composer/Plugin/Scaffold/composer.json

@@ -6,7 +6,7 @@
   "homepage": "https://www.drupal.org/project/drupal",
   "license": "GPL-2.0-or-later",
   "require": {
-    "composer-plugin-api": "^1 || ^2",
+    "composer-plugin-api": "^2",
     "php": ">=7.3.0"
   },
   "conflict": {

composer/Plugin/VendorHardening/Config.php

@@ -20,22 +20,22 @@ class Config {
    * @var array
    */
   protected static $defaultConfig = [
-    'behat/mink' => ['tests', 'driver-testsuite'],
-    'behat/mink-selenium2-driver' => ['tests'],
+    'behat/mink' => ['tests'],
+    'behat/mink-browserkit-driver' => ['tests'],
     'composer/composer' => ['bin'],
     'drupal/coder' => [
       'coder_sniffer/Drupal/Test',
       'coder_sniffer/DrupalPractice/Test',
     ],
     'doctrine/instantiator' => ['tests'],
-    'easyrdf/easyrdf' => ['scripts'],
     'egulias/email-validator' => ['documentation', 'tests'],
-    'friends-of-behat/mink-browserkit-driver' => ['tests'],
     'guzzlehttp/promises' => ['tests'],
     'guzzlehttp/psr7' => ['tests'],
-    'instaclick/php-webdriver' => ['doc', 'test'],
     'justinrainbow/json-schema' => ['demo'],
+    'lullabot/mink-selenium2-driver' => ['tests'],
+    'lullabot/php-webdriver' => ['doc', 'test'],
     'masterminds/html5' => ['bin', 'test'],
+    'mck89/peast' => ['doc'],
     'mikey179/vfsstream' => ['src/test'],
     'myclabs/deep-copy' => ['doc'],
     'pear/archive_tar' => ['docs', 'tests'],
@@ -48,7 +48,6 @@ class Config {
     'phpspec/prophecy' => ['fixtures', 'spec', 'tests'],
     'phpunit/php-code-coverage' => ['tests'],
     'phpunit/php-timer' => ['tests'],
-    'phpunit/php-token-stream' => ['tests'],
     'phpunit/phpunit' => ['tests'],
     'sebastian/code-unit-reverse-lookup' => ['tests'],
     'sebastian/comparator' => ['tests'],
@@ -61,11 +60,9 @@ class Config {
     'sebastian/recursion-context' => ['tests'],
     'seld/jsonlint' => ['tests'],
     'squizlabs/php_codesniffer' => ['tests'],
-    'stack/builder' => ['tests'],
     'symfony/browser-kit' => ['Tests'],
     'symfony/console' => ['Tests'],
     'symfony/css-selector' => ['Tests'],
-    'symfony/debug' => ['Tests'],
     'symfony/dependency-injection' => ['Tests'],
     'symfony/dom-crawler' => ['Tests'],
     'symfony/filesystem' => ['Tests'],
@@ -73,16 +70,14 @@ class Config {
     'symfony/event-dispatcher' => ['Tests'],
     'symfony/http-foundation' => ['Tests'],
     'symfony/http-kernel' => ['Tests'],
-    'symfony/phpunit-bridge' => ['Tests'],
     'symfony/process' => ['Tests'],
     'symfony/psr-http-message-bridge' => ['Tests'],
     'symfony/routing' => ['Tests'],
     'symfony/serializer' => ['Tests'],
-    'symfony/translation' => ['Tests'],
     'symfony/var-dumper' => ['Tests'],
     'symfony/validator' => ['Tests', 'Resources'],
     'symfony/yaml' => ['Tests'],
-    'symfony-cmf/routing' => ['Test', 'Tests'],
+    'tbachert/spi' => ['tests'],
     'theseer/tokenizer' => ['tests'],
     'twig/twig' => ['doc', 'ext', 'test', 'tests'],
   ];
@@ -90,7 +85,7 @@ class Config {
   /**
    * The root package.
    *
-   * @var Composer\Package\RootPackageInterface
+   * @var \Composer\Package\RootPackageInterface
    */
   protected $rootPackage;
 

composer/Plugin/VendorHardening/FileSecurity.php

@@ -43,7 +43,7 @@ public static function writeHtaccess($directory, $deny_public_access = TRUE, $fo
    * @return string
    *   The desired contents of the .htaccess file.
    *
-   * @see file_save_htaccess()
+   * @see \Drupal\Component\FileSecurity\FileSecurity::writeHtaccess()
    */
   public static function htaccessLines($deny_public_access = TRUE) {
     $lines = static::htaccessPreventExecution();
@@ -74,7 +74,7 @@ protected static function htaccessPreventExecution() {
 </Files>
 
 # If we know how to do it safely, disable the PHP engine entirely.
-<IfModule mod_php7.c>
+<IfModule mod_php.c>
   php_flag engine off
 </IfModule>
 EOF;
@@ -100,39 +100,6 @@ protected static function denyPublicAccess() {
 EOF;
   }
 
