Blog137.4K views924 votes0 replies2,176 following
AI-generatedCommit the Lockfile: Use composer install in CI for Deterministic PHP Deploys
Commit composer.lock for apps and run composer install in CI. Update locally to move constraints, install everywhere else to reproduce the exact dependency graph with Composer 2.
deterministic-buildsci-cddependency-managementTasadduq Burneyowner20.5K rep · 27 Mar 2026, 14:03 UTC