Merge pull request #202 from alma/release/v2.6.0

Release v2.6.0

Author: Benjamin-Freoua-Alma

.github/workflows/aqua.yml

@@ -17,20 +17,20 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           show-progress: false
 
       - name: Authenticate to Google Cloud
         id: gcloud-auth
-        uses: google-github-actions/auth@v2
+        uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3.0.0
         with:
           token_format: access_token
           workload_identity_provider: projects/699052769907/locations/global/workloadIdentityPools/github-identity-pool-shared/providers/github-identity-provider-shared  # yamllint disable-line
           service_account: github-gar-alma-php-client@lyrical-carver-335213.iam.gserviceaccount.com
 
       - name: Authenticate to Artifact Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
         with:
           registry: europe-docker.pkg.dev
           username: oauth2accesstoken

.github/workflows/backport-pull-request.yml

@@ -17,7 +17,7 @@ jobs:
 
     steps:
 
-        - uses: actions/checkout@v4
+        - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
           with:
             ref: develop
 
@@ -28,7 +28,7 @@ jobs:
             git reset --hard main
 
         - name: Create Pull Request
-          uses: peter-evans/create-pull-request@v7
+          uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
           with:
             commit-message: 'chore: backport main to develop'
             title: Backport main to develop

.github/workflows/ci.yml

@@ -35,12 +35,12 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@ec406be512d7077f68eed36e63f4d91bc006edc4 # 2.35.4
         with:
           php-version: ${{ matrix.php }}
           tools: composer:v2

.github/workflows/hotfix-pull-request.yml

@@ -15,18 +15,18 @@ jobs:
 
     steps:
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           ref: main
 
       - name: Release drafter
-        uses: release-drafter/release-drafter@v6
+        uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 # v6.1.0
         id: release-drafter
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Update release draft
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           script: |
             const { owner, repo } = context.repo;
@@ -39,7 +39,7 @@ jobs:
             });
 
       - name: Update CHANGELOG.md file
-        uses: stefanzweifel/changelog-updater-action@v1
+        uses: stefanzweifel/changelog-updater-action@a938690fad7edf25368f37e43a1ed1b34303eb36 # v1.12.0
         with:
           latest-version: ${{ steps.release-drafter.outputs.tag_name }}
           release-notes: "### 🐛 Bug Fixes\n ${{ inputs.changelog-message }}\n"
@@ -49,7 +49,7 @@ jobs:
           ./scripts/update-files-with-release-version.sh ${{ steps.release-drafter.outputs.tag_name }}
 
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
         with:
           commit-message: 'chore: update version'
           title: Release ${{ steps.release-drafter.outputs.tag_name }}

.github/workflows/pr-labeler.yml

@@ -11,6 +11,6 @@ jobs:
 
     runs-on: ubuntu-24.04
     steps:
-      - uses: TimonVS/pr-labeler-action@v5
+      - uses: TimonVS/pr-labeler-action@f9c084306ce8b3f488a8f3ee1ccedc6da131d1af # v5
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release-publish.yml

@@ -15,7 +15,7 @@ jobs:
 
     steps:
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Install taskfile.dev
         uses: arduino/setup-task@v2
@@ -85,7 +85,7 @@ jobs:
             https://uploads.github.com/repos/${{ github.repository }}/releases/${{ steps.fetch-release-draft.outputs.id }}/assets?name=alma-php-client.zip
 
       - name: Publish Github release
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           # target_commitish is set to refs/heads/develop by release-drafter as we need to retrieve pull requests merged into develop
           # We need to override it to refs/heads/main to point to the last commit of main branch instead of develop branch
@@ -102,18 +102,18 @@ jobs:
             });
 
       - name: Format release notes for Slack
-        uses: LoveToKnow/slackify-markdown-action@v1.1.1
+        uses: LoveToKnow/slackify-markdown-action@698a1d4d0ff1794152a93c03ee8ca5e03a310d4e # v1.1.1
         id: slack-markdown-release-notes
         with:
           text: |
             New release of ${{ github.repository }}, **[${{ steps.fetch-release-draft.outputs.name }}](https://github.com/${{ github.repository }}/releases/tag/${{ steps.fetch-release-draft.outputs.name }})**:
 
             ${{ steps.fetch-release-draft.outputs.body }}
 
-            cc <@france.berut> <@khadija.cherif>
+            cc <@khadija.cherif>
 
       - name: Send changelog to Slack
-        uses: slackapi/slack-github-action@v2.0.0
+        uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # v2.1.1
         with:
           method: chat.postMessage
           token: ${{ secrets.SLACK_RELEASE_CHANGELOG_BOT_TOKEN }}