-  /**
-   * Writes a web.config file in the given directory, if it doesn't exist.
-   *
-   * @param string $directory
-   *   The directory.
-   * @param bool $force
-   *   (optional) Set to TRUE to force overwrite an existing file.
-   *
-   * @return bool
-   *   TRUE if the file already exists or was created. FALSE otherwise.
-   */
-  public static function writeWebConfig($directory, $force = FALSE) {
-    return self::writeFile($directory, 'web.config', self::webConfigLines(), $force);
-  }
-
-  /**
-   * Returns the standard web.config lines for security.
-   *
-   * @return string
-   *   The contents of the web.config file.
-   */
-  public static function webConfigLines() {
-    return <<<EOT
-<configuration>
-  <system.webServer>
-    <authorization>
-      <deny users="*">
-    </authorization>
-  </system.webServer>
-</configuration>
-EOT;
-  }
-
   /**
    * Writes the contents to the file in the given directory.
    *

composer/Plugin/VendorHardening/README.txt

@@ -35,9 +35,9 @@ This plugin can also clean up packages that were installed outside of the
 vendor directory, using composer/installers. This allows users to configure the
 plugin to clean up, for instance, Drupal extensions and Drupal core.
 
-2) The plugin also adds .htaccess and web.config files to the root of the
-project's vendor directory. These files will perform due diligence to keep the
-web server from serving files from within the vendor directory.
+2) The plugin also adds .htaccess file to the root of the
+project's vendor directory. The file will perform due diligence to keep the
+web server from serving file from within the vendor directory.
 
 How do I set it up?
 -------------------
@@ -50,7 +50,7 @@ When you install or update, this plugin will look through each package and
 remove directories it knows about.
 
 You can see the list of default package cleanups for this plugin in Config.php.
-If you discover that this list needs updating, please file an issue about it:
+If you discover that this list needs updating, file an issue about it:
 https://www.drupal.org/project/issues/drupal
 
 In addition to the default list of packages, you can configure the plugin using

composer/Plugin/VendorHardening/VendorHardeningPlugin.php

 <?php
 
+declare(strict_types=1);
+
 namespace Drupal\Composer\Plugin\VendorHardening;
 
 use Composer\Composer;
@@ -58,7 +60,7 @@ class VendorHardeningPlugin implements PluginInterface, EventSubscriberInterface
   /**
    * {@inheritdoc}
    */
-  public function activate(Composer $composer, IOInterface $io) {
+  public function activate(Composer $composer, IOInterface $io): void {
     $this->composer = $composer;
     $this->io = $io;
 
@@ -69,19 +71,19 @@ public function activate(Composer $composer, IOInterface $io) {
   /**
    * {@inheritdoc}
    */
-  public function deactivate(Composer $composer, IOInterface $io) {
+  public function deactivate(Composer $composer, IOInterface $io): void {
   }
 
   /**
    * {@inheritdoc}
    */
-  public function uninstall(Composer $composer, IOInterface $io) {
+  public function uninstall(Composer $composer, IOInterface $io): void {
   }
 
   /**
    * {@inheritdoc}
    */
-  public static function getSubscribedEvents() {
+  public static function getSubscribedEvents(): array {
     return [
       ScriptEvents::POST_AUTOLOAD_DUMP => 'onPostAutoloadDump',
       ScriptEvents::POST_UPDATE_CMD => 'onPostCmd',
@@ -99,7 +101,7 @@ public static function getSubscribedEvents() {
    * @param \Composer\Script\Event $event
    *   The Composer event.
    */
-  public function onPostAutoloadDump(Event $event) {
+  public function onPostAutoloadDump(Event $event): void {
     $this->writeAccessRestrictionFiles($this->composer->getConfig()->get('vendor-dir'));
   }
 
@@ -109,7 +111,7 @@ public function onPostAutoloadDump(Event $event) {
    * @param \Composer\Script\Event $event
    *   The Composer event.
    */
-  public function onPostCmd(Event $event) {
+  public function onPostCmd(Event $event): void {
     $this->cleanAllPackages();
   }
 
@@ -117,8 +119,9 @@ public function onPostCmd(Event $event) {
    * PRE_PACKAGE_INSTALL event handler.
    *
    * @param \Composer\Installer\PackageEvent $event
+   *   The package event.
    */
-  public function onPrePackageInstall(PackageEvent $event) {
+  public function onPrePackageInstall(PackageEvent $event): void {
     /** @var \Composer\Package\CompletePackage $package */
     $package = $event->getOperation()->getPackage();
     $this->removeBinBeforeCleanup($package);
@@ -128,8 +131,9 @@ public function onPrePackageInstall(PackageEvent $event) {
    * PRE_PACKAGE_UPDATE event handler.
    *
    * @param \Composer\Installer\PackageEvent $event
+   *   The package event.
    */
-  public function onPrePackageUpdate(PackageEvent $event) {
+  public function onPrePackageUpdate(PackageEvent $event): void {
     /** @var \Composer\Package\CompletePackage $package */
     $package = $event->getOperation()->getTargetPackage();
     $this->removeBinBeforeCleanup($package);
@@ -139,8 +143,9 @@ public function onPrePackageUpdate(PackageEvent $event) {
    * POST_PACKAGE_INSTALL event handler.
    *
    * @param \Composer\Installer\PackageEvent $event
+   *   The package event.
    */
-  public function onPostPackageInstall(PackageEvent $event) {
+  public function onPostPackageInstall(PackageEvent $event): void {
     $this->cleanPackage($event->getOperation()->getPackage());
   }
 
