Lock file maintenance

[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: Branch creation - "before 2am" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Renovate will not automatically rebase this PR, because other commits have been found.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, click this checkbox. ⚠ Warning: custom changes will be lost.

---

Read more information about the use of Renovate Bot within Laminas.

[Ocramius]

config.platform missing here leads to this tooling not really working here.

/cc @internalsystemerror can we perhaps configure the version directly in the renovate config?

[internalsystemerror]

@Ocramius Ah good idea! Yes then we could have our cake and eat it. I don't remember it off the top of my head though so I'd need to look into it again and I'm really overworked atm.

I believe it would be this option: https://docs.renovatebot.com/configuration-options/#constraints

[Ocramius]

No worries - good to know that we can do this.

Not expecting you to, just using your pre-trained brain on these questions/problems :P

[Ocramius]

Hmm, I think #87 didn't work here 🤔

[internalsystemerror]

damn @Ocramius you are faster than light itself!

🤔 I'll see what the logs say, we might need to wrap the constraint in a "force": {}

[internalsystemerror]

The constraint is working but its running update with --ignore-platform-reqs.

From https://app.renovatebot.com/dashboard#github/mezzio/mezzio-skeleton/863849589

DEBUG: Using php constraint from config(branch="renovate/lock-file-maintenance")
DEBUG: composer command(branch="renovate/lock-file-maintenance")
{
"cmd": "composer",
"args": "update --ignore-platform-reqs --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins"
}
DEBUG: Setting CONTAINERBASE_CACHE_DIR to /tmp/containerbase(branch="renovate/lock-file-maintenance")
DEBUG: Using docker to execute(branch="renovate/lock-file-maintenance")
{
"image": "php"
}
DEBUG: Resolved stable matching version(branch="renovate/lock-file-maintenance")
{
"toolName": "composer",
"constraint": "^1.5 || ^2.0",
"resolvedVersion": "2.4.3"
}
DEBUG: containerbaseDir is separate from cacheDir(branch="renovate/lock-file-maintenance")
DEBUG: Found version constraint - checking for a compatible image to use(branch="renovate/lock-file-maintenance")
{
"depName": "docker.io/renovate/php",
"scheme": "composer",
"constraint": "^7.4"
}
DEBUG: Found compatible image version(branch="renovate/lock-file-maintenance")
{
"depName": "docker.io/renovate/php",
"scheme": "composer",
"constraint": "^7.4",
"version": "7.4.32"
}
DEBUG: Resolved tag constraint(branch="renovate/lock-file-maintenance")
{
"image": "docker.io/renovate/php",
"tagConstraint": "^7.4",
"tagVersioning": "composer",
"tag": "7.4.32"
}
DEBUG: Fetching Docker image: docker.io/renovate/php:7.4.32(branch="renovate/lock-file-maintenance")
DEBUG: Finished fetching Docker image docker.io/renovate/php:7.4.32@sha256:bd14dd1e39900ffd3c68a3df21c08c0f639ee0acb1feba80decc2d252bfe8251(branch="renovate/lock-file-maintenance")

[Ocramius]

But why would it do that? 😱

[internalsystemerror]

Perhaps the composer field is confusing it, because from 2.2+ it's supposed to only ignore ext-* and lib-*:

Composer 2.2 and up will be run with --ignore-platform-req='ext-' --ignore-platform-req='lib-', which ignores extension and library platform requirements but not the PHP version itself and should work in most cases.
Older Composer versions will be run with --ignore-platform-reqs, which means that all platform constraints (including the PHP version) will be ignored by default. This can result in updated dependencies that are not compatible with your platform.
https://docs.renovatebot.com/configuration-options/#composerignoreplatformreqs

[internalsystemerror]

#88 Appears to have done the trick \o/

DEBUG: Using php constraint from config(branch="renovate/lock-file-maintenance")
DEBUG: composer command(branch="renovate/lock-file-maintenance")
{
"cmd": "composer",
"args": "update --ignore-platform-req='ext-' --ignore-platform-req='lib-' --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins"
}

[Ocramius]

Amazing, thanks @internalsystemerror!