Magento (all (!) 2.x versions) Composer Install (create-project) do fail due to version constraints.

[ktomk]

Steps to reproduce

1. Install Magento via composer create-project --repository-url=https://repo.magento.com/ magento/project-community-edition
   Expected result

2. Should have cloned and composer install'ed it

Actual result

1. Install fails due to missing requirement resolution

[ktomk]

The installation procedure is as follows:

install.sh:

#!/bin/bash
#
# install.sh - magento 2 installation as presented in devdocs from scratch
#
set -euo pipefail
IFS=$'\n\t'

verify_repo_credentials()
{
    echo "Checking repository credentials (this may take a moment) ..."
    local repo="repo.magento.com"
    local user="$(composer config -g http-basic.${repo}.username)"
    local pass="$(composer config -g http-basic.${repo}.password)"
    local url="https://${repo}/packages.json"
    curl -s -f -u "${user}:${pass}" "${url}" 2>&1 >/dev/null || (echo >&2 "Error: Invalid credentials"; exit 1)
}

# directory to install Magento into
dir="www"

verify_repo_credentials

if [ -d "${dir}" ]; then rm -rf "${dir}"; fi
composer create-project --repository-url=https://repo.magento.com/ magento/project-community-edition "${dir}"

This follows the book in Installation quick reference (tutorial)

The outcome is:

$ ./install.sh 
Checking repository credentials (this may take a moment) ...
Installing magento/project-community-edition (2.1.0)
  - Installing magento/project-community-edition (2.1.0)
    Loading from cache

