SYMFONY_REQUIRE did not enforce the required version when the constraint couldn't be matched.

[theofidry]

In nelmio/alice, I use SYMFONY_REQUIRE to test various Symfony versions.

In nelmio/alice#1324, I added a build for SYMFONY_REQUIRE="8.*", yet some Symfony7 dependencies were still installed:

https://github.com/nelmio/alice/actions/runs/20063055922/job/57545083895?pr=1324#step:7:30

This was caused by me missing to allow a dependency for Symfony 8, hence symfony/framework-bundle couldn't be installed in v8, but the others that could were.

I assumed the Symfony require would enforce the required version, i.e. that if the constraints failed it would fail entirely, rather than bypassing the constraint if it can.

Is my assumption correct, i.e. it is a bug somewhere either in Flex or my setup, or is it the expected result?

[nicolas-grekas]

Restricting packages listed in "symfony/symfony" to "8.*.*"

Does this also happen is use 8.* instead of 8.*.*?

[Chris53897]

@theofidry We can try

- name: Install dependencies
        env:
          SYMFONY_REQUIRE: ${{ matrix.symfony-version }}
        run: composer ...

[theofidry]

@nicolas-grekas yes:

https://github.com/nelmio/alice/actions/runs/20285684914/job/58258695848?pr=1335#step:7:30

- Locking symfony/framework-bundle (v7.4.1)

Just for context: I do the installation twice. The first time for the library, the 2nd time is for the Symfony bridge using the wikimedia/composer-merge-plugin.

I was wondering if it's the plugin messing up something, so I did another run where I configure SYMFONY_REQUIRE from the beginning, but no change:

https://github.com/nelmio/alice/actions/runs/20285752216/job/58258917747?pr=1335#step:7:30

- Locking symfony/framework-bundle (v7.4.1)

And if we look at the first install for which the wikimedia/composer-merge-plugin is not used, same problem:

https://github.com/nelmio/alice/actions/runs/20285752216/job/58258917747?pr=1335#step:6:77

- Locking symfony/yaml (v7.4.1)

Again: it's legit it didn't install symfony/framework-bundle v8 neither symfony/yaml v8 because I missed to adapt the constraint from "^6.0 || ^7.4" to "^7.4 || ^8.0" (I even missed bumping to 6.4 even apparently...). But I kinda expect the plugin to cause a failure in this case as we marked v8 as required, and it couldn't.