fix: use pinned dependency revisions when generating release archives

Signed-off-by: VirtualTam <virtualtam@flibidi.net>

diff --git a/Makefile b/Makefile
index c5dee80ec6995101a8b19b3c13b219c4bfff670e..f2db7d96b2081ad3964e6cb08441e18a87713085 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -155,7 +155,7 @@ release_archive: release_tar release_zip
 
 ### download 3rd-party PHP libraries
 composer_dependencies: clean
-       composer update --no-dev
+       composer install --no-dev --prefer-dist
        find vendor/ -name ".git" -type d -exec rm -rf {} +
 
 ### generate a release tarball and include 3rd-party dependencies