Packagist doesn't update validator/livr, and the Travis CI webhook is dead #35

Update, October 26

• Packagist has the current master now. dev-master is 93e31c9, and the package page no longer says "This package is not auto-updated" (last update: 2026-10-25). The quick fix and the hook setup below are no longer needed, unless the warning comes back. validator/livr dev-master@abbe57e (PHP) fails LIVR test suite cases #33 should close by itself after the next weekly LIVR test suite run.
• Speed up validation and building of validators #32 is still not on master, see the last section. Speed up validation and building of validators #36 brings it there: it has only that commit and merges without conflicts. Merging Speed up validation and building of validators #36 is the one thing left to do here, besides the Travis webhook and a tagged release.

Problem

Packagist still serves the old code. The package page says "This package is not auto-updated. Last update: 2026-10-11", and composer require validator/livr installs dev-master at abbe57e (the merge of #30, July 20). The fixes from #31 (merged on October 19 as 93e31c9) are not on Packagist, and users don't get them.

This also keeps #33 open. The LIVR test suite run installs the package from Packagist the way users do, so it still tests abbe57e. The current master passes all counted cases: 68 of 70, and the remaining two are documented PHP limitations. Once Packagist has the current master, #33 closes by itself after the next run.

Quick fix: click "Update" on Packagist

Anyone with a packagist.org account can do this, not only maintainers:

1. Log in at https://packagist.org/login/ (logging in with GitHub works).
2. Open https://packagist.org/packages/validator/livr
3. In the right column, below the list of versions, find the line "This package is not auto-updated. Last update: …" and click the Update Now link under it. The link is shown when the package hasn't been updated for more than 24 hours.
   Maintainers (@antonfin) see the Manage button at the top right of the page instead, and Update is in its menu.

Packagist reads the repository again within a minute or two, and dev-master becomes 93e31c9.

The Travis CI webhook doesn't work

The repository still has a webhook from 2019 that sends events to Travis CI (Settings → Webhooks → https://notify.travis-ci.org). It's dead:

• travis-ci.org was shut down in 2021, so every delivery fails: each push, pull request, issue comment and so on ends with 502 failed to connect to host (Settings → Webhooks → the Travis hook → Recent Deliveries);
• the hook still sends the repository's events to a third-party address that this project no longer uses;
• it never had anything to do with Packagist. It only started Travis builds.

The CI it was for has already moved to GitHub Actions (.github/workflows/tests.yml, PHP 7.2–8.4 via shivammathur/setup-php), which is the standard for PHP libraries on GitHub now. So the Travis hook can simply be deleted: Settings → Webhooks → https://notify.travis-ci.org → Delete.

Keeping Packagist up to date

Packagist doesn't have a hook for this repository, so it only crawls the package now and then. The last crawl was 12 days ago, even though Packagist says it crawls packages without a hook about once a week. The standard fix is Packagist's GitHub integration, set up once by a Packagist maintainer:

1. On https://packagist.org/profile/, connect the GitHub account, or log out and log in again via GitHub to grant the permissions.
2. Make sure the Packagist application has access to the WebbyLab organization on GitHub (https://github.com/settings/applications → Packagist).
3. Packagist sets up the hook itself, and the "not auto-updated" warning disappears. After that, every push and tag shows up on Packagist right away.

See https://packagist.org/about#how-to-update-packages. If the integration can't be enabled, the webhook can be added by hand: Payload URL https://packagist.org/api/github?username=<packagist username>, content type application/json, the Packagist API token as the secret, push events only.

Also worth doing

• Tag a release (for example v2.1.0). Packagist has no stable version, only dev-master, so users have to depend on whatever master is at the moment.
• Speed up validation and building of validators #32 isn't on master. It was a stacked pull request with update-test-suite as its base, and it was merged into that branch three minutes after the branch had been merged into master through Update the LIVR test suite and fix the bugs it finds #31. GitHub shows Speed up validation and building of validators #32 as merged, but its commit (1b8f14d, "Speed up validation and building of validators") is only on update-test-suite and performance, not on master. Speed up validation and building of validators #36 is that pull request, from performance to master. Checked on October 26: it merges into master without conflicts, the package's own tests pass (77 tests, 162 assertions), and the LIVR test suite gives the same result as the current master (68 of 70, the remaining two are the documented PHP limitations).