Gitiles
Code Review Sign In
gerrit.wikimedia.org / mediawiki / vendor / master
commitae362d2f02a0590011da3aecc8ca8717022fa6c6[log] [tgz]
authorReedy <reedy@wikimedia.org>Wed Jul 15 17:13:51 2026 +0100
committerReedy <reedy@wikimedia.org>Wed Jul 15 17:13:51 2026 +0100
treecb983726bc53df9bdd275ba9fce92c60ca8b52e3
parent16455db05b25e6c88344ac7549e725cc6bc0af2d [diff]
Upgrading wikimedia/cldr-plural-rule-parser (v3.0.1 => v3.0.2)

Bug: T425134
Change-Id: I1e977b665dea13ae1607065c988246c4fa987bb4
5 files changed
tree: cb983726bc53df9bdd275ba9fce92c60ca8b52e3
  1. bacon/
  2. brick/
  3. christian-riesen/
  4. composer/
  5. dasprid/
  6. data-values/
  7. defuse/
  8. diff/
  9. doctrine/
  10. egulias/
  11. elasticsearch/
  12. endroid/
  13. ezimuel/
  14. firebase/
  15. geoip2/
  16. guzzlehttp/
  17. jakobo/
  18. james-heinrich/
  19. justinrainbow/
  20. lcobucci/
  21. league/
  22. liuggio/
  23. maxmind/
  24. maxmind-db/
  25. mck89/
  26. monolog/
  27. mustangostang/
  28. nikic/
  29. nyholm/
  30. okvpn/
  31. onoi/
  32. oojs/
  33. paragonie/
  34. pear/
  35. pimple/
  36. pleonasm/
  37. psr/
  38. psy/
  39. ralouphie/
  40. react/
  41. ruflin/
  42. serialization/
  43. spomky-labs/
  44. swaggest/
  45. symfony/
  46. web-auth/
  47. webonyx/
  48. wikimedia/
  49. wmde/
  50. zordius/
  51. .gitignore
  52. .gitreview
  53. .htaccess
  54. autoload.php
  55. composer.json
  56. composer.lock
  57. README.md
README.md

MediaWiki-Vendor

Composer managed libraries required or recommended for use with MediaWiki. This repository is maintained for use on the Wikimedia Foundation production and testing clusters, but may be useful for anyone wishing to avoid directly managing MediaWiki dependencies with Composer.

Usage

Checkout this library into $IP/vendor using git clone <URL> or add the repository as a git submodule using git submodule add <URL> vendor followed by git submodule update --init.

Adding or updating libraries

  1. Read the documentation on the process for adding new libraries.
  2. Ensure you're using version 2.10.2 of composer via composer --version. Everyone using the same version means that diffs from the autoloader are minimal and so easier to validate and manually rebase. You can typically do this by running composer self-update 2.10.2 (possibly with sudo).
  3. Edit the composer.json file to add/update the libraries you want to change. It is recommended that you use composer require <package> <version> --no-update to do so as composer will then automatically sort the composer.json file.
  4. Run composer update --no-dev to download files and update the autoloader. We strongly recommend you this through Docker, both to avoid running untrusted code, and to exactly align with continous integration, via:
    docker run --rm -it -u "$(id -u):$(id -g)" -v "$PWD/.git:/src/.git:ro" -v "$PWD:/src" -w /src docker-registry.wikimedia.org/releng/composer-php83:8.3.32 update --no-dev
  5. Add all the new dependencies that got installed to composer.json as well, so that everything has their version pinned. You can look at the changes in composer.lock or composer/installed.json to see what they are, e.g. with
    git diff \
    <(git show @{u}:composer/installed.json | jq --raw-output '.packages[] | "\(.name): \(.version)"') \
    <(jq --raw-output '.packages[] | "\(.name): \(.version)"' composer/installed.json)
  6. In some cases, the libraries might include not needed files (e.g. test files, project files, etc). If you cannot exclude them from library's archive (e.g. by export-ignoreing unwanted files in library's .gitattributes file), you can skip checking them in by listing them in .gitignore file.
  7. Rarely, lint checks fail because test files in some library were written for an unsupported PHP version. In that case add the test directories to the --exclude parameter in the script > test field in composer.json, and to .gitignore.
  8. Add and commit changes as a gerrit patch.
  9. Review and merge changes.

Note that you MUST pair patches changing versions of libraries used by MediaWiki itself with ones for the "core" repo. Specifically, the patch in mediawiki/core must have a Depends-On footer to the patch in mediawiki/vendor.

The vendor repo has special configuration, which skips the integrity checks and so allowing a circular dependency Gordian knot to be fixed. However, this means that, if merged alone without a pair, you'll cause ALL patches in MediaWiki and ALL extensions to fail their continuous integration tests.

If in doubt, seek advice from regular commiters to this repository.