Skip to content
2 changes: 1 addition & 1 deletion .github/CONTRIBUTING.md
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@ Before submitting a pull request:

If the project maintainer has any additional requirements, you will find them listed here.

- **[PSR-2 Coding Standard](https://github.com/php-fig/fig-standards/blob/master/accepted/PSR-2-coding-style-guide.md)** - The easiest way to apply the conventions is to install [PHP Code Sniffer](https://pear.php.net/package/PHP_CodeSniffer).
- **[Laravel Pint](https://github.com/laravel/pint)** - PHP style is enforced with Pint (PSR-12–oriented, via PHP-CS-Fixer). Run `composer install`, then `./vendor/bin/pint` before pushing (`composer run format` instead if your package defines that script). The **Fix PHP code style issues** GitHub Action also runs on push and may commit formatting fixes.

- **Add tests!** - Your patch won't be accepted if it doesn't have tests.

Expand Down
40 changes: 33 additions & 7 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -1,12 +1,38 @@
# Please see the documentation for all configuration options:
# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates

version: 2
updates:

- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
labels:
- "dependencies"
interval: "daily"
ignore:
- dependency-name: "*"
update-types: [ "version-update:semver-major" ]
groups:
minor-and-patch:
update-types: [ "minor", "patch" ]

- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "daily"
allow:
- dependency-type: "direct"
ignore:
- dependency-name: "*"
update-types: [ "version-update:semver-major" ]
groups:
minor-and-patch:
update-types: [ "minor", "patch" ]

Comment on lines +14 to +26

Copilot AI Mar 20, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This adds an npm ecosystem config for the repository root (directory: "/"), but the repo doesn’t appear to contain a package.json / npm manifest at the root. This will cause Dependabot runs to error; either remove the npm entry or point it at the directory that actually contains the npm manifest (or add one if intended).

Suggested change
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "daily"
allow:
- dependency-type: "direct"
ignore:
- dependency-name: "*"
update-types: [ "version-update:semver-major" ]
groups:
minor-and-patch:
update-types: [ "minor", "patch" ]

Copilot uses AI. Check for mistakes.
- package-ecosystem: "composer"
directory: "/"
schedule:
interval: "daily"
allow:
- dependency-type: "direct"
ignore:
- dependency-name: "*"
update-types: [ "version-update:semver-major" ]
groups:
minor-and-patch:
update-types: [ "minor", "patch" ]
2 changes: 1 addition & 1 deletion .github/workflows/dependabot-auto-merge.yml
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ jobs:

- name: Dependabot metadata
id: metadata
uses: dependabot/fetch-metadata@v2.4.0
uses: dependabot/fetch-metadata@v2.5.0
with:
github-token: "${{ secrets.GITHUB_TOKEN }}"

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/dependency-review.yml
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,6 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: 'Checkout Repository'
uses: actions/checkout@v5
uses: actions/checkout@v6

Copilot AI Mar 20, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This workflow updates actions/checkout to @v6, but other workflows in this repo still use @v5. Consider standardizing on a single major version across workflows to reduce maintenance overhead and avoid subtle behavioral differences.

Suggested change
uses: actions/checkout@v6
uses: actions/checkout@v5

Copilot uses AI. Check for mistakes.
- name: 'Dependency Review'
uses: actions/dependency-review-action@v4
9 changes: 5 additions & 4 deletions .github/workflows/fix-php-code-style-issues.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,20 +2,21 @@ name: Fix PHP code style issues

on: [push]

permissions:
contents: write

jobs:
php-code-styling:
runs-on: ubuntu-latest

steps:
- name: Checkout code
uses: actions/checkout@v5
with:
ref: ${{ github.head_ref }}
uses: actions/checkout@v6.0.2

Copilot AI Mar 20, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

actions/checkout is bumped here to v6.0.2, while the rest of the repo’s workflows still use actions/checkout@v5. Mixing major versions makes maintenance harder; consider updating all workflows to the same major, or keep this at @v5 for consistency.

Suggested change
uses: actions/checkout@v6.0.2
uses: actions/checkout@v5

Copilot uses AI. Check for mistakes.

- name: Fix PHP code style issues
uses: aglipanci/laravel-pint-action@2.6

- name: Commit changes
uses: stefanzweifel/git-auto-commit-action@v7
uses: stefanzweifel/git-auto-commit-action@v6.0.1

Copilot AI Mar 20, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This changes stefanzweifel/git-auto-commit-action from @v7 to @v6.0.1 (a major-version downgrade). If the goal is dependency maintenance, consider staying on the latest supported major (or document why a downgrade is required) to avoid missing fixes/features from v7.

Suggested change
uses: stefanzweifel/git-auto-commit-action@v6.0.1
uses: stefanzweifel/git-auto-commit-action@v7

Copilot uses AI. Check for mistakes.
with:
commit_message: Fix styling
Loading