Automating dependency updates is essential for maintaining security and stability in Composer-based PHP projects. While tools like Dependabot and Renovate help manage updates, they do not support Composer 2.2 LTS - a crucial requirement for projects relying on long-term support versions.

Violinist.io is the only automated dependency update tool that fully supports Composer 2.2 LTS, ensuring stability for projects that cannot immediately upgrade to newer Composer versions. Additionally, it offers a self-hosting option, providing full control over updates without relying on third-party infrastructure.

Why Composer 2.2 LTS Support Matters

Composer 2.2 LTS provides:

  • Long-term stability for enterprise and legacy PHP projects.
  • Guaranteed security updates without breaking changes.
  • Compatibility with existing workflows that depend on older but supported Composer versions.

Many automation tools, including Dependabot and Renovate, default to the latest Composer release, which can cause unexpected compatibility issues. Violinist.io is the only tool that allows projects to remain on Composer 2.2 LTS while still benefiting from automated updates.

Key Features of Violinist.io

Full Composer 2.2 LTS Support - Ensures stability for projects requiring long-term support.

Self-Hosting Option - Unlike Dependabot, which is GitHub-specific, Violinist.io can be self-hosted for complete control.

Automated PRs with Changelog Insights - Provides detailed information on dependency changes.

Customizable Update Rules – Define which dependencies to update and when.

Getting Started with Violinist.io

1. Install and Configure Violinist.io

Violinist.io can be used as a SaaS solution or self-hosted. To self-host, follow the steps listed in the repository.

2. Connect Violinist.io to Your Repository

Authenticate with GitHub/GitLab (SaaS). Configure repository access (self-hosted).

3. Define Update Preferences

Customize update rules to fit project requirements.

4. Automate Updates and Review PRs

Violinist.io creates pull requests for updates, allowing developers to review and merge them efficiently.

Conclusion

For projects that require Composer 2.2 LTS, Violinist.io is the only automated update tool that ensures long-term stability while keeping dependencies up to date. Its self-hosting option further enhances control and flexibility.

To get started, visit Violinist.io or explore the GitHub repository.