Composer v2.9 compatibility

Hack to disallow HTTP/3, forcing `HttpDownloader` to use `RemoteFilesystem` instead of `CurlDownloader`.

I suspect api.wordpress.org does not properly support HTTP/3:

    $ curl --http1.1 'https://api.wordpress.org/plugins/info/1.2/?action=plugin_information&slug=better-delete-revision'
    ...json response

    $ curl --http2 'https://api.wordpress.org/plugins/info/1.2/?action=plugin_information&slug=better-delete-revision'
    ...json response

    $ curl --http3-only 'https://api.wordpress.org/plugins/info/1.2/?action=plugin_information&slug=better-delete-revision'
    ...sometimes json response
    ...but most of the time ERR_DRAINING
    curl: (56) ngtcp2_conn_writev_stream returned error: ERR_DRAINING

See:
  - composer/composer#12363
  - https://github.com/composer/composer/blob/f5854b140ca27164d352ce30deece798acf3e36b/src/Composer/Util/HttpDownloader.php#L537

Author: tangrufus

.github/workflows/test.yml

@@ -103,7 +103,7 @@ jobs:
     strategy:
       matrix:
         php-version: ${{ fromJSON(needs.php-matrix.outputs.versions) }}
-        composer-version: ['2.6', '2.7', '2.8']
+        composer-version: ['2.6', '2.7', '2.8', '2.9']
     runs-on: ubuntu-latest
     env:
       GOFLAGS: '-mod=mod'

Makefile

@@ -1,9 +1,11 @@
 export GOFLAGS=-mod=mod
 
 combos := php-8-composer-latest \
+	php-8.4-composer-2.9 \
 	php-8.4-composer-2.8 \
 	php-8.4-composer-2.7 \
 	php-8.4-composer-2.6 \
+	php-8.3-composer-2.9 \
 	php-8.3-composer-2.8 \
 	php-8.3-composer-2.7 \
 	php-8.3-composer-2.6

src/WpOrg/Api/Client.php

@@ -88,7 +88,33 @@ private function fetchAsync(string $slug): PromiseInterface
             ], '', '&'),
         );
 
-        return $this->httpDownloader->add($url)
+        /** 
+         * Hack to disallow HTTP/3, forcing HttpDownloader to use RemoteFilesystem instead of CurlDownloader.
+         *
+         * I suspect api.wordpress.org does not properly support HTTP/3:
+         *
+         *     $ curl --http1.1 'https://api.wordpress.org/plugins/info/1.2/?action=plugin_information&slug=better-delete-revision'
+         *     ...json response
+         *
+         *     $ curl --http2 'https://api.wordpress.org/plugins/info/1.2/?action=plugin_information&slug=better-delete-revision'
+         *     ...json response
+         *
+         *     $ curl --http3-only 'https://api.wordpress.org/plugins/info/1.2/?action=plugin_information&slug=better-delete-revision'
+         *     ...sometimes json response
+         *     ...but most of the time ERR_DRAINING
+         *     curl: (56) ngtcp2_conn_writev_stream returned error: ERR_DRAINING
+         *
+         * See:
+         *   - https://github.com/composer/composer/pull/12363
+         *   - https://github.com/composer/composer/blob/f5854b140ca27164d352ce30deece798acf3e36b/src/Composer/Util/HttpDownloader.php#L537
+         */
+        $options = [
+            'ssl' => [
+                'allow_self_signed' => true,
+            ],
+        ];
+
+        return $this->httpDownloader->add($url, $options)
             ->then(static fn () => null) // Ignore successful responses. Closed plugins always return 404.
             ->catch(static function (TransportException $e): ?string {
                 // Closed plugins always return 404.

testdata/script/install_dist_closed.txtar

@@ -6,7 +6,6 @@ stderr -count=1 'Package wpackagist-plugin/better-delete-revision is abandoned'
 
 exec composer install
 
-stderr 'Nothing to install, update or remove'
 stderr -count=1 'Package wpackagist-plugin/better-delete-revision is abandoned'
 
 -- composer.json --

testdata/script/install_dist_open.txtar

@@ -6,7 +6,6 @@ exec composer install
 
 exec composer install
 
-stderr 'Nothing to install, update or remove'
 ! stderr abandoned
 
 -- composer.json --

testdata/script/require_dist_closed.txtar

@@ -6,7 +6,6 @@ stderr -count=1 'Package wpackagist-plugin/better-delete-revision is abandoned'
 
 exec composer require wpackagist-plugin/better-delete-revision
 
-stderr 'Nothing to install, update or remove'
 stderr -count=1 'Package wpackagist-plugin/better-delete-revision is abandoned'
 
 -- composer.json --

testdata/script/require_dist_open.txtar

@@ -6,7 +6,6 @@ exec composer require wpackagist-plugin/hello-dolly
 
 exec composer require wpackagist-plugin/hello-dolly
 
-stderr 'Nothing to install, update or remove'
 ! stderr abandoned
 
 -- composer.json --

testdata/script/update_dist_closed.txtar

@@ -6,7 +6,6 @@ stderr -count=1 'Package wpackagist-plugin/better-delete-revision is abandoned'
 
 exec composer update
 
-stderr 'Nothing to install, update or remove'
 stderr -count=1 'Package wpackagist-plugin/better-delete-revision is abandoned'
 
 -- composer.json --

testdata/script/update_dist_open.txtar

@@ -6,7 +6,6 @@ exec composer update
 
 exec composer update
 
-stderr 'Nothing to install, update or remove'
 ! stderr abandoned
 
 -- composer.json --