1 Commits
Author SHA1 Message Date
renovate-bot dceb7f1617 chore(deps): update phpstan packages 2026-07-26 22:02:10 +00:00
6 changed files with 73 additions and 219 deletions
+11
View File
@@ -70,6 +70,17 @@ jobs:
username: ${{ gitea.actor }}
password: ${{ secrets.REGISTRY_TOKEN }}
# Build a single-arch image locally so Trivy can inspect it before the real push.
- name: Build local image for scanning
uses: docker/build-push-action@v5
with:
context: .
target: final
platforms: linux/amd64
load: true
tags: scan-target:${{ inputs.tag }}
cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ gitea.repository }}:buildcache
- name: Build and push
uses: docker/build-push-action@v5
with:
-62
View File
@@ -1,62 +0,0 @@
# Cuts a release: moves CHANGELOG.md's [Unreleased] section under a new
# version heading, commits it to main, then creates and pushes the version tag.
# Trigger manually via workflow_dispatch, entering the semver to release.
# The pushed tag can then be built with docker-publish.yml.
name: Create Release Tag
on:
workflow_dispatch:
inputs:
version:
description: "Version to release (semver, e.g. 1.2.3)"
required: true
type: string
jobs:
tag:
runs-on: ubuntu-latest
permissions:
contents: write
steps:
- name: Checkout
uses: actions/checkout@v4
with:
fetch-depth: 0
token: ${{ secrets.GITHUB_TOKEN }}
- name: Validate version and Unreleased section
run: |
if ! [[ "${{ inputs.version }}" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
echo "Error: '${{ inputs.version }}' is not a valid semver (e.g. 1.2.3)."
exit 1
fi
if git rev-parse "refs/tags/${{ inputs.version }}" >/dev/null 2>&1; then
echo "Error: tag '${{ inputs.version }}' already exists."
exit 1
fi
awk '/^## \[Unreleased\]/{f=1;next}/^## \[/{f=0}f' CHANGELOG.md > /tmp/unreleased.md
if ! grep -q '[^[:space:]]' /tmp/unreleased.md; then
echo "Error: CHANGELOG.md's [Unreleased] section is empty — nothing to release."
exit 1
fi
- name: Move Unreleased entries under the new version heading
run: |
today=$(date +%Y-%m-%d)
awk -v ver="${{ inputs.version }}" -v date="$today" '
/^## \[Unreleased\]/ { print; print ""; print "## [" ver "] - " date; next }
{ print }
' CHANGELOG.md > /tmp/CHANGELOG.md
mv /tmp/CHANGELOG.md CHANGELOG.md
- name: Commit and tag
run: |
git config user.name "gitea-actions"
git config user.email "actions@noreply.git.arthurerlich.de"
git add CHANGELOG.md
git commit -m "chore(release): ${{ inputs.version }}"
git tag "${{ inputs.version }}"
git push origin HEAD:main
git push origin "${{ inputs.version }}"
-78
View File
@@ -1,78 +0,0 @@
name: Tests
on:
push:
branches: [main]
pull_request:
branches: [main]
env:
REGISTRY: git.arthurerlich.de
jobs:
build-dev:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Log in to Gitea registry
uses: docker/login-action@v3
with:
registry: ${{ env.REGISTRY }}
username: ${{ gitea.actor }}
password: ${{ secrets.REGISTRY_TOKEN }}
- name: Build dev image (PHP 8.4 + composer deps)
uses: docker/build-push-action@v5
with:
context: .
file: Dockerfile.dev
target: dev
load: true
tags: graph-dev:ci
cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ gitea.repository }}:buildcache-dev
cache-to: type=registry,ref=${{ env.REGISTRY }}/${{ gitea.repository }}:buildcache-dev,mode=max
- name: Run tests in dev image
run: |
cid=$(docker create graph-dev:ci sh -c "
composer install --no-interaction &&
vendor/bin/phpunit --testdox &&
composer phpstan
")
docker cp . "$cid":/app
rc=0
docker start -a "$cid" || rc=$?
docker rm "$cid" > /dev/null
exit $rc
build-prod:
needs: build-dev
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Log in to Gitea registry
uses: docker/login-action@v3
with:
registry: ${{ env.REGISTRY }}
username: ${{ gitea.actor }}
password: ${{ secrets.REGISTRY_TOKEN }}
- name: Build prod image (final target)
uses: docker/build-push-action@v5
with:
context: .
