Update deps

Author: Seldaek

composer.lock

@@ -147,6 +147,7 @@ public function getVersionData(array $versionIds): array
                 ['ids' => ArrayParameterType::INTEGER]
             );
             foreach ($rows as $row) {
+                assert(isset($result[$row['version_id']]));
                 $result[$row['version_id']][$link][] = $row;
             }
         }
@@ -158,6 +159,7 @@ public function getVersionData(array $versionIds): array
         );
         foreach ($rows as $row) {
             $versionId = $row['version_id'];
+            assert(isset($result[$versionId]));
             $result[$versionId]['tags'][] = $row['name'];
         }
 

src/Entity/VersionRepository.php

@@ -39,6 +39,7 @@ public function augmentDownloadPayloadWithIds(array $payload): array
 
         foreach ($results as $key => $result) {
             if ($result) {
+                assert(isset($payload[$key]));
                 [$id, $vid] = explode(',', $result);
                 $payload[$key]['id'] = (int) $id;
                 $payload[$key]['vid'] = (int) $vid;

src/Model/VersionIdCache.php

@@ -441,7 +441,7 @@ private function updateInformation(IOInterface $io, VersionRepository $versionRe
         $version->setSoftDeletedAt(null);
         $version->setReleasedAt($data->getReleaseDate() === null ? null : \DateTimeImmutable::createFromInterface($data->getReleaseDate()));
 
-        if ($data->getSourceType()) {
+        if ($data->getSourceType()) { // null or '' here explicitly means no source and will be nulled, do not change this behavior
             $source['type'] = $data->getSourceType();
             $source['url'] = $data->getSourceUrl();
             // force public URLs even if the package somehow got downgraded to a GitDriver