chore(deps): update symfony packages to v7.4.15

2026-07-29 12:02:32 +00:00
6 changed files with 54 additions and 203 deletions
@@ -70,6 +70,17 @@ jobs:
          username: ${{ gitea.actor }}
          password: ${{ secrets.REGISTRY_TOKEN }}

+      # Build a single-arch image locally so Trivy can inspect it before the real push.
+      - name: Build local image for scanning
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          target: final
+          platforms: linux/amd64
+          load: true
+          tags: scan-target:${{ inputs.tag }}
+          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ gitea.repository }}:buildcache
+
      - name: Build and push
        uses: docker/build-push-action@v5
        with:
@@ -1,62 +0,0 @@
-# Cuts a release: moves CHANGELOG.md's [Unreleased] section under a new
-# version heading, commits it to main, then creates and pushes the version tag.
-# Trigger manually via workflow_dispatch, entering the semver to release.
-# The pushed tag can then be built with docker-publish.yml.
-
-name: Create Release Tag
-
-on:
-  workflow_dispatch:
-    inputs:
-      version:
-        description: "Version to release (semver, e.g. 1.2.3)"
-        required: true
-        type: string
-
-jobs:
-  tag:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-          token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Validate version and Unreleased section
-        run: |
-          if ! [[ "${{ inputs.version }}" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
-            echo "Error: '${{ inputs.version }}' is not a valid semver (e.g. 1.2.3)."
-            exit 1
-          fi
-          if git rev-parse "refs/tags/${{ inputs.version }}" >/dev/null 2>&1; then
-            echo "Error: tag '${{ inputs.version }}' already exists."
-            exit 1
-          fi
-          awk '/^## \[Unreleased\]/{f=1;next}/^## \[/{f=0}f' CHANGELOG.md > /tmp/unreleased.md
-          if ! grep -q '[^[:space:]]' /tmp/unreleased.md; then
-            echo "Error: CHANGELOG.md's [Unreleased] section is empty — nothing to release."
-            exit 1
-          fi
-
-      - name: Move Unreleased entries under the new version heading
-        run: |
-          today=$(date +%Y-%m-%d)
-          awk -v ver="${{ inputs.version }}" -v date="$today" '
-            /^## \[Unreleased\]/ { print; print ""; print "## [" ver "] - " date; next }
-            { print }
-          ' CHANGELOG.md > /tmp/CHANGELOG.md
-          mv /tmp/CHANGELOG.md CHANGELOG.md
-
-      - name: Commit and tag
-        run: |
-          git config user.name "gitea-actions"
-          git config user.email "actions@noreply.git.arthurerlich.de"
-          git add CHANGELOG.md
-          git commit -m "chore(release): ${{ inputs.version }}"
-          git tag "${{ inputs.version }}"
-          git push origin HEAD:main
-          git push origin "${{ inputs.version }}"
@@ -1,78 +0,0 @@
-name: Tests
-
-on:
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
-
-env:
-  REGISTRY: git.arthurerlich.de
-
-jobs:
-  build-dev:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Log in to Gitea registry
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ gitea.actor }}
-          password: ${{ secrets.REGISTRY_TOKEN }}
-
-      - name: Build dev image (PHP 8.4 + composer deps)
-        uses: docker/build-push-action@v5
-        with:
-          context: .
-          file: Dockerfile.dev
-          target: dev
-          load: true
-          tags: graph-dev:ci
-          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ gitea.repository }}:buildcache-dev
-          cache-to: type=registry,ref=${{ env.REGISTRY }}/${{ gitea.repository }}:buildcache-dev,mode=max
-
-      - name: Run tests in dev image
-        run: |
-          cid=$(docker create graph-dev:ci sh -c "
-            composer install --no-interaction &&
-            vendor/bin/phpunit --testdox &&
-            composer phpstan
-          ")
-          docker cp . "$cid":/app
-          rc=0
-          docker start -a "$cid" || rc=$?
-          docker rm "$cid" > /dev/null
-          exit $rc
-
-  build-prod:
-    needs: build-dev
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Log in to Gitea registry
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ gitea.actor }}
-          password: ${{ secrets.REGISTRY_TOKEN }}
-
-      - name: Build prod image (final target)
-        uses: docker/build-push-action@v5
-        with:
-          context: .
-          file: Dockerfile
-          target: final
-          push: false
-          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ gitea.repository }}:buildcache-prod
-          cache-to: type=registry,ref=${{ env.REGISTRY }}/${{ gitea.repository }}:buildcache-prod,mode=max
@@ -7,10 +7,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