file: Dockerfile
target: final
push: false
cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ gitea.repository }}:buildcache-prod
cache-to: type=registry,ref=${{ env.REGISTRY }}/${{ gitea.repository }}:buildcache-prod,mode=max
-4
View File
@@ -7,10 +7,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
## [Unreleased]
### Fixed
- Removed a leftover `composer dump-env prod` call in the prod Docker build stage — the command doesn't exist in this project's Composer setup and broke every image build
## [0.2.0] - 2026-07-12
### Added
-17
View File
@@ -138,29 +138,12 @@ Workflow files live in [.gitea/workflows/](.gitea/workflows/). This project uses
- Secrets are set under Repository → Settings → Secrets → Actions
- The registry hostname must be derived from `gitea.server_url` (strip the protocol prefix)
- Triggers use standard `on:` syntax; `tags: '*.*.*'` matches semver pushes without a `v` prefix
- Do not use `cache-from/cache-to: type=gha` — on this instance's act_runner (v2.0.0), the internal GitHub Actions-cache-compatible proxy is not reachable from job containers (`dial tcp <ip>:<port>: i/o timeout`), a known act_runner docker-executor networking limitation, not a workflow bug. Use `type=registry` instead (push cache blobs to `${{ env.REGISTRY }}/<repo>:buildcache*` — see both `test.yml` and `docker-publish.yml`); it requires a registry login step even for jobs that don't push the final image.
**Current workflows:**
| File | Trigger | Purpose |
| -------------------- | ---------------- | --------------------------------------------------------- |
| `docker-publish.yml` | Push tag `*.*.*` | Build & push multi-arch image to Gitea container registry |
| `test.yml` | Push/PR to `main`| Build dev+prod images, run PHPUnit and PHPStan |
### Release testing with `act`
Before tagging a release (anything that would trigger `docker-publish.yml`), run `test.yml` locally with [`act`](https://github.com/nektos/act) to catch pipeline failures before pushing. `test.yml` uses plain GitHub Actions syntax (no `gitea.*` contexts), so it runs under `act` unmodified.
```bash
act -j test \
-P ubuntu-latest=catthehacker/ubuntu:act-latest \
--artifact-server-path /tmp/act-artifacts
```
- `-P ubuntu-latest=catthehacker/ubuntu:act-latest` — default act runner image lacks a Docker CLI, which the `test` job needs for its nested `docker run` steps
- `--artifact-server-path` — required for the `upload-artifact`/`download-artifact` steps to work; without it they silently no-op
**If `act` is not installed:** warn the user it's missing and how to install it (`sudo pacman -S act`, or see the repo above) — do not install it yourself or force the check. `docker-publish.yml` is out of scope for `act` (it needs real `gitea.*` context and a live registry secret); don't try to run it locally.
## Docker
Generated
+62 -58
View File
@@ -313,16 +313,16 @@
},
{
"name": "symfony/cache",
"version": "v7.4.17",
"version": "v7.4.14",
"source": {
"type": "git",
"url": "https://github.com/symfony/cache.git",
"reference": "f6028442dd1dfa4f88e9c7360d753948d165e938"
"reference": "9adfcb2a7fc3924473b09f5a0b058dcc2cc7be9a"
},
"dist": {
"type": "zip",
"url": "https://api.github.com/repos/symfony/cache/zipball/f6028442dd1dfa4f88e9c7360d753948d165e938",
"reference": "f6028442dd1dfa4f88e9c7360d753948d165e938",
"url": "https://api.github.com/repos/symfony/cache/zipball/9adfcb2a7fc3924473b09f5a0b058dcc2cc7be9a",
