Refactor build & release process

Author: tvdijen

.gitattributes

@@ -1,2 +1,3 @@
 lib/.gitkeep export-ignore
 bin/ export-ignore
+composer.lock

.github/workflows/build-release.yml

@@ -14,11 +14,7 @@ jobs:
     runs-on: [ubuntu-latest]
 
     steps:
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 20
-
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           token: ${{ secrets.SAMLTRACER_BUILD_TOKEN }}
           ref: ${{ github.head_ref || github.ref_name }}
@@ -29,15 +25,56 @@ jobs:
         # Without fetching, we might miss new tags due to caching in Github Actions
         run: git fetch --all
 
-      - name: Run build-script
-        run: bin/build.sh
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 24
+
+      - name: Install & build assets
+        run: |
+          # Make sure the lock-file is up to date before we run clean-install
+          npm install --package-lock-only
+          npm clean-install
+          npm audit fix
 
       # Store the version, stripping any v-prefix
       - name: Write release version
         run: |
           TAG="${{ github.ref_name }}"
           echo "VERSION=${TAG#v}" >> "$GITHUB_ENV"
 
+      - name: Setup PHP, with composer and extensions
+        id: setup-php
+        # https://github.com/shivammathur/setup-php
+        uses: shivammathur/setup-php@v2
+        with:
+          # Should match the minimum required version for SimpleSAMLphp
+          php-version: '8.5'
+          tools: composer:v2
+          coverage: none
+
+      - name: Validate composer.json and composer.lock
+        run: composer validate
+
+      - name: Install Composer dependencies
+        run: composer install --no-progress --no-dev --prefer-dist --optimize-autoloader
+
+      - name: Copy third-party dependencies to lib/ directory
+        run: |
+          cp vendor/fredericpetit/highlightjs-composer/assets/js/highlight.min.js lib/highlight.min.js
+          cp node_modules/pako/dist/browser/pako_inflate.esm.min.mjs lib/pako_inflate.min.js
+
+      - name: Clean release
+        run: |
+          grep export-ignore .gitattributes | cut -d ' ' -f 1 | while IFS= read -r line
+          do
+            rm -rf "$line"
+          done
+          rm -rf .git
+
+      - name: Build zip-file
+        run: |
+          zip -1 -r /tmp/samltracer.zip *
+
       - name: Save release
         uses: actions/upload-artifact@v4
         with:

.gitignore

@@ -1,2 +1,4 @@
 lib/*.js
 node_modules/
+vendor/
+composer.lock

bin/build.sh

@@ -0,0 +1,5 @@
+{
+    "require": {
+        "fredericpetit/highlightjs-composer": "^11.11"
+    }
+}