ci: fix failing workflows

code-quality.yml — dependencies job:
- Add composer install --no-scripts before check-platform-reqs
  (check-platform-reqs fails without an installed vendor/ on libraries
  that do not commit composer.lock)
- Add Composer cache (keyed on composer.json since no lock file)
- Drop --no-dev flag on check-platform-reqs (dev deps are installed)

ci.yml — build-phar job:
- Remove wget humbug/box step (box replaced by bin/build-phar.php)
- Add --no-scripts to composer install
- Replace 'box compile --config=box.json' with
  'php -d phar.readonly=0 bin/build-phar.php'

Author: walmir-silva

.github/workflows/ci.yml

@@ -48,17 +48,11 @@ jobs:
           extensions: phar, zlib
           ini-values: phar.readonly=0
 
-      - name: Install humbug/box
-        run: |
-          wget -q -O box https://github.com/box-project/box/releases/latest/download/box.phar
-          chmod +x box
-          sudo mv box /usr/local/bin/box
-
       - name: Install dependencies
-        run: composer install --no-interaction --prefer-dist --optimize-autoloader
+        run: composer install --no-interaction --prefer-dist --optimize-autoloader --no-scripts
 
       - name: Compile PHAR
-        run: php -d phar.readonly=0 box compile --config=box.json
+        run: php -d phar.readonly=0 bin/build-phar.php
 
       - name: Verify PHAR
         run: |

.github/workflows/code-quality.yml

@@ -32,8 +32,22 @@ jobs:
       - name: Validate composer.json
         run: composer validate --strict --no-check-lock
 
+      - name: Get Composer cache directory
+        id: composer-cache
+        run: echo "dir=$(composer config cache-files-dir)" >> "$GITHUB_OUTPUT"
+
+      - name: Cache dependencies
+        uses: actions/cache@v4
+        with:
+          path: ${{ steps.composer-cache.outputs.dir }}
+          key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.json') }}
+          restore-keys: ${{ runner.os }}-composer-
+
+      - name: Install dependencies
+        run: composer install --prefer-dist --no-progress --no-scripts
+
       - name: Check platform requirements
-        run: composer check-platform-reqs --no-dev
+        run: composer check-platform-reqs
 
   # ============================================================================
   # SECURITY AUDIT