Specify allowed plugins for Composer 2.2

[morozov]

Q	A
Type	improvement
BC Break	no

Without having plugins allowed in compose.json, Composer 2.2 and newer will ask if the user trusts the plugins:

$ composer update
dealerdirect/phpcodesniffer-composer-installer contains a Composer plugin which is currently not in your allow-plugins config. See https://getcomposer.org/allow-plugins
Do you trust "dealerdirect/phpcodesniffer-composer-installer" to execute code and wish to enable it now? (writes "allow-plugins" to composer.json) [y,n,d,?] y
composer/package-versions-deprecated contains a Composer plugin which is currently not in your allow-plugins config. See https://getcomposer.org/allow-plugins
Do you trust "composer/package-versions-deprecated" to execute code and wish to enable it now? (writes "allow-plugins" to composer.json) [y,n,d,?] y

[mvorisek]

I belive allow-plugin composer/package-versions-deprecated config is not needed in 3.3.x branch

[derrabus]

@mvorisek Psalm still installs this plugin.

[mvorisek]

@mvorisek Psalm still installs this plugin.

👍

since composer 2.2.5 not needed anywhere - composer/composer#10458

[stof]

since composer 2.2.5

not released yet, though