"reference": "9adfcb2a7fc3924473b09f5a0b058dcc2cc7be9a",
"shasum": ""
},
"require": {
@@ -336,6 +336,7 @@
},
"conflict": {
"doctrine/dbal": "<3.6",
"ext-redis": "<6.1",
"ext-relay": "<0.12.1",
"symfony/dependency-injection": "<6.4",
"symfony/http-kernel": "<6.4",
@@ -347,7 +348,7 @@
"symfony/cache-implementation": "1.1|2.0|3.0"
},
"require-dev": {
"cache/integration-tests": "^1.0.3",
"cache/integration-tests": "dev-master",
"doctrine/dbal": "^3.6|^4",
"predis/predis": "^1.1|^2.0",
"psr/simple-cache": "^1.0|^2.0|^3.0",
@@ -392,7 +393,7 @@
"psr6"
],
"support": {
"source": "https://github.com/symfony/cache/tree/v7.4.17"
"source": "https://github.com/symfony/cache/tree/v7.4.14"
},
"funding": [
{
@@ -412,7 +413,7 @@
"type": "tidelift"
}
],
"time": "2026-08-19T08:28:05+00:00"
"time": "2026-06-17T14:44:48+00:00"
},
{
"name": "symfony/cache-contracts",
@@ -575,16 +576,16 @@
},
{
"name": "symfony/console",
"version": "v7.4.17",
"version": "v7.4.14",
"source": {
"type": "git",
"url": "https://github.com/symfony/console.git",
"reference": "962e18f09ebe68a49039b4c82fc0ea4871824fca"
"reference": "92f58bc4bf97a92ed1b9f367f0cd44f20bde0e87"
},
"dist": {
"type": "zip",
"url": "https://api.github.com/repos/symfony/console/zipball/962e18f09ebe68a49039b4c82fc0ea4871824fca",
"reference": "962e18f09ebe68a49039b4c82fc0ea4871824fca",
"url": "https://api.github.com/repos/symfony/console/zipball/92f58bc4bf97a92ed1b9f367f0cd44f20bde0e87",
"reference": "92f58bc4bf97a92ed1b9f367f0cd44f20bde0e87",
"shasum": ""
},
"require": {
@@ -649,7 +650,7 @@
"terminal"
],
"support": {
"source": "https://github.com/symfony/console/tree/v7.4.17"
"source": "https://github.com/symfony/console/tree/v7.4.14"
},
"funding": [
{
@@ -669,40 +670,43 @@
"type": "tidelift"
}
],
"time": "2026-08-21T12:09:28+00:00"
"time": "2026-06-16T11:50:14+00:00"
},
{
"name": "symfony/dependency-injection",
"version": "v8.0.15",
"version": "v7.4.14",
"source": {
"type": "git",
"url": "https://github.com/symfony/dependency-injection.git",
"reference": "c5c30601e3efaf6b9a2ec286883acf9183c024a4"
"reference": "2c8c64a33e2e6911579e1ff79a8e06c27d48d402"
},
"dist": {
"type": "zip",
"url": "https://api.github.com/repos/symfony/dependency-injection/zipball/c5c30601e3efaf6b9a2ec286883acf9183c024a4",
"reference": "c5c30601e3efaf6b9a2ec286883acf9183c024a4",
"url": "https://api.github.com/repos/symfony/dependency-injection/zipball/2c8c64a33e2e6911579e1ff79a8e06c27d48d402",
"reference": "2c8c64a33e2e6911579e1ff79a8e06c27d48d402",
"shasum": ""
},
"require": {
"php": ">=8.4",
"php": ">=8.2",
"psr/container": "^1.1|^2.0",
"symfony/deprecation-contracts": "^2.5|^3",
"symfony/service-contracts": "^3.6",
"symfony/var-exporter": "^7.4|^8.0"
"symfony/var-exporter": "^6.4.20|^7.2.5|^8.0"
},
"conflict": {
"ext-psr": "<1.1|>=2"
"ext-psr": "<1.1|>=2",
"symfony/config": "<6.4",
"symfony/finder": "<6.4",
"symfony/yaml": "<6.4"
},
"provide": {
"psr/container-implementation": "1.1|2.0",
"symfony/service-implementation": "1.1|2.0|3.0"
},
"require-dev": {
"symfony/config": "^7.4|^8.0",
"symfony/expression-language": "^7.4|^8.0",
"symfony/yaml": "^7.4|^8.0"
"symfony/config": "^6.4|^7.0|^8.0",
"symfony/expression-language": "^6.4|^7.0|^8.0",
"symfony/yaml": "^6.4|^7.0|^8.0"
},
"type": "library",
"autoload": {
@@ -730,7 +734,7 @@
