Skip to content

Update fetch dependency#18

Merged
ChiragAgg5k merged 3 commits into
mainfrom
codex/update-fetch-1.1
May 8, 2026
Merged

Update fetch dependency#18
ChiragAgg5k merged 3 commits into
mainfrom
codex/update-fetch-1.1

Conversation

@ChiragAgg5k
Copy link
Copy Markdown
Member

@ChiragAgg5k ChiragAgg5k commented May 8, 2026

Summary

  • Update utopia-php/fetch constraint from ^0.5 to ^1.1.
  • Move utopia-php/fetch to require-dev because it is only used by the import.php dev utility.
  • Refresh composer.lock to install utopia-php/fetch 1.1.2 as a dev package.

Compatibility

emails uses Utopia\Fetch\Client only in the import.php dev utility script. The script calls Client::fetch(), Client::METHOD_GET, Response::getStatusCode(), and Response::getBody(), which are still available in fetch 1.1.2. Runtime consumers of the library do not need fetch installed.

Test Plan

  • composer validate --strict
  • composer run lint
  • composer run check
  • vendor/bin/phpunit

Notes:

  • composer audit reports the existing google/protobuf advisory on the default dependency set; this PR only changes utopia-php/fetch.

@greptile-apps
Copy link
Copy Markdown

greptile-apps Bot commented May 8, 2026

Greptile Summary

This PR moves utopia-php/fetch from a production dependency (require) to a dev-only dependency (require-dev) and upgrades it from ^0.5 to ^1.1 (resolved to 1.1.2 in the lock file). The reclassification is correct — the package is only consumed by import.php, a Composer dev-utility script, and is not referenced anywhere in the production source tree.

  • composer.json: utopia-php/fetch removed from require, added to require-dev at ^1.1.
  • composer.lock: 0.5.1 entry removed from production packages; 1.1.2 added to dev-packages with an updated content hash.

Confidence Score: 5/5

Safe to merge — the change is a clean dependency reclassification with no impact on production code.

The only file that uses utopia-php/fetch is import.php, a dev utility script, so moving the package to require-dev is correct. No production source files reference the package, and the lock file update is consistent with the manifest change.

No files require special attention.

Important Files Changed

Filename Overview
composer.json Moves utopia-php/fetch from require (^0.5) to require-dev (^1.1); correct since the package is only consumed by the dev-only import.php script.
composer.lock Lock file regenerated: removes utopia-php/fetch 0.5.1 from production packages and adds 1.1.2 to dev-packages; no other dependency changes.

Reviews (3): Last reviewed commit: "Move fetch to dev dependencies" | Re-trigger Greptile

Comment thread composer.json Outdated
@ChiragAgg5k ChiragAgg5k merged commit 2e39775 into main May 8, 2026
7 checks passed
@ChiragAgg5k ChiragAgg5k deleted the codex/update-fetch-1.1 branch May 8, 2026 10:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants