Raise bower-asset/inputmask requirement to 5.0.9 or greater

[lourdas]

Inputmask has version 5.0.9 available, but the composer.json file in the framework specifically requires version 5.0.8. Maybe it's a good idea to change the version from "^5.0.8" to "^5.0" in composer.json.

Additional info

Q	A
Yii version	2.0.51
PHP version	7.4.33
Operating system	Linux

[schmunk42]

5.0.9 should get installed, see: https://jubianchi.github.io/semver-check/#/^5.0.8/5.0.9

But there's a space at the end...

yii2/composer.json

Line 79 in 3c75ff1

"bower-asset/inputmask": "^5.0.8 ",

[craiglondon]

@schmunk42 Was there a code change to fix this? I updated Yii from 2.0.52 to 2.0.53 and bower-asset/inputmask was downgraded.

  - Downgrading bower-asset/inputmask (5.0.9 => 5.0.8): Extracting archive
  - Upgrading yiisoft/yii2 (2.0.52 => 2.0.53): Extracting archive

I also used the -W switch with composer, it would appear if I don't use it, composer doesn't attempt to downgrade bower-asset/inputmask

[rob006]

@craiglondon This is probably a bug in Asset Packagist - there is no 5.0.9 release there: https://asset-packagist.org/package/bower-asset/inputmask

Sometimes Asset Packagist doesn't detect some versions in certain packages: hiqdev/asset-packagist#169

[craiglondon]

@rob006 Yeah, sounds like a bug over there. 5.0.9 does exist

{
    "name": "bower-asset/inputmask",
    "version": "5.0.9",
    "source": {
        "type": "git",
        "url": "https://github.com/RobinHerbots/Inputmask.git",
        "reference": "310a33557e2944daf86d5946a5e8c82b9118f8f7"
    },
    "dist": {
        "type": "zip",
        "url": "https://api.github.com/repos/RobinHerbots/Inputmask/zipball/310a33557e2944daf86d5946a5e8c82b9118f8f7",
        "reference": "310a33557e2944daf86d5946a5e8c82b9118f8f7"
    },
    "require": {
        "bower-asset/jquery": ">=1.7"
    },
    "type": "bower-asset",
    "license": [
        "http://opensource.org/licenses/mit-license.php"
    ]
},

[craiglondon]

Strange... 5.0.9 is over on asset-packagist today

[schmunk42]

FYI @rob006 @samdark hiqdev/asset-packagist#169 jQuery 3.7.1 is missing again.

This leads to serious problems, because composer downgrades several packages and it's not obvious to the user.

[samdark]

@terabytesoftw we should gradually switch to your foxy fork, I think...

[terabytesoftw]

@terabytesoftw we should gradually switch to your foxy fork, I think...

I suggest doing the same solution for the master branch, we add the package.json, without any default asset manager, we add the documentation, and the user will be free to use whatever they want, they can use foxy, npm, bun, pnpm, yarn, i would add foxy to suggestions composer, and to dev, so if the user wants to use it they can.

[samdark]

Yeah. Using foxy in app-basic / app-advanced would be more than enough.

[terabytesoftw]

Yeah. Using foxy in app-basic / app-advanced would be more than enough.

So we leave the core without assets.

[schmunk42]

@samdark But what should we do in the short-term with the AP issues?
At the moment you basically can not run any update on a Yii2 application.