build(deps-dev): bump the development-dependencies group with 3 updat… #49
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: CI | |
| on: # yamllint disable-line rule:truthy | |
| push: | |
| branches: ['**'] | |
| paths-ignore: | |
| - '**.md' | |
| pull_request: | |
| branches: [master, simplesamlphp-*] | |
| paths-ignore: | |
| - '**.md' | |
| workflow_dispatch: | |
| jobs: | |
| phplinter: | |
| name: 'PHP-Linter' | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| php-version: ['8.2', '8.3', '8.4'] | |
| uses: simplesamlphp/simplesamlphp-test-framework/.github/workflows/[email protected] | |
| with: | |
| php-version: ${{ matrix.php-version }} | |
| linter: | |
| name: 'Linter' | |
| strategy: | |
| fail-fast: false | |
| uses: simplesamlphp/simplesamlphp-test-framework/.github/workflows/[email protected] | |
| with: | |
| enable_eslinter: true | |
| enable_jsonlinter: true | |
| enable_stylelinter: true | |
| enable_yamllinter: true | |
| unit-tests-linux: | |
| name: "Syntax and unit tests, PHP ${{ matrix.php-versions }}, ${{ matrix.operating-system }}" | |
| runs-on: ${{ matrix.operating-system }} | |
| needs: [phplinter, linter] | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| operating-system: [ubuntu-latest] | |
| php-versions: ['8.2', '8.3', '8.4'] | |
| steps: | |
| - name: Setup PHP, with composer and extensions | |
| # https://github.com/shivammathur/setup-php | |
| uses: shivammathur/setup-php@v2 | |
| with: | |
| php-version: ${{ matrix.php-versions }} | |
| extensions: intl, mbstring, mysql, pdo, pdo_sqlite, soap, xml | |
| tools: composer:v2 | |
| ini-values: error_reporting=E_ALL | |
| coverage: xdebug | |
| - name: Setup problem matchers for PHP | |
| run: echo "::add-matcher::${{ runner.tool_cache }}/php.json" | |
| - name: Setup problem matchers for PHPUnit | |
| run: echo "::add-matcher::${{ runner.tool_cache }}/phpunit.json" | |
| - name: Set git to use LF | |
| run: | | |
| git config --global core.autocrlf false | |
| git config --global core.eol lf | |
| - uses: actions/checkout@v4 | |
| - name: Copy config.php.dist to config.php | |
| run: cp config/config.php.dist config/config.php | |
| - name: Create SimpleSAMLphp cache directory | |
| run: sudo mkdir -p /var/cache/simplesamlphp && sudo chmod 777 /var/cache/simplesamlphp | |
| - name: Get composer cache directory | |
| run: echo COMPOSER_CACHE="$(composer config cache-files-dir)" >> "$GITHUB_ENV" | |
| - name: Cache composer dependencies | |
| uses: actions/cache@v4 | |
| with: | |
| path: $COMPOSER_CACHE | |
| key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }} | |
| restore-keys: ${{ runner.os }}-composer- | |
| - name: Install Composer dependencies | |
| run: composer install --no-progress --prefer-dist --optimize-autoloader | |
| - name: Run unit tests with coverage | |
| if: ${{ matrix.php-versions == '8.2' }} | |
| run: ./vendor/bin/phpunit | |
| - name: Run unit tests (no coverage) | |
| if: ${{ matrix.php-versions != '8.2' }} | |
| run: ./vendor/bin/phpunit --no-coverage | |
| - name: Save coverage data | |
| if: ${{ matrix.php-versions == '8.2' }} | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: coverage-data | |
| path: ${{ github.workspace }}/build | |
| unit-tests-windows: | |
| name: "Syntax and unit tests, PHP ${{ matrix.php-versions }}, ${{ matrix.operating-system }}" | |
| runs-on: ${{ matrix.operating-system }} | |
| needs: [phplinter, linter] | |
| strategy: | |
| fail-fast: true | |
| matrix: | |
| operating-system: [windows-latest] | |
| php-versions: ['8.2', '8.3', '8.4'] | |
| steps: | |
| - name: Setup PHP, with composer and extensions | |
| # https://github.com/shivammathur/setup-php | |
| uses: shivammathur/setup-php@v2 | |
| with: | |
| php-version: ${{ matrix.php-versions }} | |
| extensions: intl, mbstring, mysql, pdo, pdo_sqlite, soap, xml | |
| tools: composer:v2 | |
| ini-values: error_reporting=E_ALL | |
| coverage: none | |
| - name: Setup problem matchers for PHP | |
| run: echo "::add-matcher::${{ runner.tool_cache }}/php.json" | |
| - name: Setup problem matchers for PHPUnit | |
| run: echo "::add-matcher::${{ runner.tool_cache }}/phpunit.json" | |
| - name: Set git to use LF | |
| run: | | |
| git config --global core.autocrlf false | |
| git config --global core.eol lf | |
| - uses: actions/checkout@v4 | |
| - name: Get composer cache directory | |
| run: echo COMPOSER_CACHE="$(composer config cache-files-dir)" >> "$env:GITHUB_ENV" | |
| - name: Cache composer dependencies | |
| uses: actions/cache@v4 | |
| with: | |
| path: $COMPOSER_CACHE | |
| key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }} | |
| restore-keys: ${{ runner.os }}-composer- | |
| - name: Install Composer dependencies | |
| run: composer install --no-progress --prefer-dist --optimize-autoloader --no-scripts | |
| - name: Run unit tests | |
| run: ./vendor/bin/phpunit --no-coverage | |
| quality: | |
| name: Quality control | |
| needs: [unit-tests-linux] | |
| runs-on: [ubuntu-latest] | |
| steps: | |
| - name: Setup PHP, with composer and extensions | |
| id: setup-php | |