@@ -148,8 +153,9 @@ public function onPostPackageInstall(PackageEvent $event) {
    * POST_PACKAGE_UPDATE event handler.
    *
    * @param \Composer\Installer\PackageEvent $event
+   *   The package event.
    */
-  public function onPostPackageUpdate(PackageEvent $event) {
+  public function onPostPackageUpdate(PackageEvent $event): void {
     $this->cleanPackage($event->getOperation()->getTargetPackage());
   }
 
@@ -162,7 +168,7 @@ public function onPostPackageUpdate(PackageEvent $event) {
    * @param \Composer\Package\BasePackage $package
    *   The package we're cleaning up.
    */
-  protected function removeBinBeforeCleanup(BasePackage $package) {
+  protected function removeBinBeforeCleanup(BasePackage $package): void {
     // We can process AliasPackage and Package objects, and they share the
     // BasePackage parent class. However, since there is no common interface for
     // these package types that allow for the setBinaries() method, and since
@@ -204,13 +210,14 @@ protected function removeBinBeforeCleanup(BasePackage $package) {
    * @return string[]
    *   Bin files to remove, with the file as both the key and the value.
    */
-  protected function findBinOverlap($binaries, $clean_paths) {
+  protected function findBinOverlap(array $binaries, array $clean_paths): array {
     // Make a filesystem model to explore. This is a keyed array that looks like
     // all the places that will be removed by cleanup. 'tests/src' becomes
     // $filesystem['tests']['src'] = TRUE;
     $filesystem = [];
     foreach ($clean_paths as $clean_path) {
       $clean_pieces = explode("/", $clean_path);
+      // phpcs:ignore DrupalPractice.CodeAnalysis.VariableAnalysis.UnusedVariable
       $current = &$filesystem;
       foreach ($clean_pieces as $clean_piece) {
         $current = &$current[$clean_piece];
@@ -245,7 +252,7 @@ protected function findBinOverlap($binaries, $clean_paths) {
    * @return \Composer\Package\PackageInterface[]
    *   The list of installed packages.
    */
-  protected function getInstalledPackages() {
+  protected function getInstalledPackages(): array {
     return $this->composer->getRepositoryManager()->getLocalRepository()->getPackages();
   }
 
@@ -259,7 +266,7 @@ protected function getInstalledPackages() {
    *   Path to the install path for the package, relative to the project. This
    *   accounts for changes made by composer/installers, if any.
    */
-  protected function getInstallPathForPackage(PackageInterface $package) {
+  protected function getInstallPathForPackage(PackageInterface $package): string {
     return $this->composer->getInstallationManager()->getInstallPath($package);
   }
 
@@ -268,7 +275,7 @@ protected function getInstallPathForPackage(PackageInterface $package) {
    *
    * This applies in the context of a post-command event.
    */
-  public function cleanAllPackages() {
+  public function cleanAllPackages(): void {
     // Get a list of all the packages available after the update or install
     // command.
     $installed_packages = [];
@@ -304,7 +311,7 @@ public function cleanAllPackages() {
    * @param \Composer\Package\PackageInterface $package
    *   The package to clean.
    */
-  public function cleanPackage(PackageInterface $package) {
+  public function cleanPackage(PackageInterface $package): void {
     // Normalize package names to lower case.
     $package_name = strtolower($package->getName());
     if (isset($this->packagesAlreadyCleaned[$package_name])) {
@@ -324,10 +331,10 @@ public function cleanPackage(PackageInterface $package) {
    *
    * @param \Composer\Package\PackageInterface $package
    *   The package to clean.
-   * @param string $paths_for_package
-   *   List of directories in $package_name to remove
+   * @param string[] $paths_for_package
+   *   List of directories in $package_name to remove.
    */
-  protected function cleanPathsForPackage(PackageInterface $package, $paths_for_package) {
+  protected function cleanPathsForPackage(PackageInterface $package, $paths_for_package): void {
     // Whatever happens here, this package counts as cleaned so that we don't
     // process it more than once.
     $package_name = strtolower($package->getName());
@@ -338,43 +345,40 @@ protected function cleanPathsForPackage(PackageInterface $package, $paths_for_pa
       return;
     }
 
-    $this->io->writeError(sprintf('%sCleaning directories in <comment>%s</comment>', str_repeat(' ', 4), $package_name), TRUE, IOInterface::VERY_VERBOSE);
+    $this->io->writeError(sprintf('%sCleaning paths in <comment>%s</comment>', str_repeat(' ', 4), $package_name), TRUE, IOInterface::VERY_VERBOSE);
     $fs = new Filesystem();
     foreach ($paths_for_package as $cleanup_item) {
       $cleanup_path = $package_dir . '/' . $cleanup_item;
-      if (!is_dir($cleanup_path)) {
+      if (!file_exists($cleanup_path)) {
         // If the package has changed or the --prefer-dist version does not
         // include the directory. This is not an error.
-        $this->io->writeError(sprintf("%s<comment>Directory '%s' does not exist.</comment>", str_repeat(' ', 6), $cleanup_path), TRUE, IOInterface::VERY_VERBOSE);
+        $this->io->writeError(sprintf("%s<comment>Path '%s' does not exist.</comment>", str_repeat(' ', 6), $cleanup_path), TRUE, IOInterface::VERY_VERBOSE);
         continue;
       }
 
