpcs-security-audit.

@jmarcil or @jrfnl looks like maybe you are the maintainers, are you able to cut a release?

from phpcs-security-audit.

@danepowell I'm not an official maintainer, but if we're talking Composer 2.0, PR #82 will need to be merged before any release.

from phpcs-security-audit.

I'm not talking about supporting Composer 2, I'm just talking about getting rid of the scary (to some people, especially our customers) yellow warnings for Composer 1 users. I think these warnings were already fixed in master, all we need is a new stable release (i.e. 2.0.2) to take advantage of the fix.

Composer 2 support is of course important as well, but not as immediate :)

from phpcs-security-audit.

Hello everyone!

I'm sadly currently the sole maintainer of this project, and hopefully we all can fix this soon.

With what is happening in the world this year, this project has been hard backlogged on my end. I won't have time to verify and merge PRs anymore for the foreseeable future. Same goes of course with any required fix, code modifications or documentation changes.

I've asked around and I'm ready to move this repository to it's own GitHub organization, where people can be added as collaborators. I'm more than willing to give away merge and other required access. I'll remain the primary owner to manage the org itself.

So two questions:

1. Can you see what will break if I do the organization move right now?
2. Who wants to join in?

from phpcs-security-audit.

@jmarcil I understand and sympathize with those challenges, and don't want to create more work for you. We're not asking for any new development as part of this ticket, all we need is a release tag, would you be able to accommodate that?

from phpcs-security-audit.

@jmarcil

1. Can you see what will break if I do the organization move right now?

As long as the name in the composer.json file doesn't change, this will not break anything for Composer users.
And as long as the move is done by using the GH "Transfer repo" feature, GH will automatically redirect to the moved repo for all typical uses (clone commands used in CI, forks linked to this repo, bookmarked URLs etc).

So I currently can't think of anything which would break.

I would recommend mentioning it in the changelog all the same.

2. Who wants to join in?

See my previous reply to this: #56 (comment)

from phpcs-security-audit.