Editing Composer dependencies

Pin a sealed version in composer.json using composer require (direct dependencies only).

Direct dependencies

Composer's manifest is composer.json. The cleanest way to pin a sealed version is through composer require, which writes both the version constraint and updates composer.lock:

composer require monolog/monolog:2.9.1-sp1

To edit composer.json by hand, update the version constraint under require:

 "require": {
-  "monolog/monolog": "^2.9.1",
+  "monolog/monolog": "2.9.1-sp1",
 }

Run composer install afterward.

Transitive dependencies

This page covers direct dependencies only. For overriding transitive dependencies in Composer, work with your Seal account team to confirm the right pattern for your project's setup.

Related

• Configuring Composer: the package-manager setup that points Composer at the Seal Artifact Server.