"description": "Allows you to standardize and centralize the way objects are constructed in your application",
"homepage": "https://symfony.com",
"support": {
"source": "https://github.com/symfony/dependency-injection/tree/v8.0.15"
"source": "https://github.com/symfony/dependency-injection/tree/v7.4.14"
},
"funding": [
{
@@ -750,7 +754,7 @@
"type": "tidelift"
}
],
"time": "2026-07-22T15:20:43+00:00"
"time": "2026-06-24T07:41:05+00:00"
},
{
"name": "symfony/deprecation-contracts",
@@ -1210,16 +1214,16 @@
},
{
"name": "symfony/framework-bundle",
"version": "v7.4.17",
"version": "v7.4.14",
"source": {
"type": "git",
"url": "https://github.com/symfony/framework-bundle.git",
"reference": "c7f3c14c51fccba466761e8c0e7dafe4335acc16"
"reference": "4d11fd50d0a3d2c43b400154ad7ec35b84ea3e5b"
},
"dist": {
"type": "zip",
"url": "https://api.github.com/repos/symfony/framework-bundle/zipball/c7f3c14c51fccba466761e8c0e7dafe4335acc16",
"reference": "c7f3c14c51fccba466761e8c0e7dafe4335acc16",
"url": "https://api.github.com/repos/symfony/framework-bundle/zipball/4d11fd50d0a3d2c43b400154ad7ec35b84ea3e5b",
"reference": "4d11fd50d0a3d2c43b400154ad7ec35b84ea3e5b",
"shasum": ""
},
"require": {
@@ -1228,7 +1232,7 @@
"php": ">=8.2",
"symfony/cache": "^6.4.12|^7.0|^8.0",
"symfony/config": "^7.4.4|^8.0.4",
"symfony/dependency-injection": "^7.4.15|~8.0.15|^8.1.2",
"symfony/dependency-injection": "^7.4.4|^8.0.4",
"symfony/deprecation-contracts": "^2.5|^3",
"symfony/error-handler": "^7.3|^8.0",
"symfony/event-dispatcher": "^6.4|^7.0|^8.0",
@@ -1247,13 +1251,13 @@
"symfony/asset": "<6.4",
"symfony/asset-mapper": "<6.4",
"symfony/clock": "<6.4",
"symfony/console": "<6.4.43|>=7.0,<7.4.15|>=8.0,<8.0.15",
"symfony/console": "<6.4",
"symfony/dom-crawler": "<6.4",
"symfony/dotenv": "<6.4",
"symfony/form": "<7.4",
"symfony/http-client": "<6.4",
"symfony/lock": "<6.4",
"symfony/mailer": "<6.4.44|>=7.0,<7.4.17|>=8.0,<8.1.5",
"symfony/mailer": "<6.4",
"symfony/messenger": "<7.4",
"symfony/mime": "<6.4.37|>=7.0,<7.4.9|>=8.0,<8.0.9",
"symfony/property-access": "<6.4",
@@ -1281,7 +1285,7 @@
"symfony/asset-mapper": "^6.4|^7.0|^8.0",
"symfony/browser-kit": "^6.4|^7.0|^8.0",
"symfony/clock": "^6.4|^7.0|^8.0",
"symfony/console": "^6.4.43|^7.4.15|^8.0.15",
"symfony/console": "^6.4|^7.0|^8.0",
"symfony/css-selector": "^6.4|^7.0|^8.0",
"symfony/dom-crawler": "^6.4|^7.0|^8.0",
"symfony/dotenv": "^6.4|^7.0|^8.0",
@@ -1316,7 +1320,7 @@
"symfony/webhook": "^7.4|^8.0",
"symfony/workflow": "^7.4|^8.0",
"symfony/yaml": "^7.3|^8.0",
"twig/twig": "^3.12|^4.0"
"twig/twig": "^3.12"
},
"type": "symfony-bundle",
"autoload": {
@@ -1344,7 +1348,7 @@
"description": "Provides a tight integration between Symfony components and the Symfony full-stack framework",
"homepage": "https://symfony.com",
"support": {
"source": "https://github.com/symfony/framework-bundle/tree/v7.4.17"
"source": "https://github.com/symfony/framework-bundle/tree/v7.4.14"
},
"funding": [
{
@@ -1364,20 +1368,20 @@
"type": "tidelift"
}
],
"time": "2026-08-21T19:38:51+00:00"
"time": "2026-06-27T08:31:38+00:00"
},
{
"name": "symfony/http-client",
"version": "v7.4.17",
"version": "v7.4.14",
"source": {
"type": "git",
"url": "https://github.com/symfony/http-client.git",
"reference": "d0aca330a822fe40376cd04c335cb48a24743d0c"
"reference": "f6bc6b5a54ff5afac4725cacec9bf2f52eb15920"
},
"dist": {
"type": "zip",
"url": "https://api.github.com/repos/symfony/http-client/zipball/d0aca330a822fe40376cd04c335cb48a24743d0c",