 ## [Unreleased]

-### Fixed
-
- Removed a leftover `composer dump-env prod` call in the prod Docker build stage — the command doesn't exist in this project's Composer setup and broke every image build
-
 ## [0.2.0] - 2026-07-12

 ### Added
@@ -138,29 +138,12 @@ Workflow files live in [.gitea/workflows/](.gitea/workflows/). This project uses
 - Secrets are set under Repository → Settings → Secrets → Actions
 - The registry hostname must be derived from `gitea.server_url` (strip the protocol prefix)
 - Triggers use standard `on:` syntax; `tags: '*.*.*'` matches semver pushes without a `v` prefix
- Do not use `cache-from/cache-to: type=gha` — on this instance's act_runner (v2.0.0), the internal GitHub Actions-cache-compatible proxy is not reachable from job containers (`dial tcp <ip>:<port>: i/o timeout`), a known act_runner docker-executor networking limitation, not a workflow bug. Use `type=registry` instead (push cache blobs to `${{ env.REGISTRY }}/<repo>:buildcache*` — see both `test.yml` and `docker-publish.yml`); it requires a registry login step even for jobs that don't push the final image.

 **Current workflows:**

 | File                 | Trigger          | Purpose                                                   |
 | -------------------- | ---------------- | --------------------------------------------------------- |
 | `docker-publish.yml` | Push tag `*.*.*` | Build & push multi-arch image to Gitea container registry |
-| `test.yml`           | Push/PR to `main`| Build dev+prod images, run PHPUnit and PHPStan            |
-
-### Release testing with `act`
-
-Before tagging a release (anything that would trigger `docker-publish.yml`), run `test.yml` locally with [`act`](https://github.com/nektos/act) to catch pipeline failures before pushing. `test.yml` uses plain GitHub Actions syntax (no `gitea.*` contexts), so it runs under `act` unmodified.
-
-```bash
-act -j test \
-  -P ubuntu-latest=catthehacker/ubuntu:act-latest \
-  --artifact-server-path /tmp/act-artifacts
-```
-
- `-P ubuntu-latest=catthehacker/ubuntu:act-latest` — default act runner image lacks a Docker CLI, which the `test` job needs for its nested `docker run` steps
- `--artifact-server-path` — required for the `upload-artifact`/`download-artifact` steps to work; without it they silently no-op
-
-**If `act` is not installed:** warn the user it's missing and how to install it (`sudo pacman -S act`, or see the repo above) — do not install it yourself or force the check. `docker-publish.yml` is out of scope for `act` (it needs real `gitea.*` context and a live registry secret); don't try to run it locally.