.github/workflows/release-pull-request.yml

@@ -10,7 +10,7 @@ jobs:
 
     steps:
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           ref: main
           persist-credentials: false
@@ -24,7 +24,7 @@ jobs:
           git reset --hard develop
 
       - name: Create release draft
-        uses: release-drafter/release-drafter@v6
+        uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 # v6.1.0
         id: release-drafter
         with:
           # release-drafter should be based on develop to get the correct content as pull requests are merged into develop
@@ -35,7 +35,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Update CHANGELOG.md
-        uses: stefanzweifel/changelog-updater-action@v1
+        uses: stefanzweifel/changelog-updater-action@a938690fad7edf25368f37e43a1ed1b34303eb36 # v1.12.0
         with:
           latest-version: ${{ steps.release-drafter.outputs.tag_name }}
           release-notes: ${{ steps.release-drafter.outputs.body }}
@@ -47,15 +47,15 @@ jobs:
       # If using default Github token, the created pull request won't trigger workflows with pull_request event
       # See https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#triggering-further-workflow-runs
       - name: Generate Github token to create PR
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
         id: github-token
         with:
           app-id: ${{ secrets.ALMA_CREATE_TEAM_PRS_APP_ID }}
           private-key: ${{ secrets.ALMA_CREATE_TEAM_PRS_APP_PEM }}
           repositories: alma-php-client
 
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
         with:
           token: ${{ steps.github-token.outputs.token }}
           commit-message: 'chore: update version'

CHANGELOG.md

@@ -1,5 +1,18 @@
 # CHANGELOG
 
+## v2.6.0 - 2025-09-18
+
+### Changes
+
+### 🚀 New Features
+
+- Add payment methods list in cms_feature (#200)
+- Add DataExports endpoints (#137)
+
+#### Contributors
+
+@Benjamin-Freoua-Alma, @Francois-Gomis, @alma-renovate-bot[bot], @carine-bonnafous, @joyet-simon, @martinfobian, @remi-zuffinetti, @webaaz, [alma-renovate-bot[bot]](https://github.com/apps/alma-renovate-bot) and [github-actions[bot]](https://github.com/apps/github-actions)
+
 ## v2.5.0 - 2025-01-30
 
 ### Changes
@@ -220,6 +233,7 @@
 
 
 
+  
   ```
 * Add fields and docs to the Payment entity
 * Add a Refund entity and extract refunds data within the Payment entity constructor

Taskfile.php.yml

@@ -2,7 +2,7 @@ version: 3
 
 vars:
   # Required variables
-  PHP_VERSION: '{{ .PHP_VERSION }}'
+  PHP_VERSION: '{{ .PHP_VERSION}}'
   PHPUNIT_VERSION: '{{ .PHPUNIT_VERSION  }}'
   # Defaulted variable
   COMPOSER_VERSION: '{{ .COMPOSER_VERSION | default "2" }}'

Taskfile.yml

@@ -87,31 +87,43 @@ tasks:
     cmds:
       - pre-commit install --hook-type pre-commit --hook-type commit-msg
 
+  lint:build:
+    desc: Build lint container (php-cs-fixer)
+    cmds:
+        - docker build -t lint:ps -f lint.Dockerfile .
+
   lint:
     desc: Lint the php code
     deps:
-      - 8.3:docker:build
+      - lint:build
     cmds:
       - docker compose run --rm -T php composer exec phpcs -- src/
 
   lint:fix:
     desc: Lint fix the php code
     deps:
-      - 8.3:docker:build
+      - lint:build
     cmds:
       - docker compose run --rm -T php composer exec phpcbf -- src/ tests/
 
+  php-compatibility:build:
+      desc: Build php-compatibility container (phpcs)
+      cmds:
+          - docker build -t php-compatibility:ps -f php-compatibility.Dockerfile .
+
   dist:
     desc: Build zip dist package using Docker
     deps:
-      - 8.3:docker:build
+      - php-compatibility:build
     cmds:
       - docker compose run --rm php ./scripts/build.sh
 
   php-compatibility:
     desc: Check compatibility code
+    deps:
+        - php-compatibility:build
     cmds:
-      - docker compose run --rm -T php composer exec phpcs -- -p src --standard=PHPCompatibility -s --runtime-set testVersion 5.6-8.1 --ignore=\*/vendor/\*
+      - docker compose run --rm -T php composer exec phpcs -- -p src --standard=PHPCompatibility -s --runtime-set testVersion 5.6-8.3 --ignore=\*/vendor/\*
 
   gh-cli:
     internal: true