detect source URL from composer.json

[ro0NL]

Tell us more.

Composer PHP allows to specify the source URL: https://getcomposer.org/doc/04-schema.md#support

source: URL to browse or download the sources.

I've tried configuring this for an artifact package: psalm/phar@656fb65

However Renovate ignored it :(

The current PR/changelog still points to useless psalm/phar@5.20.0...5.21.0

Whereas pointing to useful vimeo/psalm@5.20.0...5.21.0 is expected

[github-actions[bot]]

Hi there,

Get your discussion fixed faster by creating a minimal reproduction. This means a repository dedicated to reproducing this issue with the minimal dependencies and config possible.

Before we start working on your issue we need to know exactly what's causing the current behavior. A minimal reproduction helps us with this.

To get started, please read our guide on creating a minimal reproduction.

We may close the discussion if you, or someone else, haven't created a minimal reproduction within two weeks. If you need more time, or are stuck, please ask for help or more time in a comment.

Good luck,

The Renovate team

[rarkins]

I think it needs an addition to https://github.com/renovatebot/renovate/blob/main/lib/modules/datasource/packagist/schema.ts but need a reproduction repo to confirm. Please create a repo which points to a package which has source correctly defined

[rarkins]

Isn't it included down the bottom?

{
    "minified": "composer/2.0",
    "packages": {
        "psalm/phar": [
            {
                "name": "psalm/phar",
                "description": "Composer-based Psalm Phar",
                "keywords": [],
                "homepage": "",
                "version": "dev-master",
                "version_normalized": "dev-master",
                "license": [
                    "MIT"
                ],
                "authors": [],
                "source": {
                    "url": "https://github.com/psalm/phar.git",
                    "type": "git",
                    "reference": "55bff1caf3ae05a0264eade29fa44eacd082b613"
                },
                "dist": {
                    "url": "https://api.github.com/repos/psalm/phar/zipball/55bff1caf3ae05a0264eade29fa44eacd082b613",
                    "type": "zip",
                    "shasum": "",
                    "reference": "55bff1caf3ae05a0264eade29fa44eacd082b613"
                },
                "type": "library",
                "time": "2024-01-30T23:15:10+00:00",
                "bin": [
                    "psalm.phar"
                ],
                "default-branch": true,
                "require": {
                    "php": "^7.1 || ^8.0"
                },
                "conflict": {
                    "vimeo/psalm": "*"
                },
                "support": {
                    "issues": "https://github.com/psalm/phar/issues",
                    "source": "https://github.com/psalm/phar/tree/master"
                }
            }
        ]
    }
}

[rarkins]

Actually I see the repo in both source and support objects

[ro0NL]

There's another issue: psalm/phar@64235be

The automated update reverted custom source URL.

To clarify, it's about pointing psalm/phar to vimeo/psalm

[rarkins]

I think I'm confused now.

I thought the goal was "Renovate should detect the sourceUrl from packagist.org responses". For this to happen:

• Packagist must include the source repo in its response
• Renovate must recognize/parse that URL into sourceUrl in the packagist datasource

[ro0NL]

The goal was to tell renovate the source URL it should generate a changelog from.

We actually install psalm/phar, but it's a shadow repo of vimeo/psalm.

I was hoping we could tell renovate like so: https://github.com/psalm/phar/pull/16/files, but this got reverted due the automated update of the shadow repo: psalm/phar@64235be

All in all, too much hassle for too little gain :)