From 65a71ff13b89cbbf9daea011cd886dac1c3b39ce Mon Sep 17 00:00:00 2001
From: Walmir Silva <growthcodeoficial@gmail.com>
Date: Mon, 2 Mar 2026 10:09:55 -0300
Subject: [PATCH] ci: fix failing workflows
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

code-quality.yml — dependencies job:
- Add composer install --no-scripts before check-platform-reqs
  (check-platform-reqs fails without an installed vendor/ on libraries
  that do not commit composer.lock)
- Add Composer cache (keyed on composer.json since no lock file)
- Drop --no-dev flag on check-platform-reqs (dev deps are installed)

ci.yml — build-phar job:
- Remove wget humbug/box step (box replaced by bin/build-phar.php)
- Add --no-scripts to composer install
- Replace 'box compile --config=box.json' with
  'php -d phar.readonly=0 bin/build-phar.php'
---
 .github/workflows/ci.yml           | 10 ++--------
 .github/workflows/code-quality.yml | 16 +++++++++++++++-
 2 files changed, 17 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4e23927..ad36480 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -48,17 +48,11 @@ jobs:
           extensions: phar, zlib
           ini-values: phar.readonly=0
 
-      - name: Install humbug/box
-        run: |
-          wget -q -O box https://github.com/box-project/box/releases/latest/download/box.phar
-          chmod +x box
-          sudo mv box /usr/local/bin/box
-
       - name: Install dependencies
-        run: composer install --no-interaction --prefer-dist --optimize-autoloader
+        run: composer install --no-interaction --prefer-dist --optimize-autoloader --no-scripts
 
       - name: Compile PHAR
-        run: php -d phar.readonly=0 box compile --config=box.json
+        run: php -d phar.readonly=0 bin/build-phar.php
 
       - name: Verify PHAR
         run: |
diff --git a/.github/workflows/code-quality.yml b/.github/workflows/code-quality.yml
index b4f0464..8f81298 100644
--- a/.github/workflows/code-quality.yml
+++ b/.github/workflows/code-quality.yml
@@ -32,8 +32,22 @@ jobs:
       - name: Validate composer.json
         run: composer validate --strict --no-check-lock
 
+      - name: Get Composer cache directory
+        id: composer-cache
+        run: echo "dir=$(composer config cache-files-dir)" >> "$GITHUB_OUTPUT"
+
+      - name: Cache dependencies
+        uses: actions/cache@v4
+        with:
+          path: ${{ steps.composer-cache.outputs.dir }}
+          key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.json') }}
+          restore-keys: ${{ runner.os }}-composer-
+
+      - name: Install dependencies
+        run: composer install --prefer-dist --no-progress --no-scripts
+
       - name: Check platform requirements
-        run: composer check-platform-reqs --no-dev
+        run: composer check-platform-reqs
 
   # ============================================================================
   # SECURITY AUDIT