-      if (!$fs->removeDirectory($cleanup_path)) {
+      if (!$fs->remove($cleanup_path)) {
         // Always display a message if this fails as it means something
         // has gone wrong. Therefore the message has to include the
         // package name as the first informational message might not
         // exist.
-        $this->io->writeError(sprintf("%s<error>Failure removing directory '%s'</error> in package <comment>%s</comment>.", str_repeat(' ', 6), $cleanup_item, $package_name), TRUE, IOInterface::NORMAL);
+        $this->io->writeError(sprintf("%s<error>Failure removing path '%s'</error> in package <comment>%s</comment>.", str_repeat(' ', 6), $cleanup_item, $package_name), TRUE, IOInterface::NORMAL);
         continue;
       }
 
-      $this->io->writeError(sprintf("%sRemoving directory <info>'%s'</info>", str_repeat(' ', 4), $cleanup_item), TRUE, IOInterface::VERBOSE);
+      $this->io->writeError(sprintf("%sRemoving path <info>'%s'</info>", str_repeat(' ', 4), $cleanup_item), TRUE, IOInterface::VERBOSE);
     }
   }
 
   /**
-   * Place .htaccess and web.config files into the vendor directory.
+   * Place .htaccess file into the vendor directory.
    *
    * @param string $vendor_dir
    *   Path to vendor directory.
    */
-  public function writeAccessRestrictionFiles($vendor_dir) {
-    $this->io->writeError('<info>Hardening vendor directory with .htaccess and web.config files.</info>');
+  public function writeAccessRestrictionFiles(string $vendor_dir): void {
+    $this->io->writeError('<info>Hardening vendor directory with .htaccess file.</info>');
     // Prevent access to vendor directory on Apache servers.
     FileSecurity::writeHtaccess($vendor_dir, TRUE);
-
-    // Prevent access to vendor directory on IIS servers.
-    FileSecurity::writeWebConfig($vendor_dir);
   }
 
 }

composer/Plugin/VendorHardening/composer.json

@@ -15,6 +15,6 @@
   },
   "require": {
     "php": ">=7.3.0",
-    "composer-plugin-api": "^1.1 || ^2"
+    "composer-plugin-api": "^2"
   }
 }

composer/Template/LegacyProject/composer.json

 {
     "name": "drupal/legacy-project",
-    "description": "Project template for Drupal 9 projects with composer following drupal/drupal layout",
+    "description": "Project template for Drupal projects with composer following drupal/drupal layout",
     "type": "project",
     "license": "GPL-2.0-or-later",
     "homepage": "https://www.drupal.org/project/drupal",
@@ -15,14 +15,14 @@
         }
     ],
     "require": {
-        "composer/installers": "^1.9",
-        "drupal/core-composer-scaffold": "^9.4",
-        "drupal/core-project-message": "^9.4",
-        "drupal/core-recommended": "^9.4",
-        "drupal/core-vendor-hardening": "^9.4"
+        "composer/installers": "^2.3",
+        "drupal/core-composer-scaffold": "^11",
+        "drupal/core-project-message": "^11",
+        "drupal/core-recommended": "^11",
+        "drupal/core-vendor-hardening": "^11"
     },
     "require-dev": {
-        "drupal/core-dev": "^9.4"
+        "drupal/core-dev": "^11"
     },
     "conflict": {
         "drupal/drupal": "*"
@@ -30,6 +30,15 @@
     "minimum-stability": "dev",
     "prefer-stable": true,
     "config": {
+        "allow-plugins": {
+            "composer/installers": true,
+            "drupal/core-composer-scaffold": true,
+            "drupal/core-project-message": true,
+            "drupal/core-vendor-hardening": true,
+            "phpstan/extension-installer": true,
+            "dealerdirect/phpcodesniffer-composer-installer": true,
+            "php-http/discovery": true
+        },
         "sort-packages": true
     },
     "extra": {
@@ -59,7 +68,7 @@
                 "",
                 "<bg=yellow;fg=black>Next steps</>:",
 
