Don't list contrib packages in symfony.lock when not applied

Author: GromNaN

src/Flex.php

@@ -420,6 +420,8 @@ function ($value) {
                     'n'
                 );
                 if ('n' === $answer) {
+                    // Remove the recipe from the lock to allow re-asking next time
+                    $this->lock->remove($recipe->getName());
                     continue;
                 }
                 if ('a' === $answer) {

tests/FlexTest.php

@@ -44,6 +44,11 @@
 
 class FlexTest extends TestCase
 {
+    public function tearDown(): void
+    {
+        @unlink(__DIR__.'/Fixtures/symfony.lock');
+    }
+
     public function testPostInstall()
     {
         $data = [
@@ -124,6 +129,56 @@ public function testActivateLoadsClasses()
         $this->assertTrue(class_exists(Response::class, false));
     }
 
+    public function testContribRecipeNotApprovedIsRemovedFromLock()
+    {
+        $data = [
+            'manifests' => [
+                'contrib/package' => [
+                    'manifest' => [
+                        'bundles' => [
+                            'Contrib\\Package\\ContribBundle' => ['all'],
+                        ],
+                    ],
+                    'origin' => 'contrib/package:1.0@github.com/symfony/recipes-contrib:main',
+                    'is_contrib' => true,
+                ],
+            ],
+            'locks' => [
+                'contrib/package' => [
+                    'recipe' => [
+                        'repo' => 'github.com/symfony/recipes-contrib',
+                        'version' => '1.0',
+                    ],
+                    'version' => '1.0.0',
+                ],
+            ],
+        ];
+
+        // Non-interactive mode with allow-contrib disabled (BufferIO is non-interactive by default)
+        $io = new BufferIO('', OutputInterface::VERBOSITY_VERBOSE);
+
+        $package = new Package('contrib/package', '1.0.0', '1.0.0');
+        $rootPackage = $this->mockRootPackage([]); // no allow-contrib
+
+        $downloader = $this->mockDownloader($data);
+        $configurator = $this->getMockBuilder(Configurator::class)->disableOriginalConstructor()->getMock();
+        // Recipe should NOT be installed
+        $configurator->expects($this->never())->method('install');
+
+        $lock = new Lock(__DIR__.'/Fixtures/symfony.lock');
+        $composer = $this->mockComposer($this->mockLocker(), $rootPackage);
+        $flex = $this->mockFlexCustom($io, $composer, $configurator, $downloader, $lock);
+
+        $flex->record($this->mockPackageEvent($package));
+        $flex->install($this->mockFlexEvent());
+        $this->assertFalse($lock->has('contrib/package'), 'Recipe lock entry has been removed');
+
+        // Verify the warning message was displayed
+        $output = $io->getOutput();
+        $this->assertStringContainsString('IGNORING', $output);
+        $this->assertStringContainsString('contrib/package', $output);
+    }
+
     /**
      * @dataProvider getPackagesForAutoDiscovery
      */