From e73a88e6feb708582b1f83be8fb9bf45335a930c Mon Sep 17 00:00:00 2001
From: Tim Otten <totten@civicrm.org>
Date: Fri, 21 Jul 2017 11:12:38 -0700
Subject: [PATCH] CRM-17652 - composer.lock - Add unit test to redflag policy
 change

---
 tests/phpunit/CRM/Core/ComposerConfigTest.php | 46 +++++++++++++++++++
 1 file changed, 46 insertions(+)
 create mode 100644 tests/phpunit/CRM/Core/ComposerConfigTest.php

diff --git a/tests/phpunit/CRM/Core/ComposerConfigTest.php b/tests/phpunit/CRM/Core/ComposerConfigTest.php
new file mode 100644
index 0000000000..e62c907b24
--- /dev/null
+++ b/tests/phpunit/CRM/Core/ComposerConfigTest.php
@@ -0,0 +1,46 @@
+<?php
+
+/**
+ * Class CRM_Core_ComposerConfigTest
+ * @group headless
+ */
+class CRM_Core_ComposerConfigTest extends \PHPUnit_Framework_TestCase {
+
+  /**
+   * Assert that `composer.lock` remains as expected.
+   *
+   * Intentions:
+   *  - In `civicrm-core`, the `composer.json` is permissive. It can be updated
+   *    to support different versions of Symfony.
+   *  - In `civicrm-core`, the `composer.lock` is less permissive, driven by
+   *   the interests of existing D7/WP/J sites.
+   *
+   * Without this check, a well-meaning developer may upgrade the
+   * `composer.lock`, and no one would notice the change in policy
+   * because reviewers' eyes tend to gloss over `composer.lock`.
+   */
+  public function testHardLocks() {
+    $hardLocks = array(
+      'symfony/config' => '/^v2\.6\./',
+      'symfony/dependency-injection' => '/^v2\.6\./',
+      'symfony/event-dispatcher' => '/^v2\.6\./',
+      'symfony/filesystem' => '/^v2\.6\./',
+      'symfony/finder' => '/^v2\.6\./',
+      'symfony/process' => '/^v2\.6\./',
+    );
+
+    $lockFile = Civi::paths()->getPath('[civicrm.root]/composer.lock');
+    $lock = json_decode(file_get_contents($lockFile), 1);
+
+    foreach ($lock['packages'] as $package) {
+      if (isset($hardLocks[$package['name']])) {
+        $this->assertRegExp($hardLocks[$package['name']], $package['version'],
+          "Check hardlock for " . $package['name']);
+        unset($hardLocks[$package['name']]);
+      }
+    }
+    $this->assertEquals(array(), $hardLocks,
+      'composer.lock should have references to all hardlocks');
+  }
+
+}
-- 
2.25.1