-                "  * Install the site: https://www.drupal.org/docs/8/install",
+                "  * Install the site: https://www.drupal.org/docs/installing-drupal",
                 "  * Read the user guide: https://www.drupal.org/docs/user_guide/en/index.html",
                 "  * Get support: https://www.drupal.org/support",
                 "  * Get involved with the Drupal community:",

composer/Template/README.txt

@@ -63,4 +63,4 @@ These template projects use drupal/core-composer-scaffold to place the scaffold
 files. This plugin allows the top-level composer.json file for a Drupal site to
 transform the scaffold files in different ways, e.g. to append new entries to
 the end of robots.txt and so on. For documentation on how scaffolding works, see
-https://git.drupalcode.org/project/drupal/tree/8.8.x/composer/Plugin/Scaffold
+https://www.drupal.org/docs/develop/using-composer/using-drupals-composer-scaffold

composer/Template/RecommendedProject/composer.json

 {
     "name": "drupal/recommended-project",
-    "description": "Project template for Drupal 9 projects with a relocated document root",
+    "description": "Project template for Drupal projects with a relocated document root",
     "type": "project",
     "license": "GPL-2.0-or-later",
     "homepage": "https://www.drupal.org/project/drupal",
@@ -15,13 +15,13 @@
         }
     ],
     "require": {
-        "composer/installers": "^1.9",
-        "drupal/core-composer-scaffold": "^9.4",
-        "drupal/core-project-message": "^9.4",
-        "drupal/core-recommended": "^9.4"
+        "composer/installers": "^2.3",
+        "drupal/core-composer-scaffold": "^11",
+        "drupal/core-project-message": "^11",
+        "drupal/core-recommended": "^11"
     },
     "require-dev": {
-        "drupal/core-dev": "^9.4"
+        "drupal/core-dev": "^11"
     },
     "conflict": {
         "drupal/drupal": "*"
@@ -29,6 +29,14 @@
     "minimum-stability": "dev",
     "prefer-stable": true,
     "config": {
+        "allow-plugins": {
+            "composer/installers": true,
+            "drupal/core-composer-scaffold": true,
+            "drupal/core-project-message": true,
+            "phpstan/extension-installer": true,
+            "dealerdirect/phpcodesniffer-composer-installer": true,
+            "php-http/discovery": true
+        },
         "sort-packages": true
     },
     "extra": {
@@ -46,7 +54,8 @@
             "drush/Commands/contrib/{$name}": ["type:drupal-drush"],
             "web/modules/custom/{$name}": ["type:drupal-custom-module"],
             "web/profiles/custom/{$name}": ["type:drupal-custom-profile"],
-            "web/themes/custom/{$name}": ["type:drupal-custom-theme"]
+            "web/themes/custom/{$name}": ["type:drupal-custom-theme"],
+            "recipes/{$name}": ["type:drupal-recipe"]
         },
         "drupal-core-project-message": {
             "include-keys": ["homepage", "support"],
@@ -58,7 +67,7 @@
                 "",
                 "<bg=yellow;fg=black>Next steps</>:",
 
-                "  * Install the site: https://www.drupal.org/docs/8/install",
+                "  * Install the site: https://www.drupal.org/docs/installing-drupal",
                 "  * Read the user guide: https://www.drupal.org/docs/user_guide/en/index.html",
                 "  * Get support: https://www.drupal.org/support",
                 "  * Get involved with the Drupal community:",

composer/Util/SemanticVersion.php

+<?php
+
+namespace Drupal\Composer\Util;
+
+/**
+ * Utility methods for manipulating semantic versions.
+ */
+class SemanticVersion {
+
+  /**
+   * Given a version, generate a loose ^major.minor constraint.
+   *
+   * @param string $version
+   *   Semantic version string. Example: 9.5.0-beta23.
+   *
+   * @return string
+   *   Constraint string for major and minor. Example: ^9.5
+   */
+  public static function majorMinorConstraint(string $version): string {
+    preg_match('/^(\d+)\.(\d+)\.\d+/', $version, $matches);
+    return '^' . $matches[1] . '.' . $matches[2];
+  }
+
+}

core/.cspell.json

 {
-    "version": "0.1",
+    "version": "0.2",
     "language": "en-US",
     "allowCompoundWords": false,
+    "globRoot": ".",
     "ignorePaths": [
-      ".*.json",
+      "**/.*.json",
       ".*ignore",
       "composer.lock",
       "assets/vendor/**",
+      "misc/jquery.form.js",
       "lib/Drupal/Component/Diff/**",
       "lib/Drupal/Component/Transliteration/data/**",
       "lib/Drupal/Core/File/MimeType/ExtensionMimeTypeGuesser.php",
@@ -14,24 +16,27 @@
       "../**/LICENSE.txt",
       "modules/**/Migrate*Test.php",
       "modules/ckeditor5/js/build/*",
-      "modules/color/preview.html",
-      "modules/color/tests/modules/color_test/themes/color_test_theme/color/preview.html",
       "modules/media/tests/fixtures/oembed/*",
       "modules/migrate_drupal/tests/fixtures/drupal6.php",
       "modules/migrate_drupal/tests/fixtures/drupal7.php",
+      "modules/navigation/assets/**",
       "modules/search/tests/UnicodeTest.txt",
       "modules/system/tests/logo.svgz",
       "node_modules/*",
       "profiles/demo_umami/modules/demo_umami_content/default_content/languages/es/**/*",
+      "tests/fixtures/config_install/*",
       "tests/fixtures/files/*",
       "tests/Drupal/Tests/Component/Annotation/Doctrine/**",
-      "themes/bartik/color/preview.html",
+      "tests/PHPStan/vendor/**",
       "themes/olivero/fonts/**",
       "COPYRIGHT.txt",
       "MAINTAINERS.txt",
       "package.json",
       "yarn.lock",
-      "misc/cspell/dictionary.txt"
+      ".yarnrc.yml",
+      ".yarn/*",
+      "misc/cspell/dictionary.txt",
+      "phpstan*"
     ],
     "ignoreRegExpList": [
       "^msgstr .*",
@@ -40,13 +45,33 @@
       "\\Wi18n",
       "\\x{[0-9A-F]{4,5}}"
     ],
-    "dictionaries": ["drupal","companies", "fonts", "html", "php", "softwareTerms"],
-    "dictionaryDefinitions": [
-      { "name": "drupal", "path": "./misc/cspell/dictionary.txt"}
+    "dictionaries": [
+      "dictionary",
+      "drupal",
+      "companies",
+      "fonts",
+      "html",
+      "php",
+      "softwareTerms"
     ],
+    "dictionaryDefinitions": [
+      {
+        "name": "drupal",
+        "path": "./misc/cspell/drupal-dictionary.txt"
+      },
+      {
+        "name": "dictionary",
+        "path": "./misc/cspell/dictionary.txt"
+      }
+     ],
     "flagWords": [
+      "e-mail",
       "grey",
-      "hte"
+      "hte",
+      "ist",
+      "please",
+      "queuing",
+      "writeable"
     ],
     "overrides": [
       {

