Linked Questions

-5 votes
2 answers
2k views

Should I put composer.lock under version control for a library? [duplicate]

In an answer to How to get the exact version of included packages in my private repository, I made the statement that composer.lock should not be put under version control for a package. When ...
Nico Haase's user avatar
  • 11.9k
2484 votes
15 answers
1.1m views

Do I commit the package-lock.json file created by npm 5?

npm 5 was released today and one of the new features include deterministic installs with the creation of a package-lock.json file. Is this file supposed to be kept in source control? I'm assuming it'...
rink.attendant.6's user avatar
264 votes
5 answers
175k views

What are the differences between composer update and composer install?

What are the differences between composer update and composer install?
Dawlatzai Ghousi's user avatar
74 votes
2 answers
21k views

Git - Should Pipfile.lock be committed to version control?

When two developers are working on a project with different operating systems, the Pipfile.lock is different (especially the part inside host-environment-markers). For PHP, most people recommend to ...
Julien Le Coupanec's user avatar
26 votes
4 answers
40k views

Composer & composer.lock in GIT and merge conflicts

Here's our situation : We have 3 different Laravel projects and all 3 projects rely on our Core project. This Core project is a separate Laravel package hosted on our private repo and is used as a ...
cenob8's user avatar
  • 624
4 votes
1 answer
9k views

Re-install vendors from composer.lock (not composer.json)

In my project I have some Composer vendor libraries that have been manually edited; my purpose is to restore them to the original state, on my development machine. I unfortunately triggered a ...
Kamafeather's user avatar
  • 9,481
1 vote
2 answers
4k views

Can't clone from BitBucket using SSH

I have no choice I must use git clone with ssh so after that when I use composer install it will downlonad some dependencies from bitbucket using git clone ssh when I try run git clone using SSH, git ...
lazy_coder's user avatar
1 vote
1 answer
1k views

ERROR: Couldn't parse 'composer.lock'; it must be a valid lock file generated by Composer

I'm trying to deploy a simple app to Heroku, but keep getting this error message: Alastairs-MacBook-Air:php-getting-started alastair$ git push heroku master Counting objects: 6, done. Delta ...
Alastair Budge's user avatar
2 votes
1 answer
873 views

PHP Composer "require" OR condition with version in future

I need to use a bugfix which has not been released yet. Can I use something like: "bower-asset/yii2-pjax": "2.0.6 | dev-master#18a9183d578d81fb9dbb1c604daba48815c3ebd5 as 2.0.5" or "bower-asset/...
itnelo's user avatar
  • 1,093
1 vote
2 answers
704 views

Travis CI build fails for PHP 5.4 while trying to run composer

I am creating an open source project written in PHP and I'm starting to use Travis CI for testing on PHP versions 5.4, 5.5, 5.6 and HHVM. The tests for 5.5, 5.6 and HHVM pass without any issues, but ...
MisterBla's user avatar
  • 2,355
1 vote
0 answers
654 views

Composer: lock file and Git

I've created a staging version of an application, mirroring what I have in development. However, I had a few problems with the routing on staging and one suggestion was to run composer update. Since ...
Wayne Smallman's user avatar