fix: #3621562 Require the released Canvas Override 1.0.0 instead of the dev branch, to resolve on Stable for Drupal CMS

Rajab Natshahrequested to merge
issue/varbase_canvas_base-3621562:3621562-require-the-released into 1.0.x

Issue: #3621562

This recipe required drupal/canvas_override at 1.0.x-dev. A dev constraint can never be satisfied at Composer's default minimum-stability: stable, so it blocked Varbase Starter, and through it Drupal CMS.

Until tonight it could not be fixed here: Canvas Override had no stable release, only 1.0.0-rc1. It has one now — canvas_override 1.0.0, six fixes since rc1, two of them access-control hardening.

What changed

  • composer.json: drupal/canvas_override 1.0.x-dev -> ~1.0.0.

Checkpoints

  • Addition/Change/Update/Fix
  • Testing to ensure no regression
  • Reviewed by a human
  • Code review by maintainers
  • Release

This work was done with the help of AI, and reviewed by a human. Per the Drupal AI policy.

Edited by Rajab Natshah

Merge request reports