 ## Docker

@@ -313,16 +313,16 @@
        },
        {
            "name": "symfony/cache",
-            "version": "v7.4.17",
+            "version": "v7.4.15",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/cache.git",
-                "reference": "f6028442dd1dfa4f88e9c7360d753948d165e938"
+                "reference": "c1e7abe8e8c9b315d6d8b86446ffd9cf73679303"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/cache/zipball/f6028442dd1dfa4f88e9c7360d753948d165e938",
-                "reference": "f6028442dd1dfa4f88e9c7360d753948d165e938",
+                "url": "https://api.github.com/repos/symfony/cache/zipball/c1e7abe8e8c9b315d6d8b86446ffd9cf73679303",
+                "reference": "c1e7abe8e8c9b315d6d8b86446ffd9cf73679303",
                "shasum": ""
            },
            "require": {
@@ -336,6 +336,7 @@
            },
            "conflict": {
                "doctrine/dbal": "<3.6",
+                "ext-redis": "<6.1",
                "ext-relay": "<0.12.1",
                "symfony/dependency-injection": "<6.4",
                "symfony/http-kernel": "<6.4",
@@ -347,7 +348,7 @@
                "symfony/cache-implementation": "1.1|2.0|3.0"
            },
            "require-dev": {
-                "cache/integration-tests": "^1.0.3",
+                "cache/integration-tests": "dev-master",
                "doctrine/dbal": "^3.6|^4",
                "predis/predis": "^1.1|^2.0",
                "psr/simple-cache": "^1.0|^2.0|^3.0",
@@ -392,7 +393,7 @@
                "psr6"
            ],
            "support": {
-                "source": "https://github.com/symfony/cache/tree/v7.4.17"
+                "source": "https://github.com/symfony/cache/tree/v7.4.15"
            },
            "funding": [
                {
@@ -412,7 +413,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-08-19T08:28:05+00:00"
+            "time": "2026-07-29T04:03:42+00:00"
        },
        {
            "name": "symfony/cache-contracts",
@@ -575,16 +576,16 @@
        },
        {
            "name": "symfony/console",
-            "version": "v7.4.17",
+            "version": "v7.4.15",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/console.git",
-                "reference": "962e18f09ebe68a49039b4c82fc0ea4871824fca"
+                "reference": "088ec6fe0ef6819cbc301174093b6bfa4ad26930"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/console/zipball/962e18f09ebe68a49039b4c82fc0ea4871824fca",
-                "reference": "962e18f09ebe68a49039b4c82fc0ea4871824fca",
+                "url": "https://api.github.com/repos/symfony/console/zipball/088ec6fe0ef6819cbc301174093b6bfa4ad26930",
+                "reference": "088ec6fe0ef6819cbc301174093b6bfa4ad26930",
                "shasum": ""
            },
            "require": {
@@ -649,7 +650,7 @@
                "terminal"
            ],
            "support": {
-                "source": "https://github.com/symfony/console/tree/v7.4.17"
+                "source": "https://github.com/symfony/console/tree/v7.4.15"
            },
            "funding": [
                {
@@ -669,7 +670,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-08-21T12:09:28+00:00"
+            "time": "2026-07-27T13:51:00+00:00"
        },
        {
            "name": "symfony/dependency-injection",
@@ -1210,16 +1211,16 @@
        },
        {
            "name": "symfony/framework-bundle",
-            "version": "v7.4.17",
+            "version": "v7.4.15",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/framework-bundle.git",
-                "reference": "c7f3c14c51fccba466761e8c0e7dafe4335acc16"
+                "reference": "a430728797dda13ec60add8afd18e3fea50f5e93"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/framework-bundle/zipball/c7f3c14c51fccba466761e8c0e7dafe4335acc16",
-                "reference": "c7f3c14c51fccba466761e8c0e7dafe4335acc16",
+                "url": "https://api.github.com/repos/symfony/framework-bundle/zipball/a430728797dda13ec60add8afd18e3fea50f5e93",
+                "reference": "a430728797dda13ec60add8afd18e3fea50f5e93",
                "shasum": ""
            },
            "require": {
@@ -1253,7 +1254,7 @@
                "symfony/form": "<7.4",
                "symfony/http-client": "<6.4",
                "symfony/lock": "<6.4",
-                "symfony/mailer": "<6.4.44|>=7.0,<7.4.17|>=8.0,<8.1.5",
+                "symfony/mailer": "<6.4",
                "symfony/messenger": "<7.4",
                "symfony/mime": "<6.4.37|>=7.0,<7.4.9|>=8.0,<8.0.9",
                "symfony/property-access": "<6.4",
@@ -1344,7 +1345,7 @@
            "description": "Provides a tight integration between Symfony components and the Symfony full-stack framework",
            "homepage": "https://symfony.com",
            "support": {
-                "source": "https://github.com/symfony/framework-bundle/tree/v7.4.17"
+                "source": "https://github.com/symfony/framework-bundle/tree/v7.4.15"
            },
            "funding": [
                {
@@ -1364,20 +1365,20 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-08-21T19:38:51+00:00"
