Nicolas Grekas

You need to use composer with an auth token to have a reasonably high hit limit. For the update command, we use a not-rate-limited endpoint to access the JSONs for...

Would you be able to investigate this for a fix?

Would you mind working on a fix and sending a PR?

src/Update/RecipePatcher.php might be a good start, that's where the .git folder is referenced.

I didn't expect this approach. I don't think it makes sense to disable configurators case by case as that's going to provide broken experiences, where only part of a recipe...

This doesn't happen on install anymore, but it does on update. The reason is that `PackageJsonSynchronizer` works without caring about symfony.lock nor existing constraints. Ignoring existing constraints looks on purpose...

Which error? Are you able to reproduce with only public recipes + public repo? If yes, can you share a reproducer?

Not sure this belongs to flex/composer. I personally don't deploy this way. This looks too specific to me.

Could you please list the specific things you missed and you learned in the process?

Anyone up for sending PRs to the doc and/or improving the README?