composer: composer2 can't find package versions
My composer.json
:
none
Output of composer diagnose
:
Checking platform settings: OK
Checking git settings: OK
Checking http connectivity to packagist: OK
Checking https connectivity to packagist: OK
Checking github.com oauth access: OK
Checking disk free space: OK
Checking pubkeys:
Tags Public Key Fingerprint: 57815BA2 7E54DC31 7ECC7CC5 573090D0 87719BA6 8F3BB723 4E5D42D0 84A14642
Dev Public Key Fingerprint: 4AC45767 E5EC2265 2F0C1167 CBBB8A2B 0C708369 153E328C AD90147D AFE50952
OK
Checking composer version: OK
Composer version: 2.0.7
PHP version: 7.4.9
PHP binary path: /usr/bin/php7.4
OpenSSL version: OpenSSL 1.1.1f 31 Mar 2020
cURL version: 7.68.0 libz 1.2.11 ssl OpenSSL/1.1.1f
zip extension: OK
When I run this command:
composer show -a ergebnis/json-printer
I get the following output:
[...]
versions : 9999999-dev, dev-main, dev-dependabot/composer/ergebnis/php-cs-fixer-config-2.5.3, dev-dependabot/composer/phpunit/phpunit-8.5.9
[...]
And I expected this to happen:
I expect to see all versions (mainly, all stable versions are missing) Following is output when running the same command with composer 1.10.1
[...]
versions : 3.1.1, 3.1.0, 3.0.2, 3.0.1, 3.0.0, 2.0.1, 2.0.0, 1.1.0, 1.0.0, dev-main, dev-dependabot/composer/phpunit/phpunit-8.5.9, dev-dependabot/composer/ergebnis/php-cs-fixer-config-2.5.3
[...]
About this issue
- Original URL
- State: closed
- Created 4 years ago
- Reactions: 3
- Comments: 22 (20 by maintainers)
Ok closing this, issues in mirroring script and http-client have been fixed and I verified that all our mirrors now have 100% the same data.
It seems like one mirror had a corrupt
ergebnis/json-printer
containing metadata fromergonode/comment
(dev versions too… so not only name mismatch but dev stuff in a non-dev file… I have no idea what the hell happened there. It seems to have happened during the last mirror resync I did on Oct 29th which does a few hundreds of thousands of requests, and so it seems like something went wrong there, bug or a weird bit flip I don’t know. Could be a bug on my end or in symfony/http-client or in curl’s http2 implementation… This is loading everything quite a bit so weird stuff happens.Anyway leaving this open for now until I can at least guard against the issue happening again, because I can’t see right now what would be the bug on my end at least.
I made sure the file has a newer timestamp now so your corrupted local caches should get invalidated.
I need to check the mirrors to see if any has the wrong data in the wrong place… can’t do that from my phone will get back to you tomorrow. However the one where v2 metadata ends up in a v1 file is very strange, because afaik those never get downloaded by the same process so it can’t be a client issue I’d guess (unless your test script downloads both?). Server is nginx serving static files… which I can only hope is fairly bug-free.
@jacques please report a new issue for this following the issue template strictly so we get enough information.
Silent data corruption? Not cool. This is reproducible I think with your mirroring script: some hashes don’t match, on files that are verified by a hash. I saw it a few times, I should look closer at why… I’d suspect an issue with h2. Dunno if it can be detected by curl.