+            "time": "2026-07-26T12:33:49+00:00"
        },
        {
            "name": "symfony/http-client",
-            "version": "v7.4.17",
+            "version": "v7.4.15",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/http-client.git",
-                "reference": "d0aca330a822fe40376cd04c335cb48a24743d0c"
+                "reference": "817bb83ef06717f67ab72a3f03e3b63fbe138de1"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/http-client/zipball/d0aca330a822fe40376cd04c335cb48a24743d0c",
-                "reference": "d0aca330a822fe40376cd04c335cb48a24743d0c",
+                "url": "https://api.github.com/repos/symfony/http-client/zipball/817bb83ef06717f67ab72a3f03e3b63fbe138de1",
+                "reference": "817bb83ef06717f67ab72a3f03e3b63fbe138de1",
                "shasum": ""
            },
            "require": {
@@ -1445,7 +1446,7 @@
                "http"
            ],
            "support": {
-                "source": "https://github.com/symfony/http-client/tree/v7.4.17"
+                "source": "https://github.com/symfony/http-client/tree/v7.4.15"
            },
            "funding": [
                {
@@ -1465,7 +1466,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-08-21T17:40:08+00:00"
+            "time": "2026-07-29T07:12:33+00:00"
        },
        {
            "name": "symfony/http-client-contracts",
@@ -3005,16 +3006,16 @@
        },
        {
            "name": "symfony/yaml",
-            "version": "v7.4.17",
+            "version": "v7.4.15",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/yaml.git",
-                "reference": "0b040d7b66ceb10b7bb24c8e6656257932693a12"
+                "reference": "e101850ded5d2c0d44bf32abb8996404afec2dec"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/yaml/zipball/0b040d7b66ceb10b7bb24c8e6656257932693a12",
-                "reference": "0b040d7b66ceb10b7bb24c8e6656257932693a12",
+                "url": "https://api.github.com/repos/symfony/yaml/zipball/e101850ded5d2c0d44bf32abb8996404afec2dec",
+                "reference": "e101850ded5d2c0d44bf32abb8996404afec2dec",
                "shasum": ""
            },
            "require": {
@@ -3057,7 +3058,7 @@
            "description": "Loads and dumps YAML files",
            "homepage": "https://symfony.com",
            "support": {
-                "source": "https://github.com/symfony/yaml/tree/v7.4.17"
+                "source": "https://github.com/symfony/yaml/tree/v7.4.15"
            },
            "funding": [
                {
@@ -3077,7 +3078,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-08-21T12:09:28+00:00"
+            "time": "2026-07-21T15:13:06+00:00"
        }
    ],
    "packages-dev": [
@@ -3318,11 +3319,11 @@
        },
        {
            "name": "phpstan/phpstan",
-            "version": "2.2.9",
+            "version": "2.2.5",
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/13d6b4f347bad222da436580c8304fa6f83e6bd0",
-                "reference": "13d6b4f347bad222da436580c8304fa6f83e6bd0",
+                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/909c1e5fef7989ac0d0c1c5c42e32a5c4f6198a0",
+                "reference": "909c1e5fef7989ac0d0c1c5c42e32a5c4f6198a0",
                "shasum": ""
            },
            "require": {
@@ -3378,7 +3379,7 @@
                    "type": "github"
                }
            ],
-            "time": "2026-08-22T07:38:16+00:00"
+            "time": "2026-07-05T06:31:06+00:00"
        },
        {
            "name": "phpunit/php-code-coverage",
@@ -4861,16 +4862,16 @@
        },
        {
            "name": "symfony/phpunit-bridge",
-            "version": "v7.4.17",
+            "version": "v7.4.14",
            "source": {
                "type": "git",
                "url": "https://github.com/symfony/phpunit-bridge.git",
-                "reference": "af20e33fb353eb7dea674accdfe7925d33207ada"
+                "reference": "11eeee9d109963145e66f5b1919e5cf5411da58b"
            },
            "dist": {
                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/phpunit-bridge/zipball/af20e33fb353eb7dea674accdfe7925d33207ada",
-                "reference": "af20e33fb353eb7dea674accdfe7925d33207ada",
+                "url": "https://api.github.com/repos/symfony/phpunit-bridge/zipball/11eeee9d109963145e66f5b1919e5cf5411da58b",
+                "reference": "11eeee9d109963145e66f5b1919e5cf5411da58b",
                "shasum": ""
            },
            "require": {
@@ -4922,7 +4923,7 @@
                "testing"
            ],
            "support": {
-                "source": "https://github.com/symfony/phpunit-bridge/tree/v7.4.17"
+                "source": "https://github.com/symfony/phpunit-bridge/tree/v7.4.14"
            },
            "funding": [
                {
@@ -4942,7 +4943,7 @@
                    "type": "tidelift"
                }
            ],
-            "time": "2026-08-21T17:40:08+00:00"
+            "time": "2026-06-08T20:24:16+00:00"
        },
        {
            "name": "theseer/tokenizer",