Tisza Gergő <> changed:

           What    |Removed                     |Added
             Status|NEW                         |RESOLVED
         Resolution|---                         |INVALID

--- Comment #2 from Tisza Gergő <> ---
> composer install does not touch already installed libraries, so no code gets 
> updated without the user's consent, it just the ones which have been added to 
> mediawiki/composer.json, and have not been installed at all yet

Actually that's not true (yeah, yeah, I should test before I file). Install
does not do anything at all if there is a lock file, and update has no option
to only touch completely missing packages, so there does not seem to be a way
to say "add missing packages but don't touch existing ones". Probably not a
good idea anyway as it would result in inconsistent versions of the vendor

You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
Wikibugs-l mailing list

Reply via email to