Created project in www
Loading composer repositories with package information
Updating dependencies (including require-dev)         
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Installation request for pdepend/pdepend 2.2.2 -> satisfiable by pdepend/pdepend[2.2.2].
    - pdepend/pdepend 2.2.2 requires symfony/dependency-injection ^2.3.0 -> satisfiable by symfony/dependency-injection[2.3.x-dev, 2.4.x-dev, 2.5.x-dev, 2.6.x-dev, 2.7.x-dev, 2.8.x-dev] but these conflict with your requirements or minimum-stability.
  Problem 2
    - phpmd/phpmd 1.4.0 requires pdepend/pdepend * -> satisfiable by pdepend/pdepend[2.2.2].
    - phpmd/phpmd 1.4.1 requires pdepend/pdepend * -> satisfiable by pdepend/pdepend[2.2.2].
    - phpmd/phpmd 1.5.0 requires pdepend/pdepend >=1.1.1 -> satisfiable by pdepend/pdepend[2.2.2].
    - phpmd/phpmd 2.3.2 requires pdepend/pdepend ~2.0 -> satisfiable by pdepend/pdepend[2.2.2].
    - phpmd/phpmd 2.3.3 requires pdepend/pdepend ~2.0 -> satisfiable by pdepend/pdepend[2.2.2].
    - phpmd/phpmd 2.4.0 requires pdepend/pdepend ~2.0 -> satisfiable by pdepend/pdepend[2.2.2].
    - phpmd/phpmd 2.4.1 requires pdepend/pdepend ~2.0 -> satisfiable by pdepend/pdepend[2.2.2].
    - phpmd/phpmd 2.4.2 requires pdepend/pdepend ~2.0 -> satisfiable by pdepend/pdepend[2.2.2].
    - phpmd/phpmd 2.4.3 requires pdepend/pdepend ^2.0.4 -> satisfiable by pdepend/pdepend[2.2.2].
    - phpmd/phpmd 2.3.1 requires symfony/dependency-injection ^2.4 -> satisfiable by symfony/dependency-injection[2.4.x-dev, 2.5.x-dev, 2.6.x-dev, 2.7.x-dev, 2.8.x-dev] but these conflict with your requirements or minimum-stability.
    - phpmd/phpmd 2.3.0 requires symfony/dependency-injection ^2.4 -> satisfiable by symfony/dependency-injection[2.4.x-dev, 2.5.x-dev, 2.6.x-dev, 2.7.x-dev, 2.8.x-dev] but these conflict with your requirements or minimum-stability.
    - phpmd/phpmd 2.2.3 requires symfony/dependency-injection >=2.4 -> satisfiable by symfony/dependency-injection[2.4.x-dev, 2.5.x-dev, 2.6.x-dev, 2.7.x-dev, 2.8.x-dev, 3.0.x-dev, 3.1.x-dev, dev-master, 3.2.x-dev] but these conflict with your requirements or minimum-stability.
    - phpmd/phpmd 2.2.2 requires pdepend/pdepend 2.0.* -> satisfiable by pdepend/pdepend[2.0.0, 2.0.0-beta.1, 2.0.0-beta.2, 2.0.0-beta.3, 2.0.0-beta.4, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6] but these conflict with your requirements or minimum-stability.
    - phpmd/phpmd 2.2.1 requires pdepend/pdepend 2.0.* -> satisfiable by pdepend/pdepend[2.0.0, 2.0.0-beta.1, 2.0.0-beta.2, 2.0.0-beta.3, 2.0.0-beta.4, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6] but these conflict with your requirements or minimum-stability.
    - phpmd/phpmd 2.2.0 requires pdepend/pdepend 2.0.* -> satisfiable by pdepend/pdepend[2.0.0, 2.0.0-beta.1, 2.0.0-beta.2, 2.0.0-beta.3, 2.0.0-beta.4, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6] but these conflict with your requirements or minimum-stability.
    - phpmd/phpmd 2.1.3 requires pdepend/pdepend 2.0.* -> satisfiable by pdepend/pdepend[2.0.0, 2.0.0-beta.1, 2.0.0-beta.2, 2.0.0-beta.3, 2.0.0-beta.4, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6] but these conflict with your requirements or minimum-stability.
    - phpmd/phpmd 2.1.2 requires pdepend/pdepend 2.0.* -> satisfiable by pdepend/pdepend[2.0.0, 2.0.0-beta.1, 2.0.0-beta.2, 2.0.0-beta.3, 2.0.0-beta.4, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6] but these conflict with your requirements or minimum-stability.
    - phpmd/phpmd 2.1.1 requires pdepend/pdepend 2.0.* -> satisfiable by pdepend/pdepend[2.0.0, 2.0.0-beta.1, 2.0.0-beta.2, 2.0.0-beta.3, 2.0.0-beta.4, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6] but these conflict with your requirements or minimum-stability.
    - phpmd/phpmd 2.0.0 requires pdepend/pdepend 2.0.* -> satisfiable by pdepend/pdepend[2.0.0, 2.0.0-beta.1, 2.0.0-beta.2, 2.0.0-beta.3, 2.0.0-beta.4, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6] but these conflict with your requirements or minimum-stability.
    - phpmd/phpmd 1.5.1 requires pdepend/pdepend 1.1.* -> satisfiable by pdepend/pdepend[1.1.0, 1.1.1, 1.1.3] but these conflict with your requirements or minimum-stability.
    - pdepend/pdepend 2.2.2 requires symfony/dependency-injection ^2.3.0 -> satisfiable by symfony/dependency-injection[2.3.x-dev, 2.4.x-dev, 2.5.x-dev, 2.6.x-dev, 2.7.x-dev, 2.8.x-dev] but these conflict with your requirements or minimum-stability.
    - Installation request for phpmd/phpmd @stable -> satisfiable by phpmd/phpmd[1.4.0, 1.4.1, 1.5.0, 1.5.1, 2.0.0, 2.1.1, 2.1.2, 2.1.3, 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.3.0, 2.3.1, 2.3.2, 2.3.3, 2.4.0, 2.4.1, 2.4.2, 2.4.3].

As you can see, pdepend can't be satisfied any longer by the requirements provided in the composer.json file.

I first experienced it with automatic builds ca. 1-2h ago and did verify it first.

It is for all Magento 2.x versions from 2.0.0 up to 2.1.0.

Verified with version 2.1.0 and 2.0.7. This must be something new; I installed 2.1.0 late last week and didn't see this. Thanks for letting us know.

[ktomk]

It is since some hours now. One underlying problem I could spot is that currently it is not possible to install symfony/dependency-injection any longer with a stable version:

$ composer require symfony/dependency-injection


  [InvalidArgumentException]                                                                                                                                    
  Could not find package symfony/dependency-injection at any version for your minimum-stability (stable). Check the package spelling or your minimum-stability  


require [--dev] [--prefer-source] [--prefer-dist] [--no-progress] [--no-update] [--update-no-dev] [--update-with-dependencies] [--ignore-platform-reqs] [--sort-packages] [-o|--optimize-autoloader] [-a|--classmap-authoritative] [--] [<packages>]...

I hope this settles soon.

[ktomk]

Builds are green again.