{"action":"created","issue":{"url":"https://api.github.com/repos/composer/composer/issues/7170","repository_url":"https://api.github.com/repos/composer/composer","labels_url":"https://api.github.com/repos/composer/composer/issues/7170/labels{/name}","comments_url":"https://api.github.com/repos/composer/composer/issues/7170/comments","events_url":"https://api.github.com/repos/composer/composer/issues/7170/events","html_url":"https://github.com/composer/composer/issues/7170","id":303017396,"number":7170,"title":"composer outdated should check new versions requirements","user":{"login":"pgmillon","id":715479,"avatar_url":"https://avatars3.githubusercontent.com/u/715479?v=4","gravatar_id":"","url":"https://api.github.com/users/pgmillon","html_url":"https://github.com/pgmillon","followers_url":"https://api.github.com/users/pgmillon/followers","following_url":"https://api.github.com/users/pgmillon/following{/other_user}","gists_url":"https://api.github.com/users/pgmillon/gists{/gist_id}","starred_url":"https://api.github.com/users/pgmillon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pgmillon/subscriptions","organizations_url":"https://api.github.com/users/pgmillon/orgs","repos_url":"https://api.github.com/users/pgmillon/repos","events_url":"https://api.github.com/users/pgmillon/events{/privacy}","received_events_url":"https://api.github.com/users/pgmillon/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-03-07T09:10:41Z","updated_at":"2018-03-07T15:27:47Z","closed_at":null,"author_association":"NONE","body":"My `composer.json`:\r\n\r\n```json\r\n{\r\n  \"config\": {\r\n    \"platform\": {\r\n      \"php\": \"5.3.3\"\r\n    }\r\n  },\r\n  \"require-dev\": {\r\n    \"phpunit/phpunit\": \"4.8.*\",\r\n    \"symfony/http-foundation\": \"2.6.*\",\r\n    \"sensiolabs/security-checker\": \"3.0.*\"\r\n  }\r\n}\r\n```\r\n\r\nOutput of `composer diagnose`:\r\n\r\n```\r\nChecking platform settings: WARNING\r\nYour PHP (5.3.3) is quite old, upgrading to PHP 5.3.4 or higher is recommended.\r\n Composer works with 5.3.2+ for most people, but there might be edge case issues.\r\nThe xdebug extension is loaded, this can slow down Composer a little.\r\n Disabling it when using Composer is recommended.\r\n\r\nChecking git settings: OK\r\nChecking http connectivity to packagist: OK\r\nChecking https connectivity to packagist: OK\r\nChecking github.com rate limit: OK\r\nChecking disk free space: OK\r\nChecking pubkeys: \r\nTags Public Key Fingerprint: 57815BA2 7E54DC31 7ECC7CC5 573090D0  87719BA6 8F3BB723 4E5D42D0 84A14642\r\nDev Public Key Fingerprint: 4AC45767 E5EC2265 2F0C1167 CBBB8A2B  0C708369 153E328C AD90147D AFE50952\r\nOK\r\nChecking composer version: OK\r\nComposer version: 1.6.3\r\nPHP version: 5.3.3\r\n\r\n```\r\n\r\nWhen I run this command:\r\n\r\n```\r\nphp composer.phar outdated -D\r\n```\r\n\r\nI get the following output:\r\n\r\n```\r\nsensiolabs/security-checker v3.0.7  ~ v4.1.8  A security checker for your composer.lock\r\n```\r\n\r\nAnd I expected this to happen:\r\n\r\nNo update should be suggested as sensiolabs/security-checker v4.0.* requires [symfony/console ~2.7|~3.0](https://github.com/sensiolabs/security-checker/blob/v4.0.0/composer.json#L12) and symfony/console v2.7.* requires [php >= 5.3.9](https://github.com/symfony/console/blob/v2.7.0/composer.json#L19) but I specified php version to 5.3.3.\r\nFYI when running a composer update with \"sensiolabs/security-checker\": \"4.0.*\":\r\n```\r\nYour requirements could not be resolved to an installable set of packages.\r\n...\r\n    - symfony/console v2.7.0 requires php >=5.3.9 -> your PHP version (5.3.3) does not satisfy that requirement.\r\n    - Installation request for sensiolabs/security-checker 4.0.* -> satisfiable by sensiolabs/security-checker[v4.0.0, v4.0.1, v4.0.2, v4.0.3, v4.0.4, v4.0.5].\r\n```"},"comment":{"url":"https://api.github.com/repos/composer/composer/issues/comments/371175004","html_url":"https://github.com/composer/composer/issues/7170#issuecomment-371175004","issue_url":"https://api.github.com/repos/composer/composer/issues/7170","id":371175004,"user":{"login":"stof","id":439401,"avatar_url":"https://avatars0.githubusercontent.com/u/439401?v=4","gravatar_id":"","url":"https://api.github.com/users/stof","html_url":"https://github.com/stof","followers_url":"https://api.github.com/users/stof/followers","following_url":"https://api.github.com/users/stof/following{/other_user}","gists_url":"https://api.github.com/users/stof/gists{/gist_id}","starred_url":"https://api.github.com/users/stof/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stof/subscriptions","organizations_url":"https://api.github.com/users/stof/orgs","repos_url":"https://api.github.com/users/stof/repos","events_url":"https://api.github.com/users/stof/events{/privacy}","received_events_url":"https://api.github.com/users/stof/received_events","type":"User","site_admin":false},"created_at":"2018-03-07T15:27:47Z","updated_at":"2018-03-07T15:27:47Z","author_association":"CONTRIBUTOR","body":"Well, the outdated command does take into account the PHP requirements of each package. But it does not take into account all the dependencies of these packages (which would make it a lot more complex, and could hide the fact that a package is outdated because of another package prevents updating it currently).\r\n\r\nThere is `composer why-not sensiolabs/security-checker v4.1.8` doing more analysis about what prevents a given package to be installed.\r\n\r\nOn a side node, running PHP 5.3 is already a security issue, so you don't even need the sensiolabs/security-checker package to know you have an issue..."}}
{"actor":{"display_login":"stof"}}