Download the PHP package disrex/magento-patch-installer without Composer
On this page you can find all versions of the php package disrex/magento-patch-installer. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download disrex/magento-patch-installer
More information about disrex/magento-patch-installer
Files in disrex/magento-patch-installer
Package magento-patch-installer
Short Description Applies Magento 2 / Adobe Commerce security patches, verifies they stay applied, and fails loudly when they do not
License MIT
Homepage https://github.com/disrex-group/magento-patch-installer
Informations about the package magento-patch-installer
disrex/magento-patch-installer
A Composer plugin that applies patches to Magento 2 and Adobe Commerce, checks on every Composer run that they are still on disk, and fails the run when one is missing. It was built for Adobe's monthly isolated security patches, which a store only receives by applying the files itself.
Full documentation: https://disrex-group.github.io/magento-patch-installer/
Install
You only require the patch package; this installer comes with it as a dependency. The allow-plugins line names the installer because it is the plugin Composer has to trust. Without that line a CI run skips the plugin without a word and exits 0 on an unpatched store. Without trust the run fails and names the package.
Use
A patch package can mark a patch optional. It stays off until the project enables it under extra.magento-patches.sources with a reason; see Declaring patches.
Exit codes: 0 all in place, 1 missing, 2 conflict, 3 configuration error. Run verify as its own pipeline step after composer install.
What it guarantees
- Every verdict comes from asking
git applyabout the file on disk, so a reinstalled package that lost its patch is found and patched again. - A patch Adobe re-issues with other content replaces the old one on stores that already have it.
- A patch goes on whole or not at all, and a file that matches neither side is never overwritten.
- Root files that Magento copies from
magento/magento2-baseare patched in both places.
Requirements
Magento 2.4.4 or later or Mage-OS 1.0 or later, PHP 7.4 to 8.5, Composer 2.2 or later, and git on the PATH. CI runs the end-to-end check on Magento 2.4.6-p15 to 2.4.9 and Mage-OS 1.3.1, 2.3.0 and 3.6.0.
Development
Releases use git-cliff with conventional commits:
The tag triggers the GitHub release, and Packagist picks it up through its webhook.
License
MIT, see SECURITY.md.
All versions of magento-patch-installer with dependencies
composer-plugin-api Version ^2.0