From b730be912e9aa4e322d7f1dfb771b63f37ec6dab Mon Sep 17 00:00:00 2001 From: Alexander Makarov Date: Fri, 3 Jul 2026 01:36:04 +0300 Subject: [PATCH 1/6] Run BC check on PHP 8.4 --- .github/dependabot.yml | 12 ++-------- .github/workflows/bc.yml | 5 ++++- .github/workflows/build.yml | 3 +++ .../workflows/composer-require-checker.yml | 3 +++ .github/workflows/mutation.yml | 3 +++ .github/workflows/rector.yml | 5 +++-- .github/workflows/static.yml | 3 +++ .github/workflows/zizmor.yml | 22 +++++++++++++++++++ composer.json | 2 +- 9 files changed, 44 insertions(+), 14 deletions(-) create mode 100644 .github/workflows/zizmor.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 64c8667..5fd269d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,10 +7,6 @@ updates: interval: "weekly" cooldown: default-days: 7 - groups: - github-actions: - patterns: - - "*" ignore: - dependency-name: "yiisoft/*" @@ -18,11 +14,7 @@ updates: - package-ecosystem: "composer" directory: "/" schedule: - interval: "daily" + interval: "daily" + versioning-strategy: increase-if-necessary cooldown: default-days: 7 - groups: - composer-dependencies: - patterns: - - "*" - versioning-strategy: increase-if-necessary diff --git a/.github/workflows/bc.yml b/.github/workflows/bc.yml index ba3e9ef..a7b1e31 100644 --- a/.github/workflows/bc.yml +++ b/.github/workflows/bc.yml @@ -4,6 +4,9 @@ on: name: backwards compatibility +permissions: + contents: read + jobs: roave_bc_check: uses: yiisoft/actions/.github/workflows/bc.yml@master @@ -11,4 +14,4 @@ jobs: os: >- ['ubuntu-latest'] php: >- - ['8.0'] + ['8.4'] diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 8708e8a..31e4711 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -21,6 +21,9 @@ on: name: build +permissions: + contents: read + jobs: phpunit: uses: yiisoft/actions/.github/workflows/phpunit.yml@master diff --git a/.github/workflows/composer-require-checker.yml b/.github/workflows/composer-require-checker.yml index 863e5fc..02f73a8 100644 --- a/.github/workflows/composer-require-checker.yml +++ b/.github/workflows/composer-require-checker.yml @@ -23,6 +23,9 @@ on: name: Composer require checker +permissions: + contents: read + jobs: composer-require-checker: uses: yiisoft/actions/.github/workflows/composer-require-checker.yml@master diff --git a/.github/workflows/mutation.yml b/.github/workflows/mutation.yml index c1aca98..8f193f6 100644 --- a/.github/workflows/mutation.yml +++ b/.github/workflows/mutation.yml @@ -19,6 +19,9 @@ on: name: mutation test +permissions: + contents: read + jobs: mutation: uses: yiisoft/actions/.github/workflows/roave-infection.yml@master diff --git a/.github/workflows/rector.yml b/.github/workflows/rector.yml index b5a5649..5fd2d0a 100644 --- a/.github/workflows/rector.yml +++ b/.github/workflows/rector.yml @@ -11,11 +11,12 @@ on: name: rector +permissions: + contents: read + jobs: rector: uses: yiisoft/actions/.github/workflows/rector.yml@master - secrets: - token: ${{ secrets.YIISOFT_GITHUB_TOKEN }} with: os: >- ['ubuntu-latest'] diff --git a/.github/workflows/static.yml b/.github/workflows/static.yml index b7d3200..14c06a2 100644 --- a/.github/workflows/static.yml +++ b/.github/workflows/static.yml @@ -21,6 +21,9 @@ on: name: static analysis +permissions: + contents: read + jobs: psalm: uses: yiisoft/actions/.github/workflows/psalm.yml@master diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml new file mode 100644 index 0000000..430255d --- /dev/null +++ b/.github/workflows/zizmor.yml @@ -0,0 +1,22 @@ +name: GitHub Actions Security Analysis with zizmor 🌈 + +on: + push: + branches: + - master + - main + paths: + - '.github/**.yml' + - '.github/**.yaml' + pull_request: + paths: + - '.github/**.yml' + - '.github/**.yaml' + +permissions: + actions: read # Required by zizmor when reading workflow metadata through the API. + contents: read # Required to read workflow files. + +jobs: + zizmor: + uses: yiisoft/actions/.github/workflows/zizmor.yml@master diff --git a/composer.json b/composer.json index 723e0d3..dbdddf1 100644 --- a/composer.json +++ b/composer.json @@ -36,7 +36,7 @@ }, "require-dev": { "maglnet/composer-require-checker": "^4.2", - "phpunit/phpunit": "^10.5", + "phpunit/phpunit": "^9.5", "rector/rector": "^1.0", "roave/infection-static-analysis-plugin": "^1.16", "spatie/phpunit-watcher": "^1.23", From 3cadc03c4df1335f2e0ce9423856450dcafbfccd Mon Sep 17 00:00:00 2001 From: Alexander Makarov Date: Fri, 3 Jul 2026 16:36:35 +0300 Subject: [PATCH 2/6] Adjust BC check PHP version --- .github/workflows/bc.