"reference": "d0aca330a822fe40376cd04c335cb48a24743d0c",
"url": "https://api.github.com/repos/symfony/http-client/zipball/f6bc6b5a54ff5afac4725cacec9bf2f52eb15920",
"reference": "f6bc6b5a54ff5afac4725cacec9bf2f52eb15920",
"shasum": ""
},
"require": {
@@ -1445,7 +1449,7 @@
"http"
],
"support": {
"source": "https://github.com/symfony/http-client/tree/v7.4.17"
"source": "https://github.com/symfony/http-client/tree/v7.4.14"
},
"funding": [
{
@@ -1465,7 +1469,7 @@
"type": "tidelift"
}
],
"time": "2026-08-21T17:40:08+00:00"
"time": "2026-06-16T11:50:14+00:00"
},
{
"name": "symfony/http-client-contracts",
@@ -3005,16 +3009,16 @@
},
{
"name": "symfony/yaml",
"version": "v7.4.17",
"version": "v7.4.14",
"source": {
"type": "git",
"url": "https://github.com/symfony/yaml.git",
"reference": "0b040d7b66ceb10b7bb24c8e6656257932693a12"
"reference": "f8f328665ace2370d1e10645b807ba1646dc7dcc"
},
"dist": {
"type": "zip",
"url": "https://api.github.com/repos/symfony/yaml/zipball/0b040d7b66ceb10b7bb24c8e6656257932693a12",
"reference": "0b040d7b66ceb10b7bb24c8e6656257932693a12",
"url": "https://api.github.com/repos/symfony/yaml/zipball/f8f328665ace2370d1e10645b807ba1646dc7dcc",
"reference": "f8f328665ace2370d1e10645b807ba1646dc7dcc",
"shasum": ""
},
"require": {
@@ -3057,7 +3061,7 @@
"description": "Loads and dumps YAML files",
"homepage": "https://symfony.com",
"support": {
"source": "https://github.com/symfony/yaml/tree/v7.4.17"
"source": "https://github.com/symfony/yaml/tree/v7.4.14"
},
"funding": [
{
@@ -3077,7 +3081,7 @@
"type": "tidelift"
}
],
"time": "2026-08-21T12:09:28+00:00"
"time": "2026-06-08T20:24:16+00:00"
}
],
"packages-dev": [
@@ -3318,11 +3322,11 @@
},
{
"name": "phpstan/phpstan",
"version": "2.2.9",
"version": "2.2.6",
"dist": {
"type": "zip",
"url": "https://api.github.com/repos/phpstan/phpstan/zipball/13d6b4f347bad222da436580c8304fa6f83e6bd0",
"reference": "13d6b4f347bad222da436580c8304fa6f83e6bd0",
"url": "https://api.github.com/repos/phpstan/phpstan/zipball/a6e9b5a9420f6109c091e87d82683bd1a80b87ed",
"reference": "a6e9b5a9420f6109c091e87d82683bd1a80b87ed",
"shasum": ""
},
"require": {
@@ -3378,7 +3382,7 @@
"type": "github"
}
],
"time": "2026-08-22T07:38:16+00:00"
"time": "2026-07-26T21:22:49+00:00"
},
{
"name": "phpunit/php-code-coverage",
@@ -4861,16 +4865,16 @@
},
{
"name": "symfony/phpunit-bridge",
"version": "v7.4.17",
"version": "v7.4.14",
"source": {
"type": "git",
"url": "https://github.com/symfony/phpunit-bridge.git",
"reference": "af20e33fb353eb7dea674accdfe7925d33207ada"
"reference": "11eeee9d109963145e66f5b1919e5cf5411da58b"
},
"dist": {
"type": "zip",
"url": "https://api.github.com/repos/symfony/phpunit-bridge/zipball/af20e33fb353eb7dea674accdfe7925d33207ada",
"reference": "af20e33fb353eb7dea674accdfe7925d33207ada",
"url": "https://api.github.com/repos/symfony/phpunit-bridge/zipball/11eeee9d109963145e66f5b1919e5cf5411da58b",
"reference": "11eeee9d109963145e66f5b1919e5cf5411da58b",
"shasum": ""
},
"require": {
@@ -4922,7 +4926,7 @@
"testing"
],
"support": {
"source": "https://github.com/symfony/phpunit-bridge/tree/v7.4.17"
"source": "https://github.com/symfony/phpunit-bridge/tree/v7.4.14"
},
"funding": [
{
@@ -4942,7 +4946,7 @@
"type": "tidelift"
}
],
"time": "2026-08-21T17:40:08+00:00"
"time": "2026-06-08T20:24:16+00:00"
},
{
"name": "theseer/tokenizer",