2.2.17 - released 2022-07-13

View the release on GitHub


  • Fixed plugins from CWD/vendor being loaded in some cases like create-project or validate even though the target directory is outside of CWD (#10935)
  • Fixed support for legacy (Composer 1.x, e.g. hirak/prestissimo) plugins which will not warn/error anymore if not in allow-plugins, as they are anyway not loaded (#10928)
  • Fixed pre-install check for allowed plugins not taking --no-plugins into account (#10925)
  • Fixed support for disable_functions containing disk_free_space (#10936)
  • Fixed RootPackageRepository usages to always clone the root package to avoid interoperability issues with plugins (#10940)