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/bc.yml b/.github/workflows/bc.yml index a7b1e31..b6aa9f8 100644 --- a/.github/workflows/bc.yml +++ b/.github/workflows/bc.yml @@ -14,4 +14,4 @@ jobs: os: >- ['ubuntu-latest'] php: >- - ['8.4'] + ['8.1'] From 20a3e71b08dd06d3bc1fd15aa531eafcd1a4b27f Mon Sep 17 00:00:00 2001 From: Alexander Makarov Date: Mon, 6 Jul 2026 10:33:58 +0300 Subject: [PATCH 3/6] Run BC check on PHP 8.4 --- .github/workflows/bc.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/bc.yml b/.github/workflows/bc.yml index b6aa9f8..a7b1e31 100644 --- a/.github/workflows/bc.yml +++ b/.github/workflows/bc.yml @@ -14,4 +14,4 @@ jobs: os: >- ['ubuntu-latest'] php: >- - ['8.1'] + ['8.4'] From 81dad99aa2d56175dc2de4566c4c1187ca333049 Mon Sep 17 00:00:00 2001 From: Alexander Makarov Date: Mon, 6 Jul 2026 10:38:58 +0300 Subject: [PATCH 4/6] Ignore PHP platform for BC tool install --- .github/workflows/bc.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/bc.yml b/.github/workflows/bc.yml index a7b1e31..cdffea3 100644 --- a/.github/workflows/bc.yml +++ b/.github/workflows/bc.yml @@ -11,6 +11,7 @@ jobs: roave_bc_check: uses: yiisoft/actions/.github/workflows/bc.yml@master with: + composer-require-options: '--with-all-dependencies --ignore-platform-req=php --no-progress --ansi' os: >- ['ubuntu-latest'] php: >- From a888c0fc62ac5a2c1fe5a720aefd8686c0e13dac Mon Sep 17 00:00:00 2001 From: Alexander Makarov Date: Mon, 6 Jul 2026 10:50:20 +0300 Subject: [PATCH 5/6] Relax BC tool install platform checks --- .github/workflows/bc.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/bc.yml b/.github/workflows/bc.yml index cdffea3..0fb8013 100644 --- a/.github/workflows/bc.yml +++ b/.github/workflows/bc.yml @@ -11,7 +11,7 @@ jobs: roave_bc_check: uses: yiisoft/actions/.github/workflows/bc.yml@master with: - composer-require-options: '--with-all-dependencies --ignore-platform-req=php --no-progress --ansi' + composer-require-options: '--with-all-dependencies --ignore-platform-reqs --no-security-blocking --no-progress --ansi' os: >- ['ubuntu-latest'] php: >- From d3358c9e400c8a9896168d7cd06429e5f70efd2b Mon Sep 17 00:00:00 2001 From: Alexander Makarov Date: Mon, 6 Jul 2026 14:08:46 +0300 Subject: [PATCH 6/6] Remove unrelated dependency changes --- .github/dependabot.yml | 12 ++++++++++-- .github/workflows/bc.yml | 1 - composer.json | 2 +- 3 files changed, 11 insertions(+), 4 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5fd269d..64c8667 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,6 +7,10 @@ updates: interval: "weekly" cooldown: default-days: 7 + groups: + github-actions: + patterns: + - "*" ignore: - dependency-name: "yiisoft/*" @@ -14,7 +18,11 @@ updates: - package-ecosystem: "composer" directory: "/" schedule: - interval: "daily" - versioning-strategy: increase-if-necessary + interval: "daily" cooldown: default-days: 7 + groups: + composer-dependencies: + patterns: + - "*" + versioning-strategy: increase-if-necessary diff --git a/.github/workflows/bc.yml b/.github/workflows/bc.yml index 0fb8013..a7b1e31 100644 --- a/.github/workflows/bc.yml +++ b/.github/workflows/bc.yml @@ -11,7 +11,6 @@ jobs: roave_bc_check: uses: yiisoft/actions/.github/workflows/bc.yml@master with: - composer-require-options: '--with-all-dependencies --ignore-platform-reqs --no-security-blocking --no-progress --ansi' os: >- ['ubuntu-latest'] php: >- diff --git a/composer.json b/composer.json index dbdddf1..723e0d3 100644 --- a/composer.json +++ b/composer.json @@ -36,7 +36,7 @@ }, "require-dev": { "maglnet/composer-require-checker": "^4.2", - "phpunit/phpunit": "^9.5", + "phpunit/phpunit": "^10.5", "rector/rector": "^1.0", "roave/infection-static-analysis-plugin": "^1.16", "spatie/phpunit-watcher": "^1.23",