https://bugzilla.wikimedia.org/show_bug.cgi?id=73672

Tisza GergÅ‘ <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |INVALID

--- Comment #2 from Tisza GergÅ‘ <[email protected]> ---
> composer install does not touch already installed libraries, so no code gets 
> updated without the user's consent, it just the ones which have been added to 
> mediawiki/composer.json, and have not been installed at all yet

Actually that's not true (yeah, yeah, I should test before I file). Install
does not do anything at all if there is a lock file, and update has no option
to only touch completely missing packages, so there does not seem to be a way
to say "add missing packages but don't touch existing ones". Probably not a
good idea anyway as it would result in inconsistent versions of the vendor
packages.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to