View Issue Details

IDProjectCategoryView StatusLast Update
0026385mantisbttoolspublic2019-12-09 15:04
Reporterdregad Assigned Todregad  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Summary0026385: Release packages and nightly build should not include development dependencies
Description

The script runs composer without the --no-dev flag, so all dependencies get included in the zip/tarballs.

Development dependencies should be excluded.

Steps To Reproduce
  • run buildrelease-repo.py -f /tmp/
  • check /tmp/<release_dir>/vendor
  • directory it contains phpunit, which is a require-dev per composer.json
TagsNo tags attached.

Relationships

related to 0026384 closeddregad Outdated jquery and bootstrap copies with known vulnerabilities 

Activities

There are no notes attached to this issue.

Related Changesets

Tools: master 549d14d5

2019-11-25 02:35

dregad


Details Diff
buildrelease-repo.py: exclude dev composer dependencies

Fixes 0026385
Affected Issues
0026385
mod - buildrelease-repo.py Diff File