Skip to content

Pass --no-security-blocking only to composer install - #283

Open
sirreal wants to merge 1 commit into
masterfrom
composer-script-flags
Open

Pass --no-security-blocking only to composer install#283
sirreal wants to merge 1 commit into
masterfrom
composer-script-flags

Conversation

@sirreal

@sirreal sirreal commented Aug 18, 2026

Copy link
Copy Markdown
Member

--no-security-blocking is an install/update option, but the generic composer passthrough script passes it to every command, so anything else fails — e.g. npm run composer -- validate. The flag stays on composer:setup (install), and the passthrough keeps only --no-interaction.

Verified in the PHP 7.4 wordpress container: composer --no-interaction --no-security-blocking validate exits 1; without the flag it reports ./composer.json is valid. composer install --no-interaction --no-security-blocking continues to work (unchanged composer:setup path).

Overlaps trivially with #276, which rewrites the same lines to derive the plugin directory; whichever lands second rebases in seconds.

🤖 Generated with Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant