Dependency errors while upgrading to 1.18.12

Walid

The issue

So I tried to update from 1.8.11 to 1.8.12 on my local dev instance of flarum. I ran composer update and got this error message:

Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires datlechin/flarum-link-preview ^1.6 -> satisfiable by datlechin/flarum-link-preview[v1.6.0, v1.6.1].
    - Root composer.json requires flarum/core ^1.8 -> satisfiable by flarum/core[v1.8.10, v1.8.11, v1.8.12].
    - flarum/core[v1.8.10, ..., v1.8.12] require illuminate/validation ^8.0 -> satisfiable by illuminate/validation[v8.0.0, ..., v8.83.27].
    - illuminate/validation[v8.0.0, ..., v8.11.2] require php ^7.3 -> your php version (8.4.16) does not satisfy that requirement.
    - illuminate/validation[v8.12.0, ..., v8.18.0] require symfony/http-foundation ^5.1 -> satisfiable by symfony/http-foundation[v5.4.50].
    - illuminate/validation[v8.18.1, ..., v8.73.2] require symfony/http-foundation ^5.1.4 -> satisfiable by symfony/http-foundation[v5.4.50].
    - illuminate/validation[v8.74.0, ..., v8.83.27] require symfony/http-foundation ^5.4 -> satisfiable by symfony/http-foundation[v5.4.50].
    - Conclusion: don't install symfony/http-foundation v5.4.50 (conflict analysis result)

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.

2 lines caught my eye:
- illuminate/validation[v8.0.0, ..., v8.11.2] require php ^7.3 -> your php version (8.4.16) does not satisfy that requirement. how 8.4 doesn't satisfy "7.3 or up"?
- Conclusion: don't install symfony/http-foundation v5.4.50 (conflict analysis result) why since on the previous lines everything seems satisfiable by symfony/http-foundation[v5.4.50]?
it's a bit confusing to me so I prefer to ask more knowledgeable people before I try the suggested Use the option --with-all-dependencies (-W)

Flarum information

Flarum core: 1.8.11
PHP version: 8.4.16
MySQL version: 8.0.44
Loaded extensions: Core, date, libxml, openssl, pcre, sqlite3, zlib, ctype, curl, dom, fileinfo, filter, hash, iconv, json, mbstring, SPL, session, PDO, pdo_sqlite, standard, posix, random, readline, Reflection, Phar, SimpleXML, tokenizer, xml, xmlreader, xmlwriter, mysqlnd, bcmath, csv, exif, gd, intl, mysqli, OAuth, pdo_mysql, redis, sodium, uuid, xsl, yaml, zip, Zend OPcache, xdebug
+-----------------------------------+----------+--------+
| Flarum Extensions                 |          |        |
+-----------------------------------+----------+--------+
| ID                                | Version  | Commit |
+-----------------------------------+----------+--------+
| flarum-sticky                     | v1.8.2   |        |
| flarum-tags                       | v1.8.5   |        |
| flarum-lock                       | v1.8.2   |        |
| flarum-flags                      | v1.8.2   |        |
| v17development-blog               | v0.8.0   |        |
| afrux-forum-widgets-core          | v0.1.7   |        |
| flarum-suspend                    | v1.8.4   |        |
| flarum-approval                   | v1.8.2   |        |
| walsgit-recycle-bin               | dev-main |        |
| walsgit-external-links-in-new-tab | dev-main |        |
| walsgit-discussion-cards          | dev-main |        |
| migratetoflarum-fake-data         | 1.4.0    |        |
| michaelbelgium-discussion-views   | v7.4.2   |        |
| justoverclock-custom-html-widget  | 0.1.4    |        |
| ianm-log-viewer                   | 0.1.1    |        |
| huseyinfiliz-modern-footer        | v1.1     |        |
| fof-user-bio                      | 1.4.2    |        |
| fof-upload                        | 1.8.6    |        |
| fof-formatting                    | 1.1.2    |        |
| fof-best-answer                   | 1.6.5    |        |
| flarum-subscriptions              | v1.8.1   |        |
| flarum-statistics                 | v1.8.1   |        |
| flarum-mentions                   | v1.8.5   |        |
| flarum-markdown                   | v1.8.1   |        |
| flarum-likes                      | v1.8.1   |        |
| flarum-lang-french                | v4.29.0  |        |
| flarum-lang-english               | v1.8.0   |        |
| flarum-extension-manager          | v1.0.7   |        |
| flarum-emoji                      | v1.8.1   |        |
| flarum-bbcode                     | v1.8.0   |        |
| davwheat-custom-sidenav-links     | 1.0.1    |        |
+-----------------------------------+----------+--------+
Base URL: https://flarum.test
Installation path: /var/www/html/flarum
Queue driver: sync
Session driver: file
Scheduler status: Never run
Mail driver: mail
Debug mode: ON

Don't forget to turn off debug mode! It should never be turned on in a production system.

GreXXL

Walid please run the update with the following commands:

composer update --prefer-dist --no-plugins --no-dev -a --with-all-dependencies
php flarum migrate
php flarum cache:clear

Please also note that the recommended maximum PHP version for Flarum 1.8.X is PHP 8.3 - while you are running PHP 8.4.

Walid

GreXXL thanks, so I tried composer update --prefer-dist --no-plugins --no-dev -a --with-all-dependenciesand I still got errors:

Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires datlechin/flarum-link-preview ^1.6 -> satisfiable by datlechin/flarum-link-preview[v1.6.0, v1.6.1].
    - Root composer.json requires flarum/core ^1.8 -> satisfiable by flarum/core[v1.8.10, v1.8.11, v1.8.12].
    - flarum/core[v1.8.10, ..., v1.8.12] require illuminate/validation ^8.0 -> satisfiable by illuminate/validation[v8.0.0, ..., v8.83.27].
    - illuminate/validation[v8.0.0, ..., v8.11.2] require php ^7.3 -> your php version (8.4.16) does not satisfy that requirement.
    - illuminate/validation[v8.12.0, ..., v8.18.0] require symfony/http-foundation ^5.1 -> satisfiable by symfony/http-foundation[v5.4.50].
    - illuminate/validation[v8.18.1, ..., v8.73.2] require symfony/http-foundation ^5.1.4 -> satisfiable by symfony/http-foundation[v5.4.50].
    - illuminate/validation[v8.74.0, ..., v8.83.27] require symfony/http-foundation ^5.4 -> satisfiable by symfony/http-foundation[v5.4.50].
    - Conclusion: don't install symfony/http-foundation v5.4.50 (conflict analysis result)

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.
Running update with --no-dev does not mean require-dev is ignored, it just means the packages will not be installed. If dev requirements are blocking the update you have to resolve those problems.

KBExit

Walid same issue as here: https://discuss.flarum.org/d/37168-vulnerability-of-symfonyhttp-client-cve-2024-50342/7
datlechin/flarum-link-preview

luceos

KBExit datlechin/flarum-link-preview

Seems it's not compatible with the latest flarum. Remove it to see if updating works.

@datlechin was this hard constraint intentional?

GreXXL

You can then use composer remove datlechin/flarum-link-preview to uninstall the incompatible extension and then run the update command again.

Walid

KBExit luceos GreXXL thank you all, I removed datlechin/flarum-link-previewand ran the update command again and it worked (had to wait for githug api to be operational again 😉 )