[Tiki-devel] Composer: Your requirements could not be resolved to an installable set of packages: found henrique-borba/php-sieve-manager[dev-master] but it does not match your minimum-stability.

Hello,

As of now, branch 24x and trunk are getting this error:
https://avan.tech/item81851-Cypht-within-Tiki-Composer-Your-requirements-could-not-be-resolved-to-an-installable-set-of-packages-found-henrique-borba-php-sieve-manager-dev-master-but-it-does-not-match-your-minimum-stability

This is a side-effect of the addition of Sieve filters in Cypht (Tiki's 
webmail)
https://github.com/jasonmunro/cypht/pull/569


A quick workaround would be to lock Composer to just before this change.

"require and require-dev additionally support explicit references (i.e. 
commit) for dev versions to make sure they are locked to a given state, 
even when you run update. These only work if you explicitly require a 
dev version and append the reference with #<ref>. This is also a 
root-only feature and will be ignored in dependencies."

  "require": {
         "monolog/monolog": 
"dev-master#2eb0c0978d290a1c45346a1955188929cb4e5db7",

"Note: This feature has severe technical limitations, as the 
composer.json metadata will still be read from the branch name you 
specify before the hash. You should therefore only use this as a 
temporary solution during development to remediate transient issues, 
until you can switch to tagged releases. The Composer team does not 
actively support this feature and will not accept bug reports related to 
it."

Source: https://getcomposer.org/doc/04-schema.md#package-links

In 
https://gitlab.com/tikiwiki/tiki/-/blob/24.x/vendor_bundled/composer.json#L40 
we use
  "jason-munro/cypht": "dev-master#03ed008",

This doesn't seem to work (anymore?) because

[root]# ./temp/composer.phar update --prefer-dist 
--working-dir="vendor_bundled" --no-dev

   Problem 1
     - Root composer.json requires jason-munro/cypht dev-master#c6a0555 
-> satisfiable by jason-munro/cypht[dev-master].
     - jason-munro/cypht dev-master requires 
henrique-borba/php-sieve-manager dev-master -> found 
henrique-borba/php-sieve-manager[dev-master] but it does not match your 
minimum-stability.


https://gitlab.com/tikiwiki/tiki/-/blob/master/vendor_bundled/composer.json 
has 7 instances of dev-master and the dependencies don't always have a 
stable release. Or this stable release is too old. So it would be nice 
to find a solution, even if just a workaround.

Thanks!

Marc