core/.deprecation-ignore.txt

+# This file contains patterns to be ignored while testing for use of
+# deprecated code.
+# See https://www.drupal.org/node/3285162 for more details.
+
+%The "Symfony\\Component\\Validator\\Context\\ExecutionContextInterface::.*\(\)" method is considered internal Used by the validator engine\. (Should not be called by user\W+code\. )?It may change without further notice\. You should not extend it from "[^"]+"\.%
+
+# Skip some dependencies' DebugClassLoader forward compatibility warnings.
+%Method "Behat\\[^"]+" might add "[^"]+" as a native return type declaration in the future. Do the same in (child class|implementation) "[^"]+" now to avoid errors or add an explicit @return annotation to suppress this message%
+%Method "Doctrine\\Common\\Annotations\\Reader::[^"]+" might add "[^"]+" as a native return type declaration in the future. Do the same in (child class|implementation) "[^"]+" now to avoid errors or add an explicit @return annotation to suppress this message%
+%Method "Twig\\Extension\\ExtensionInterface::[^"]+" might add "[^"]+" as a native return type declaration in the future. Do the same in (child class|implementation) "[^"]+" now to avoid errors or add an explicit @return annotation to suppress this message%
+%Method "Twig\\Loader\\FilesystemLoader::findTemplate\(\)" might add "[^"]+" as a native return type declaration in the future. Do the same in (child class|implementation) "[^"]+" now to avoid errors or add an explicit @return annotation to suppress this message%
+%Method "Twig\\Loader\\LoaderInterface::exists\(\)" might add "[^"]+" as a native return type declaration in the future. Do the same in (child class|implementation) "[^"]+" now to avoid errors or add an explicit @return annotation to suppress this message%
+%Method "Twig\\Node\\Node::compile\(\)" might add "[^"]+" as a native return type declaration in the future. Do the same in (child class|implementation) "[^"]+" now to avoid errors or add an explicit @return annotation to suppress this message%
+%Method "Twig\\NodeVisitor\\AbstractNodeVisitor::[^"]+" might add "[^"]+" as a native return type declaration in the future. Do the same in (child class|implementation) "[^"]+" now to avoid errors or add an explicit @return annotation to suppress this message%
+%Method "Twig\\NodeVisitor\\NodeVisitorInterface::[^"]+" might add "[^"]+" as a native return type declaration in the future. Do the same in (child class|implementation) "[^"]+" now to avoid errors or add an explicit @return annotation to suppress this message%
+%Method "Twig\\TokenParser\\TokenParserInterface::[^"]+" might add "[^"]+" as a native return type declaration in the future. Do the same in (child class|implementation) "[^"]+" now to avoid errors or add an explicit @return annotation to suppress this message%
+%Method "WebDriver\\Service\\CurlServiceInterface::[^"]+" might add "[^"]+" as a native return type declaration in the future. Do the same in implementation "[^"]+" now to avoid errors or add an explicit @return annotation to suppress this message%
+
+# Indirect deprecations. These are not in Drupal's remit to fix, but it is
+# worth keeping track of dependencies' issues.
+%Method "[^"]+" might add "[^"]+" as a native return type declaration in the future. Do the same in implementation "org\\bovigo\\vfs\\[^"]+" now to avoid errors or add an explicit @return annotation to suppress this message%
+%Method "[^"]+" might add "[^"]+" as a native return type declaration in the future. Do the same in (child class|implementation) "OpenTelemetry\\[^"]+" now to avoid errors or add an explicit @return annotation to suppress this message%
+
+# The following deprecation is listed for Twig 2 compatibility when unit
+# testing using \Symfony\Component\ErrorHandler\DebugClassLoader.
+%The "Twig\\Template" class is considered internal\. It may change without further notice\. You should not use it from "Drupal\\Tests\\Core\\Template\\StubTwigTemplate"\.%
+%The "Twig\\Environment::getTemplateClass\(\)" method is considered internal\. It may change without further notice\. You should not extend it from "Drupal\\Core\\Template\\TwigEnvironment"\.%
+
+# PHPUnit 10.
+%The "PHPUnit\\Framework\\TestCase::__construct\(\)" method is considered internal.*You should not extend it from "Drupal\\[^"]+"%
+
+# Symfony 7.2
+%Since symfony/http-foundation 7.2: NativeSessionStorage's "sid_length" option is deprecated and will be ignored in Symfony 8.0.%
+%Since symfony/http-foundation 7.2: NativeSessionStorage's "sid_bits_per_character" option is deprecated and will be ignored in Symfony 8.0.%

