Missed composer mlocati/ip-lib requirement

[chilek]

Prerequisites

• I have searched for duplicate or closed issues
• I can recreate the issue with all plugins disabled

Describe the issue

Missed:

composer require --update-no-dev mlocati/ip-lib

causes:

[01-Apr-2026 08:50:42 Europe/Warsaw] PHP Fatal error:  Uncaught Error: Class "IPLib\Factory" not found in /var/www/mail.chilan.com/public_html/program/lib/Roundcube/rcube_utils.php:438

in RC logs/errors.

Current release-1.6 branch.

What browser(s) are you seeing the problem on?

No response

What version of PHP are you using?

8.3

What version of Roundcube are you using?

1.6-HEAD

JavaScript errors

No response

PHP errors

No response

[chilek]

$ php -v
PHP 8.3.30 (cli) (built: Mar  4 2026 09:58:14) (NTS)
Copyright (c) The PHP Group
Zend Engine v4.3.30, Copyright (c) Zend Technologies
    with Zend OPcache v8.3.30, Copyright (c), by Zend Technologies
    with Xdebug v3.5.0, Copyright (c) 2002-2025, by Derick Rethans

[alecpl]

I'm not sure how did you arrive there. The line is definitely where expected

roundcubemail/composer.json-dist

Line 24 in 9d18d52

"mlocati/ip-lib": "^1.22.0"

There seem to be people having trouble with an upgrade (#10120), but I have no clue why.

[gabviv73]

In the 1.6.15 docker image, I've tried:

# docker compose exec -it -e COMPOSER_ALLOW_SUPERUSER=1 webmail-app composer update --no-dev -o --dry-run
Composer could not detect the root package (roundcube/roundcubemail) version, defaulting to '1.0.0'. See https://getcomposer.org/root-version
Loading composer repositories with package information
Updating dependencies
Nothing to modify in lock file
Installing dependencies from lock file
Package operations: 1 install, 17 updates, 0 removals
  - Upgrading roundcube/plugin-installer (0.3.2 => 0.3.11)
  - Upgrading dasprid/enum (1.0.4 => 1.0.7)
  - Upgrading symfony/deprecation-contracts (v3.3.0 => v3.6.0)
  - Upgrading psr/http-client (1.0.2 => 1.0.3)
  - Upgrading psr/http-factory (1.0.2 => 1.1.0)
  - Upgrading guzzlehttp/psr7 (2.5.0 => 2.9.0)
  - Upgrading guzzlehttp/promises (2.0.0 => 2.3.0)
  - Upgrading guzzlehttp/guzzle (7.7.0 => 7.10.0)
  - Upgrading pear/pear-core-minimal (v1.10.13 => v1.10.18)
  - Upgrading pear/net_ldap2 (v2.2.1 => v2.3.0)
  - Upgrading kolab/net_ldap3 (v1.1.4 => v1.1.5)
  - Installing mlocati/ip-lib (1.22.0)
  - Upgrading pear/console_commandline (v1.2.6 => v1.2.6)
  - Upgrading pear/crypt_gpg (v1.6.7 => v1.6.11)
  - Upgrading pear/mail_mime (1.10.11 => 1.10.12)
  - Upgrading pear/net_socket (v1.2.2 => v1.2.2)
  - Upgrading pear/net_sieve (1.4.6 => 1.4.8)
  - Upgrading roundcube/rtf-html-php (v2.1 => v2.2)
Package pear/console_commandline is abandoned, you should avoid using it. No replacement was suggested.
Package pear/net_socket is abandoned, you should avoid using it. No replacement was suggested.
4 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
No security vulnerability advisories found.

But it fails:

# docker compose exec -it -e COMPOSER_ALLOW_SUPERUSER=1 webmail-app composer update --no-dev -o 
Composer could not detect the root package (roundcube/roundcubemail) version, defaulting to '1.0.0'. See https://getcomposer.org/root-version
Loading composer repositories with package information
Updating dependencies
Nothing to modify in lock file
Writing lock file
Installing dependencies from lock file
Package operations: 1 install, 17 updates, 0 removals

In GitDownloader.php line 82:
                                                            
  git was not found in your PATH, skipping source download  
                                                            

update [--with WITH] [--prefer-source] [--prefer-dist] [--prefer-install PREFER-INSTALL] [--dry-run] [--dev] [--no-dev] [--lock] [--no-install] [--no-audit] [--audit-format AUDIT-FORMAT] [--no-security-blocking] [--no-autoloader] [--no-suggest] [--no-progress] [-w|--with-dependencies] [-W|--with-all-dependencies] [-v|vv|vvv|--verbose] [-o|--optimize-autoloader] [-a|--classmap-authoritative] [--apcu-autoloader] [--apcu-autoloader-prefix APCU-AUTOLOADER-PREFIX] [--ignore-platform-req IGNORE-PLATFORM-REQ] [--ignore-platform-reqs] [--prefer-stable] [--prefer-lowest] [-m|--minimal-changes] [--patch-only] [-i|--interactive] [--root-reqs] [--bump-after-update [BUMP-AFTER-UPDATE]] [--] [<packages>...]