Update readme

Author: tangrufus

README.md

@@ -110,7 +110,7 @@ See [action.yml](action.yml) and the underlying script [`typisttech/php-matrix`]
 ## Examples
 
 <details open>
-  <summary>Run tests against all supported PHP minor versions.</summary>
+  <summary>Run tests against all supported PHP versions.</summary>
 
 ```yaml
 name: Test
@@ -124,7 +124,11 @@ jobs:
     outputs:
       versions: ${{ steps.php-matrix.outputs.versions }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
+        with:
+          sparse-checkout: composer.json
+          sparse-checkout-cone-mode: false
+
       - uses: typisttech/php-matrix-action@v2
         id: php-matrix
 
@@ -133,49 +137,80 @@ jobs:
     needs: php-matrix
     strategy:
       matrix:
-        php: ${{ fromJSON(needs.php-matrix.outputs.versions) }}
+        php-version: ${{ fromJSON(needs.php-matrix.outputs.versions) }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: ${{ matrix.php }}
+          php-version: ${{ matrix.php-version }}
       - run: composer install
       - run: composer test
 ```
 
 </details>
 
 <details>
-  <summary>Run `phpstan` with the lowest supported PHP minor version.</summary>
+  <summary>Run `$ composer audit` against all supported PHP versions.</summary>
 
 ```yaml
-name: PHPStan
+name: Composer Audit
 
 on:
   push:
 
 jobs:
-  phpstan:
+  php-matrix:
     runs-on: ubuntu-latest
+    outputs:
+      versions: ${{ steps.php-matrix.outputs.versions }}
+      highest: ${{ steps.php-matrix.outputs.highest }}
+      lowest: ${{ steps.php-matrix.outputs.lowest }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
+        with:
+          sparse-checkout: composer.json
+          sparse-checkout-cone-mode: false
 
       - uses: typisttech/php-matrix-action@v2
         id: php-matrix
 
-      - uses: shivammathur/setup-php@v2
+  composer-audit:
+    needs: php-matrix
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        php-version: ${{ fromJSON(needs.php-matrix.outputs.versions) }}
+        dependency-versions: [highest]
+        include:
+          - php-version: ${{ needs.php-matrix.outputs.lowest }}
+            dependency-versions: lowest
+          - php-version: ${{ needs.php-matrix.outputs.highest }}
+            dependency-versions: locked
+    env:
+      COMPOSER_NO_AUDIT: 1
+    steps:
+      - uses: actions/checkout@v5
         with:
-          php-version:  ${{ steps.php-matrix.outputs.lowest }}
+          sparse-checkout: |
+            composer.json
+            composer.lock
+          sparse-checkout-cone-mode: false
 
-      - run: composer install
+      - uses: shivammathur/setup-php@v2
+        with:
+          php-version: ${{ matrix.php-version }}
+          coverage: none
+      - uses: ramsey/composer-install@v3
+        with:
+          dependency-versions: ${{ matrix.dependency-versions }}
 
-      - run: vendor/bin/phpstan analyse src
+      - run: composer audit
 ```
 
 </details>
 
 <details>
-  <summary>Run tests with coverage.</summary>
+  <summary>Run tests with coverage on the highest supported PHP version.</summary>
 
 ```yaml
 name: Test
@@ -190,7 +225,7 @@ jobs:
       versions: ${{ steps.php-matrix.outputs.versions }}
       highest: ${{ steps.php-matrix.outputs.highest }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           sparse-checkout: composer.json
           sparse-checkout-cone-mode: false
@@ -203,34 +238,25 @@ jobs:
     needs: php-matrix
     strategy:
       matrix:
-        php: ${{ fromJSON(needs.php-matrix.outputs.versions) }}
-        dependency-versions: [lowest, highest]
+        php-version: ${{ fromJSON(needs.php-matrix.outputs.versions) }}
         coverage: [none]
         exclude:
-          - php: ${{ needs.php-matrix.outputs.highest }}
-            dependency-versions: highest
+          - php-version: ${{ needs.php-matrix.outputs.highest }}
             coverage: none
         include:
-          - php: ${{ needs.php-matrix.outputs.highest }}
-            dependency-versions: highest
+          - php-version: ${{ needs.php-matrix.outputs.highest }}
             coverage: xdebug
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: ${{ matrix.php }}
+          php-version: ${{ matrix.php-version }}
           coverage: ${{ matrix.coverage }}
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - uses: ramsey/composer-install@v3
-        with:
-          dependency-versions: ${{ matrix.dependency-versions }}
+      - run: composer install
 
       - run: composer test:with-coverage
         if: ${{ matrix.coverage == 'xdebug' }}
-
       - run: composer test:without-coverage
         if: ${{ matrix.coverage != 'xdebug' }}
 ```