core/.env.example

@@ -46,6 +46,13 @@ DRUPAL_TEST_CHROMEDRIVER_AUTOSTART=true
 # e.g. `--disable-gpu --headless --no-sandbox`.
 #DRUPAL_TEST_WEBDRIVER_CHROME_ARGS=
 
+# Use W3C webdriver commands.
+#DRUPAL_TEST_WEBDRIVER_W3C=true
+
+# A list of arguments to pass to Webdriver, separated by spaces
+# e.g. `--allowed-ips --disable-dev-shm-usage`.
+#DRUPAL_TEST_WEBDRIVER_CLI_ARGS=
+
 ##############
 # Nightwatch #
 ##############

core/.eslintignore

 assets/vendor/**/*
 node_modules/**/*
 **/js_test_files/**/*
-*.js
-!*.es6.js
-!modules/ckeditor5/js/ckeditor5_plugins/**/*.js
-modules/locale/tests/locale_test.es6.js
-!tests/Drupal/Nightwatch/**/*.js
-misc/polyfills/array.find.es6.js
-misc/polyfills/element.closest.es6.js
-misc/polyfills/object.assign.es6.js
+**/build/**/*
+modules/locale/tests/js/locale_test.js
+misc/jquery.form.js
 
 # Ignore deliberately malformed YAML files.
 modules/system/tests/fixtures/HtaccessTest/access_test.yml
 modules/system/tests/themes/test_theme_libraries_empty/test_theme_libraries_empty.info.yml
 tests/Drupal/Tests/Core/Asset/library_test_files/empty.libraries.yml
 tests/Drupal/Tests/Core/Asset/library_test_files/invalid_file.libraries.yml
+tests/Drupal/Tests/Composer/Plugin/Scaffold/fixtures/drupal-assets-fixture/assets/default.services.yml
+tests/Drupal/Tests/Composer/Plugin/Scaffold/fixtures/drupal-profile/assets/profile.default.services.yml
+modules/system/tests/themes/sdc_theme_test/components/bar/bar.component.yml
+
+# Temporary until they are brought up to standards
+scripts/**/*
+modules/ckeditor5/webpack.config.js
+misc/jquery.form.js
+
+# Temporary until they are moved into assets/vendor
+modules/navigation/assets/vendor/**/*

