Hi , I received an email from @U014FT0H22Z about a possible update on security issue. When I try

U025NDD2QNA

Hi , I received an email from @U014FT0H22Z about a possible update on security issue.

When I try to run on my b2b app:

composer why-not spryker/http 1.7.1

I get the following:
spryker/http 1.7.1 requires php (>=7.4 but 7.3 is installed)

How do i update php to 7.4? Will just updating it in composer.json be fine?

U025NDD2QNA

@valerii.trots @tom.lehner

Valerii Trots

composer.json + deploy.{project}-{env}.yml.

U025NDD2QNA

Hey Valeriia I changed the image in my deploy.dev.yml file from

environment: docker.dev
image:
    tag: spryker/php:7.3-alpine3.12

to

environment: docker.dev
image:
    tag: spryker/php:7.4-alpine3.15

and then in composer.json i changed php

"require": {
  "php": ">=7.4",

U025NDD2QNA

getting the same issue

U025NDD2QNA

Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - php is present at version 7.4 and cannot be modified by Composer
    - spryker/rabbit-mq 2.15.0 requires php-amqplib/php-amqplib ^3.1.0 -> satisfiable by php-amqplib/php-amqplib[v3.1.0].
    - spryker-feature/spryker-core 202108.0 requires spryker/rabbit-mq ^2.13.0 -> satisfiable by spryker/rabbit-mq[2.15.0].
    - php-amqplib/php-amqplib v3.1.0 conflicts with php-amqplib/php-amqplib v3.1.0.
    - spryker-feature/spryker-core is locked to version 202108.0 and an update of this package was not requested.

Valerii Trots

Did you run docker/sdk boot deploy.dev.yml && docker/sdk up after your changes?

Valerii Trots

Also composer.json has two php references.
https://github.com/spryker-shop/b2c-demo-shop/blob/master/composer.json#L235

U025NDD2QNA

Yes I did Valerii. The second one I also changed to 7.4

Valerii Trots

Then this one is the obvious candidate to be updated - spryker-feature/spryker-core is locked to version 202108.0 and an update of this package was not requested.

U025NDD2QNA

It’s strange but I have it mentioned as

"spryker-feature/spryker-core": "^202108.0",

Valerii Trots

If you won't find a way to update here, please either involve SA or BE dev assigned to a project or submit a support request providing your composer.json and composer.lock file so we will be able to investigate this for you.

U025NDD2QNA

ok i can wait for dev to answer the question first

U025NDD2QNA

@valerii.trots is there any documentation on updating from php 7.3 to 7.4? Are there any frontend libraries that need to be changed somewhere?

Valerii Trots

Don't think there is anything like that as every project is individual kind of.
There are general articles about updating Spryker projects like https://docs.spryker.com/docs/scos/dev/updating-a-spryker-based-project.html.

U025NDD2QNA

Hi Valerii, I was able to update successfully to php 7.4. But now when I run

docker/sdk up --build --assets --data

I get the following error when the following command is being run;

vendor/bin/console data:import --config=data/import/starboard/setup/minimal_GLOBAL.yml

The error is in

/data/src/Pyz/Zed/DataImport/Business/DataImportBusinessFactory.php

the function

/**
     * @return \Spryker\Zed\DataImport\Business\Model\DataImportStep\DataImportStepInterface
     */
    public function createAddLocalesStep(): DataImportStepInterface
    {
        return new AddLocalesStep($this->getStore());
    }

getStore() is not being recognized

Valerii Trots

If you are able to reproduce the problem using our public demo shops, please create a support request to fix core issue and our development team will do so.
Unfortunately I'm not a dev and don't have access to the project for debugging the problem you face.

U025NDD2QNA

https://github.com/spryker/data-import/commit/748b087fcbf3d8366c2fc012dd43af79ce01fef6

U025NDD2QNA

this was the issue

U025NDD2QNA

the getStore() was removed and i think no documentation was provided on it

Valerii Trots

https://api.release.spryker.com/release-group/3892 - this is the release group where the module was a part of a release.
There you can find a link to project level changes - https://github.com/spryker-shop/suite/pull/945/files.

U025NDD2QNA

Thanks Valerii, these are important links indeed.

How do you find the release group? This will be important for future.

Valerii Trots

https://api.release.spryker.com/release-history and found by date Jan 4 and ticket number TE-10179 from your link.

Unknown

Also note that officially, no project must run on <7.4 since August 2021
https://docs.spryker.com/docs/scos/user/intro-to-spryker/whats-new/supported-versions-of-php.html

U025NDD2QNA

Thanks

michael.schmetter

@UQK3ZPJEN
Shouldn't then the Demo repos be updated?
https://github.com/spryker-shop/b2c-demo-shop/blob/master/deploy.dev.yml

Unknown

They will
Afaik they already should have dev branches according to it
Also official releases and tags are immenent.

michael.schmetter

Ah I see
https://github.com/spryker-shop/b2c-demo-shop/blob/202204.0-release-testing/deploy.dev.yml