[pkg-php-pear] Bug#984735: composer: fails on installed.json format used in Composer v2

[Imre Jonk]

Package: composer
Version: 1.8.4-1
Severity: normal
Tags: patch

Dear Maintainer,

(resubmitting this as my previous report seems to have vanished)

Composer 1.8.4-1 in Debian 10 fails on the installed.json format of
Composer v2. This can be a problem for Debian 10 users who want to use
software packaged for Composer 2.0.0 and up. One example of such
software is SimpleSAMLphp 1.19.0. This problem has of course been fixed
in the composer 2.0.9-1 package in Debian Testing, but you might want
to
address this in buster-proposed-updates as well.

A minimal patch that enables forward compatibility with the v2 format
can be found upstream:
https://github.com/composer/composer/commit/ba346ef04d7cc6fdbf9423b06f51e48485d20b77

The full transcript of my Composer session can be found here:
https://gist.github.com/imrejonk/07e29358c00578386783621c2f08d8ef

Here is the exception trace from the transcript above:

Exception trace:
 () at /usr/share/php/Composer/Package/Loader/ArrayLoader.php:44
 Composer\Package\Loader\ArrayLoader->load() at
/usr/share/php/Composer/Repository/FilesystemRepository.php:63
 Composer\Repository\FilesystemRepository->initialize() at
/usr/share/php/Composer/Repository/ArrayRepository.php:185
 Composer\Repository\ArrayRepository->getPackages() at
/usr/share/php/Composer/Plugin/PluginManager.php:256
 Composer\Plugin\PluginManager->loadRepository() at
/usr/share/php/Composer/Plugin/PluginManager.php:76
 Composer\Plugin\PluginManager->loadInstalledPlugins() at
/usr/share/php/Composer/Factory.php:384
 Composer\Factory->createComposer() at
/usr/share/php/Composer/Factory.php:576
 Composer\Factory::create() at
/usr/share/php/Composer/Console/Application.php:345
 Composer\Console\Application->getComposer() at
/usr/share/php/Composer/Console/Application.php:458
 Composer\Console\Application->getPluginCommands() at
/usr/share/php/Composer/Console/Application.php:156
 Composer\Console\Application->doRun() at
/usr/share/php/Symfony/Component/Console/Application.php:148
 Symfony\Component\Console\Application->run() at
/usr/share/php/Composer/Console/Application.php:104
 Composer\Console\Application->run() at /usr/bin/composer:57


-- System Information:
Debian Release: 10.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable'), (50, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-14-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE,
TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8),
LANGUAGE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages composer depends on:
ii  jsonlint                     1.7.1-1
ii  php-common                   2:69
ii  php-composer-ca-bundle       1.1.4-1
ii  php-composer-semver          1.4.2-1
ii  php-composer-spdx-licenses   1.5.0-1
ii  php-composer-xdebug-handler  1.3.2-1
ii  php-json-schema              5.2.8-1
ii  php-psr-log                  1.1.0-1
ii  php-symfony-console          3.4.22+dfsg-2+deb10u1
ii  php-symfony-filesystem       3.4.22+dfsg-2+deb10u1
ii  php-symfony-finder           3.4.22+dfsg-2+deb10u1
ii  php-symfony-process          3.4.22+dfsg-2+deb10u1
ii  php7.3-cli [php-cli]         7.3.19-1~deb10u1

Versions of packages composer recommends:
ii  git    1:2.20.1-2+deb10u3
ii  unzip  6.0-23+deb10u1

Versions of packages composer suggests:
pn  fossil      <none>
pn  mercurial   <none>
pn  php-zip     <none>
ii  subversion  1.10.4-1+deb10u1

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-php-pear/attachments/20210307/87648256/attachment.sig>