[FIX] Specified Evolution CMS version in core composer.json.

Author: Seiger

composer.json

@@ -35,7 +35,7 @@
     "vendor-dir": "vendor"
   },
   "require": {
-    "php": ">=8.2",
+    "php": "^8.2",
     "ext-pdo": "*",
     "ext-json": "*",
     "ext-mysqli": "*",

core/composer.json

@@ -10,7 +10,7 @@
     "core"
   ],
   "homepage": "https://evo.im/",
-  "license": "GPL-2.0-or-later",
+  "license": "GPL-3.0-or-later",
   "authors": [
     {
       "name": "Dmytro Lukianenko",
@@ -26,7 +26,7 @@
     }
   ],
   "require": {
-    "php": ">=8.2",
+    "php": "^8.2",
     "composer/composer": "*",
     "dmitry-suffi/redis-session-handler": "*",
     "doctrine/dbal": "3.*",
@@ -87,9 +87,6 @@
     }
   },
   "extra": {
-    "platform-packages": {
-      "evolutioncms/evolution": "3.2.7"
-    },
     "merge-plugin": {
       "include": [
         "custom/composer.json"
@@ -101,6 +98,12 @@
       "merge-scripts": false
     }
   },
+  "conflict": {
+    "evolutioncms/evolution": "*"
+  },
+  "replace": {
+    "evolutioncms/evolution": "3.2.7"
+  },
   "autoload": {
     "psr-4": {
       "EvolutionCMS\\": "src/",
@@ -128,7 +131,17 @@
   "minimum-stability": "dev",
   "prefer-stable": true,
   "scripts": {
-    "upd": "composer update --lock --ansi",
+    "sync-replace": "php functions/sync-replace-version.php",
+    "upd": [
+      "@sync-replace",
+      "composer update --lock --ansi"
+    ],
+    "pre-install-cmd": [
+      "@sync-replace"
+    ],
+    "pre-update-cmd": [
+      "@sync-replace"
+    ],
     "post-autoload-dump": [
       "@php artisan package:discover"
     ]

core/functions/sync-replace-version.php

@@ -0,0 +1,57 @@
+<?php declare(strict_types = 1);
+
+/**
+ * Sync "replace" and "conflict" in composer.json with the version from factory/version.php.
+ * - replace: evolutioncms/evolution => <version from version.php>
+ * - conflict: evolutioncms/evolution => *  (forbid installing a vendor package; root provides it)
+ *
+ * This ensures:
+ *  - Third-party packages may "require" evolutioncms/evolution with a semver range.
+ *  - Host never installs/updates the real package; it either matches the provided version or fails fast.
+ */
+
+$root = dirname(__DIR__);
+$composerFile = $root . '/composer.json';
+$versionFile  = $root . '/factory/version.php';
+
+if (!is_file($composerFile)) {
+    fwrite(STDERR, "composer.json not found at $composerFile\n");
+    exit(1);
+}
+if (!is_file($versionFile)) {
+    fwrite(STDERR, "version.php not found at $versionFile\n");
+    exit(1);
+}
+
+/** @var array{version?:string} $info */
+$info = include $versionFile;
+$version = $info['version'] ?? null;
+
+if (!is_string($version) || !preg_match('/^\d+\.\d+\.\d+(?:[-+][A-Za-z0-9\.-]+)?$/', $version)) {
+    fwrite(STDERR, "Invalid or missing version in version.php: " . var_export($version, true) . "\n");
+    exit(2);
+}
+
+$composerRaw = file_get_contents($composerFile);
+$composer = json_decode($composerRaw, true);
+if (!is_array($composer)) {
+    fwrite(STDERR, "Failed to parse composer.json\n");
+    exit(3);
+}
+
+$composer['replace']  = $composer['replace']  ?? [];
+$composer['conflict'] = $composer['conflict'] ?? [];
+
+// Provide exact version to satisfy "^x.y.z" in third-party packages, without installing vendor package
+$composer['replace']['evolutioncms/evolution']  = $version;
+
+// Forbid installing the vendor package at all (host provides it)
+$composer['conflict']['evolutioncms/evolution'] = '*';
+
+$new = json_encode($composer, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE) . PHP_EOL;
+if ($new !== $composerRaw) {
+    file_put_contents($composerFile, $new);
+    echo "Synced composer.json: evolutioncms/evolution {$version}\n";
+} else {
+    echo "Evolution CMS {$version}\n";
+}