From 68406b22871612b53bc80500992227bc1afdcabc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 29 Aug 2026 13:21:06 +0000 Subject: [PATCH 1/2] chore(deps-dev): bump cweagans/composer-patches Bumps [cweagans/composer-patches](https://github.com/cweagans/composer-patches) from 1.7.3 to 2.0.0. - [Release notes](https://github.com/cweagans/composer-patches/releases) - [Commits](https://github.com/cweagans/composer-patches/compare/1.7.3...2.0.0) --- updated-dependencies: - dependency-name: cweagans/composer-patches dependency-version: 2.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- vendor-bin/openapi-extractor/composer.json | 2 +- vendor-bin/openapi-extractor/composer.lock | 99 +++++++++++++++++++--- 2 files changed, 88 insertions(+), 13 deletions(-) diff --git a/vendor-bin/openapi-extractor/composer.json b/vendor-bin/openapi-extractor/composer.json index 969bd7a..78d9c13 100644 --- a/vendor-bin/openapi-extractor/composer.json +++ b/vendor-bin/openapi-extractor/composer.json @@ -1,6 +1,6 @@ { "require-dev": { - "cweagans/composer-patches": "^1.7", + "cweagans/composer-patches": "^2.0", "nextcloud/openapi-extractor": "v1.9.0" }, "config": { diff --git a/vendor-bin/openapi-extractor/composer.lock b/vendor-bin/openapi-extractor/composer.lock index d64d4e2..749ced9 100644 --- a/vendor-bin/openapi-extractor/composer.lock +++ b/vendor-bin/openapi-extractor/composer.lock @@ -4,7 +4,7 @@ "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies", "This file is @generated automatically" ], - "content-hash": "2bfe168f74db56aa67eb7e05e18e1cce", + "content-hash": "b4442ef5c72e90fc3431d7fd1898e438", "packages": [], "packages-dev": [ { @@ -80,31 +80,100 @@ ], "time": "2025-05-11T13:23:54+00:00" }, + { + "name": "cweagans/composer-configurable-plugin", + "version": "2.0.0", + "source": { + "type": "git", + "url": "https://github.com/cweagans/composer-configurable-plugin.git", + "reference": "15433906511a108a1806710e988629fd24b89974" + }, + "dist": { + "type": "zip", + "url": "https://api.github.com/repos/cweagans/composer-configurable-plugin/zipball/15433906511a108a1806710e988629fd24b89974", + "reference": "15433906511a108a1806710e988629fd24b89974", + "shasum": "" + }, + "require": { + "php": ">=8.0.0" + }, + "require-dev": { + "codeception/codeception": "~4.0", + "codeception/module-asserts": "^2.0", + "composer/composer": "~2.0", + "php-coveralls/php-coveralls": "~2.0", + "php-parallel-lint/php-parallel-lint": "^1.0.0", + "phpro/grumphp": "^1.8.0", + "sebastian/phpcpd": "^6.0", + "squizlabs/php_codesniffer": "^3.0" + }, + "type": "library", + "autoload": { + "psr-4": { + "cweagans\\Composer\\": "src" + } + }, + "notification-url": "https://packagist.org/downloads/", + "license": [ + "BSD-3-Clause" + ], + "authors": [ + { + "name": "Cameron Eagans", + "email": "me@cweagans.net" + } + ], + "description": "Provides a lightweight configuration system for Composer plugins.", + "support": { + "issues": "https://github.com/cweagans/composer-configurable-plugin/issues", + "source": "https://github.com/cweagans/composer-configurable-plugin/tree/2.0.0" + }, + "funding": [ + { + "url": "https://github.com/cweagans", + "type": "github" + } + ], + "time": "2023-02-12T04:58:58+00:00" + }, { "name": "cweagans/composer-patches", - "version": "1.7.3", + "version": "2.0.0", "source": { "type": "git", "url": "https://github.com/cweagans/composer-patches.git", - "reference": "e190d4466fe2b103a55467dfa83fc2fecfcaf2db" + "reference": "bfa6018a5f864653d9ed899b902ea72f858a2cf7" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/cweagans/composer-patches/zipball/e190d4466fe2b103a55467dfa83fc2fecfcaf2db", - "reference": "e190d4466fe2b103a55467dfa83fc2fecfcaf2db", + "url": "https://api.github.com/repos/cweagans/composer-patches/zipball/bfa6018a5f864653d9ed899b902ea72f858a2cf7", + "reference": "bfa6018a5f864653d9ed899b902ea72f858a2cf7", "shasum": "" }, "require": { - "composer-plugin-api": "^1.0 || ^2.0", - "php": ">=5.3.0" + "composer-plugin-api": "^2.0", + "cweagans/composer-configurable-plugin": "^2.0", + "ext-json": "*", + "php": ">=8.0.0" }, "require-dev": { - "composer/composer": "~1.0 || ~2.0", - "phpunit/phpunit": "~4.6" + "codeception/codeception": "~4.0", + "codeception/module-asserts": "^2.0", + "codeception/module-cli": "^2.0", + "codeception/module-filesystem": "^2.0", + "composer/composer": "~2.0", + "php-coveralls/php-coveralls": "~2.0", + "php-parallel-lint/php-parallel-lint": "^1.0.0", + "phpro/grumphp": "^1.8.0", + "sebastian/phpcpd": "^6.0", + "squizlabs/php_codesniffer": "^4.0" }, "type": "composer-plugin", "extra": { - "class": "cweagans\\Composer\\Patches" + "_": "The following two lines ensure that composer-patches is loaded as early as possible.", + "class": "cweagans\\Composer\\Plugin\\Patches", + "plugin-modifies-downloads": true, + "plugin-modifies-install-path": true }, "autoload": { "psr-4": { @@ -124,9 +193,15 @@ "description": "Provides a way to patch Composer packages.", "support": { "issues": "https://github.com/cweagans/composer-patches/issues", - "source": "https://github.com/cweagans/composer-patches/tree/1.7.3" + "source": "https://github.com/cweagans/composer-patches/tree/2.0.0" }, - "time": "2022-12-20T22:53:13+00:00" + "funding": [ + { + "url": "https://github.com/cweagans", + "type": "github" + } + ], + "time": "2025-10-30T23:44:22+00:00" }, { "name": "nextcloud/openapi-extractor", From 04321ea881d3b695e23757642eb14a7625759697 Mon Sep 17 00:00:00 2001 From: Ruben van der Linde Date: Sun, 30 Aug 2026 10:04:09 +0200 Subject: [PATCH 2/2] chore(deps): commit patches.lock.json for composer-patches v2 composer-patches 2.0 introduces patches.lock.json with a per-patch sha256. The openapi job regenerates the spec and then asserts a clean working tree; without the lockfile committed, the plugin creates it at install time and the assertion fails on the untracked file. Generated by the plugin itself (composer patches-relock); verified idempotent. The EUPL SPDX patch still applies cleanly under v2's git apply. --- vendor-bin/openapi-extractor/patches.lock.json | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 vendor-bin/openapi-extractor/patches.lock.json diff --git a/vendor-bin/openapi-extractor/patches.lock.json b/vendor-bin/openapi-extractor/patches.lock.json new file mode 100644 index 0000000..3e10d76 --- /dev/null +++ b/vendor-bin/openapi-extractor/patches.lock.json @@ -0,0 +1,17 @@ +{ + "_hash": "3c1e56d334b1d9ebdcdfbb9137ba8972871181ddbe07be61da3253ee8547468a", + "patches": { + "nextcloud/openapi-extractor": [ + { + "package": "nextcloud/openapi-extractor", + "description": "Allow EUPL-1.1 / EUPL-1.2 as SPDX identifiers (upstream allow-list is incomplete)", + "url": "patches/0001-allow-eupl-spdx-identifiers.patch", + "sha256": "0cc4cf31723f8a9da814846023e0d73aac2c1b763c98736cd4f4315b6809e9fa", + "depth": 1, + "extra": { + "provenance": "root" + } + } + ] + } +}