| # https://github.com/shivammathur/setup-php | |
| uses: shivammathur/setup-php@v2 | |
| with: | |
| # Should be the higest supported version, so we can use the newest tools | |
| php-version: '8.3' | |
| tools: composer, composer-require-checker, composer-unused, phpcs, psalm | |
| # optional performance gain for psalm: opcache | |
| extensions: ctype, date, dom, fileinfo, filter, hash, json, mbstring, mysql, \ | |
| opcache, openssl, pcre, pdo, pdo_sqlite, posix, soap, spl, xml | |
| coverage: none | |
| - name: Setup problem matchers for PHP | |
| run: echo "::add-matcher::${{ runner.tool_cache }}/php.json" | |
| - uses: actions/checkout@v4 | |
| - name: Copy config.php.dist to config.php | |
| run: cp config/config.php.dist config/config.php | |
| - name: Create SimpleSAMLphp cache directory | |
| run: sudo mkdir -p /var/cache/simplesamlphp && sudo chmod 777 /var/cache/simplesamlphp | |
| - name: Get composer cache directory | |
| run: echo COMPOSER_CACHE="$(composer config cache-files-dir)" >> "$GITHUB_ENV" | |
| - name: Cache composer dependencies | |
| uses: actions/cache@v4 | |
| with: | |
| path: $COMPOSER_CACHE | |
| key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }} | |
| restore-keys: ${{ runner.os }}-composer- | |
| - name: Validate composer.json and composer.lock | |
| run: composer validate | |
| - name: Install Composer dependencies | |
| run: composer install --no-progress --prefer-dist --optimize-autoloader | |
| - name: Check code for hard dependencies missing in composer.json | |
| continue-on-error: true | |
| run: composer-require-checker check --config-file tools/composer-require-checker.json composer.json | |
| - name: Check code for unused dependencies in composer.json | |
| run: | | |
| # symfony/yaml is required by Symfony routing to parse yml routing files | |
| composer-unused \ | |
| --excludePackage=simplesamlphp/simplesamlphp-assets-base \ | |
| --excludePackage=symfony/polyfill-intl-icu \ | |
| --excludePackage=symfony/yaml | |
| - name: PHP Code Sniffer | |
| run: phpcs | |
| - name: Psalm | |
| continue-on-error: true | |
| run: | | |
| psalm -c psalm.xml \ | |
| --show-info=true \ | |
| --shepherd \ | |
| --php-version=${{ steps.setup-php.outputs.php-version }} | |
| - name: Psalm (testsuite) | |
| continue-on-error: true | |
| run: | | |
| psalm -c psalm-dev.xml \ | |
| --show-info=true \ | |
| --shepherd \ | |
| --php-version=${{ steps.setup-php.outputs.php-version }} | |
| - name: Psalter | |
| run: | | |
| psalm --alter \ | |
| --issues=UnnecessaryVarAnnotation \ | |
| --dry-run \ | |
| --php-version=${{ steps.setup-php.outputs.php-version }} | |
| - name: Check for unused translations | |
| continue-on-error: true | |
| run: composer translations:unused | |
| security: | |
| name: Security checks | |
| needs: [unit-tests-linux] | |
| runs-on: [ubuntu-latest] | |
| steps: | |
| - name: Setup PHP, with composer and extensions | |
| # https://github.com/shivammathur/setup-php | |
| uses: shivammathur/setup-php@v2 | |
| with: | |
| # Should be the lowest supported version | |
| php-version: '8.2' | |
| extensions: mbstring, soap, xml | |
| tools: composer:v2 | |
| coverage: none | |
| - name: Setup problem matchers for PHP | |
| run: echo "::add-matcher::${{ runner.tool_cache }}/php.json" | |
| - uses: actions/checkout@v4 | |
| - name: Copy config.php.dist to config.php | |
| run: cp config/config.php.dist config/config.php | |
| - name: Create SimpleSAMLphp cache directory | |
| run: sudo mkdir -p /var/cache/simplesamlphp && sudo chmod 777 /var/cache/simplesamlphp | |
| - name: Get composer cache directory | |
| run: echo COMPOSER_CACHE="$(composer config cache-files-dir)" >> "$GITHUB_ENV" | |
| - name: Cache composer dependencies | |
| uses: actions/cache@v4 | |
| with: | |
| path: $COMPOSER_CACHE | |
| key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }} | |
| restore-keys: ${{ runner.os }}-composer- | |
| - name: Install Composer dependencies | |
| run: composer install --no-progress --prefer-dist --optimize-autoloader | |
| - name: Security check for locked dependencies | |
| run: composer audit | |
| - name: Update Composer dependencies | |
| run: composer update --no-progress --prefer-dist --optimize-autoloader | |
| - name: Security check for updated dependencies | |
| run: composer audit | |
| coverage: | |
| name: Code coverage | |
| runs-on: [ubuntu-latest] | |
| needs: [unit-tests-linux] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/download-artifact@v4 | |
| with: | |
| name: coverage-data | |
| path: ${{ github.workspace }}/build | |
| - name: Codecov | |
| uses: codecov/codecov-action@v5 | |
| with: | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| fail_ci_if_error: true | |
| verbose: true | |
| cleanup: | |
| name: Cleanup artifacts | |
| needs: [unit-tests-linux, coverage] | |
| runs-on: [ubuntu-latest] | |
| if: | | |
| always() && | |
| needs.coverage.result == 'success' || | |
| (needs.unit-tests-linux.result == 'success' && needs.coverage.result == 'skipped') | |
| steps: | |
| - uses: geekyeggo/delete-artifact@v5 | |
| with: | |
| name: coverage-data |