core/.eslintrc.jquery.json

 {
   "plugins": [
-    "jquery"
+    "no-jquery"
   ],
   "rules": {
-    "jquery/no-ajax": 0,
-    "jquery/no-ajax-events": 2,
-    "jquery/no-animate": 0,
-    "jquery/no-attr": 0,
-    "jquery/no-bind": 2,
-    "jquery/no-class": 0,
-    "jquery/no-clone": 0,
-    "jquery/no-closest": 0,
-    "jquery/no-css": 0,
-    "jquery/no-data": 0,
-    "jquery/no-deferred": 0,
-    "jquery/no-delegate": 2,
-    "jquery/no-each": 0,
-    "jquery/no-extend": 0,
-    "jquery/no-fade": 0,
-    "jquery/no-filter": 0,
-    "jquery/no-find": 0,
-    "jquery/no-global-eval": 2,
-    "jquery/no-grep": 2,
-    "jquery/no-has": 0,
-    "jquery/no-hide": 0,
-    "jquery/no-html": 0,
-    "jquery/no-in-array": 0,
-    "jquery/no-is-array": 0,
-    "jquery/no-is-function": 2,
-    "jquery/no-is": 0,
-    "jquery/no-load": 2,
-    "jquery/no-map": 2,
-    "jquery/no-merge": 2,
-    "jquery/no-param": 2,
-    "jquery/no-parent": 0,
-    "jquery/no-parents": 0,
-    "jquery/no-parse-html": 0,
-    "jquery/no-prop": 0,
-    "jquery/no-proxy": 0,
-    "jquery/no-ready": 0,
-    "jquery/no-serialize": 0,
-    "jquery/no-show": 0,
-    "jquery/no-size": 2,
-    "jquery/no-sizzle": 0,
-    "jquery/no-slide": 0,
-    "jquery/no-submit": 2,
-    "jquery/no-text": 0,
-    "jquery/no-toggle": 0,
-    "jquery/no-trigger": 0,
-    "jquery/no-trim": 2,
-    "jquery/no-val": 0,
-    "jquery/no-when": 0,
-    "jquery/no-wrap": 0
+    "no-jquery/no-ajax": 0,
+    "no-jquery/no-ajax-events": 2,
+    "no-jquery/no-animate": 2,
+    "no-jquery/no-attr": 0,
+    "no-jquery/no-bind": 2,
+    "no-jquery/no-class": 0,
+    "no-jquery/no-clone": 2,
+    "no-jquery/no-closest": 0,
+    "no-jquery/no-css": 2,
+    "no-jquery/no-data": 0,
+    "no-jquery/no-deferred": 0,
+    "no-jquery/no-delegate": 2,
+    "no-jquery/no-each": 0,
+    "no-jquery/no-extend": 0,
+    "no-jquery/no-fade": 0,
+    "no-jquery/no-filter": 0,
+    "no-jquery/no-find": 0,
+    "no-jquery/no-global-eval": 2,
+    "no-jquery/no-grep": 2,
+    "no-jquery/no-has": 0,
+    "no-jquery/no-hide": 0,
+    "no-jquery/no-html": 0,
+    "no-jquery/no-in-array": 0,
+    "no-jquery/no-is-array": 0,
+    "no-jquery/no-is-function": 2,
+    "no-jquery/no-is": 2,
+    "no-jquery/no-load": 2,
+    "no-jquery/no-map": 2,
+    "no-jquery/no-merge": 2,
+    "no-jquery/no-param": 2,
+    "no-jquery/no-parent": 0,
+    "no-jquery/no-parents": 0,
+    "no-jquery/no-parse-html": 2,
+    "no-jquery/no-prop": 0,
+    "no-jquery/no-proxy": 2,
+    "no-jquery/no-ready": 2,
+    "no-jquery/no-serialize": 2,
+    "no-jquery/no-show": 0,
+    "no-jquery/no-size": 2,
+    "no-jquery/no-sizzle": 0,
+    "no-jquery/no-slide": 0,
+    "no-jquery/no-submit": 2,
+    "no-jquery/no-text": 2,
+    "no-jquery/no-toggle": 0,
+    "no-jquery/no-trigger": 0,
+    "no-jquery/no-trim": 2,
+    "no-jquery/no-val": 2,
+    "no-jquery/no-when": 2,
+    "no-jquery/no-wrap": 0
   }
-}
+}
\ No newline at end of file

core/.eslintrc.json

 {
   "extends": [
-    "airbnb",
+    "airbnb-base",
     "plugin:prettier/recommended",
     "plugin:yml/recommended"
   ],
@@ -10,6 +10,9 @@
     "es6": true,
     "node": true
   },
+  "parserOptions": {
+    "ecmaVersion": 2020
+  },
   "globals": {
     "Drupal": true,
     "drupalSettings": true,
@@ -18,19 +21,15 @@
     "_": true,
     "Cookies": true,
     "Backbone": true,
-    "Modernizr": true,
     "loadjs": true,
-    "Popper": true,
     "Shepherd": true,
     "Sortable": true,
     "once": true,
-    "CKEDITOR": true,
-    "tabbable": true
-  },
-  "settings": {
-    "react": {
-      "version": "latest"
-    }
+    "CKEditor5": true,
+    "tabbable": true,
+    "transliterate": true,
+    "bodyScrollLock" : true,
+    "FloatingUIDOM": true
   },
   "rules": {
     "prettier/prettier": "error",
@@ -51,6 +50,7 @@
       "requireReturn": false
     }],
     "no-unused-vars": ["warn"],
-    "operator-linebreak": ["error", "after", { "overrides": { "?": "ignore", ":": "ignore" } }]
+    "operator-linebreak": ["error", "after", { "overrides": { "?": "ignore", ":": "ignore" } }],
+    "yml/indent": ["error", 2]
   }
 }

core/.eslintrc.legacy.json

@@ -12,9 +12,7 @@
     "jQuery": true,
     "_": true,
     "matchMedia": true,
-    "Backbone": true,
-    "Modernizr": true,
-    "CKEDITOR": true
+    "Backbone": true
   },
   "rules": {
     "array-bracket-spacing": ["error", "never"],

core/.eslintrc.passing.json

@@ -10,9 +10,9 @@
     "new-cap": "off",
     "max-len": "off",
     "default-case": "off",
+    "default-param-last": "off",
     "prefer-destructuring": "off",
-    "react/no-this-in-sfc": "off",
-    "react/destructuring-assignment": "off",
-    "import/named": "off"
+    "prefer-regex-literals": "off",
+    "import/no-import-module-exports": "off"
   }
 }

core/.gitignore

@@ -3,6 +3,10 @@
 node_modules
 yarn-error.log
 
+# Ignore yarn files
+# @see https://yarnpkg.com/getting-started/qa#which-files-should-be-gitignored
+.yarn/*
+
 # Ignore overrides of core's phpcs.xml.dist and phpunit.xml.dist.
 phpcs.xml
 phpunit.xml
@@ -19,3 +23,15 @@ nightwatch.settings.json
 
 # Ignore dotenv
 .env
+
+# Ignore CSpell cache
+.cspellcache
+
+# Ignore phpstan cache
+phpstan-tmp
+
+# Ignore eslint cache
+.eslintcache
+
+# Ignore stylelint cache
+.stylelint-cache