Skip to content

ci: pin build tooling to exact versions #8442

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
alexisLefebvre wants to merge 1 commit into
base: 4.3
Choose a base branch
from
+36 −31
Open

ci: pin build tooling to exact versions #8442

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
62 changes: 33 additions & 29 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,10 @@ concurrency:
env:
COMPOSER_TOKEN: ${{ secrets.GITHUB_TOKEN }}
COMPOSER_ROOT_VERSION: "4.3.x-dev"
# Pinned build tooling: these are installed and executed on the runner, so an
# unconstrained version would run whatever the registry serves that day.
PMU_VERSION: "0.3.0"
PHP_COVERALLS_VERSION: "2.9.1"

jobs:
architecture:
Expand Down Expand Up @@ -56,7 +60,7 @@ jobs:
- run: composer validate
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link .
composer require --dev doctrine/mongodb-odm-bundle
Expand Down Expand Up @@ -116,7 +120,7 @@ jobs:
restore-keys: ${{ runner.os }}-composer-
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link .
- name: Run container lint
Expand Down Expand Up @@ -158,7 +162,7 @@ jobs:
restore-keys: ${{ runner.os }}-composer-
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link .
composer require --dev doctrine/mongodb-odm-bundle
Expand Down Expand Up @@ -220,15 +224,15 @@ jobs:
restore-keys: ${{ runner.os }}-composer-
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link .
- name: Setup Node.js
uses: actions/setup-node@v6
with:
node-version: '20'
- name: Install Redocly CLI
run: npm install -g @redocly/cli@latest
run: npm install -g @redocly/cli@2.43.3
- name: Clear test app cache
run: |
rm -Rf tests/Fixtures/app/var/cache/*
Expand Down Expand Up @@ -273,7 +277,7 @@ jobs:
restore-keys: ${{ runner.os }}-composer-
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link .
- name: Clear test app cache
Expand Down Expand Up @@ -302,7 +306,7 @@ jobs:
env:
COVERALLS_REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
composer global require --prefer-dist --no-interaction --no-progress --ansi php-coveralls/php-coveralls
composer global require --prefer-dist --no-interaction --no-progress --ansi "php-coveralls/php-coveralls:$PHP_COVERALLS_VERSION"
export PATH="$PATH:$HOME/.composer/vendor/bin"
php-coveralls --coverage_clover=build/logs/phpunit/clover.xml
continue-on-error: true
Expand Down Expand Up @@ -350,7 +354,7 @@ jobs:
ini-values: memory_limit=-1
- name: PMU
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
- name: Linking
if: ${{ !matrix.php.lowest && !matrix.php.minimal-changes }}
Expand Down Expand Up @@ -393,7 +397,7 @@ jobs:
env:
COVERALLS_REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
composer global require --prefer-dist --no-interaction --no-progress --ansi php-coveralls/php-coveralls
composer global require --prefer-dist --no-interaction --no-progress --ansi "php-coveralls/php-coveralls:$PHP_COVERALLS_VERSION"
export PATH="$PATH:$HOME/.composer/vendor/bin"
php-coveralls --coverage_clover=/tmp/build/logs/phpunit/clover.xml
continue-on-error: true
Expand Down Expand Up @@ -436,7 +440,7 @@ jobs:
ini-values: memory_limit=-1
- name: Linking
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link . --permanent
- name: Run ${{ matrix.component }} install
Expand Down Expand Up @@ -489,7 +493,7 @@ jobs:
restore-keys: ${{ runner.os }}-composer-
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link .
- name: Clear test app cache
Expand Down Expand Up @@ -539,7 +543,7 @@ jobs:
restore-keys: ${{ runner.os }}-composer-
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link .
- name: Clear test app cache
Expand Down Expand Up @@ -590,7 +594,7 @@ jobs:
restore-keys: ${{ runner.os }}-composer-
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link . --permanent
composer require --dev doctrine/mongodb-odm-bundle
Expand Down Expand Up @@ -618,7 +622,7 @@ jobs:
env:
COVERALLS_REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
composer global require --prefer-dist --no-interaction --no-progress --ansi php-coveralls/php-coveralls
composer global require --prefer-dist --no-interaction --no-progress --ansi "php-coveralls/php-coveralls:$PHP_COVERALLS_VERSION"
export PATH="$PATH:$HOME/.composer/vendor/bin"
php-coveralls --coverage_clover=build/logs/phpunit/clover.xml
continue-on-error: true
Expand Down Expand Up @@ -671,7 +675,7 @@ jobs:
restore-keys: ${{ runner.os }}-composer-
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link .
- name: Clear test app cache
Expand All @@ -698,7 +702,7 @@ jobs:
env:
COVERALLS_REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
composer global require --prefer-dist --no-interaction --no-progress --ansi php-coveralls/php-coveralls
composer global require --prefer-dist --no-interaction --no-progress --ansi "php-coveralls/php-coveralls:$PHP_COVERALLS_VERSION"
export PATH="$PATH:$HOME/.composer/vendor/bin"
php-coveralls --coverage_clover=build/logs/phpunit/clover.xml
continue-on-error: true
Expand Down Expand Up @@ -758,7 +762,7 @@ jobs:
restore-keys: ${{ runner.os }}-composer-
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link .
if [ "${{ matrix.elasticsearch-package }}" == "elasticsearch/elasticsearch:^8.4" ]; then
Expand Down Expand Up @@ -820,7 +824,7 @@ jobs:
restore-keys: ${{ runner.os }}-composer-
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link .
composer require --dev opensearch-project/opensearch-php "^2.5" -W
Expand Down Expand Up @@ -860,7 +864,7 @@ jobs:
restore-keys: ${{ runner.os }}-composer-
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link .
- name: Clear test app cache
Expand Down Expand Up @@ -903,7 +907,7 @@ jobs:
run: rm -Rf tests/Fixtures/app/var/cache/*
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link .
- name: Clear test app cache
Expand Down Expand Up @@ -949,7 +953,7 @@ jobs:
run: rm -Rf tests/Fixtures/app/var/cache/*
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link .
- name: Clear test app cache
Expand Down Expand Up @@ -990,7 +994,7 @@ jobs:
run: rm -Rf tests/Fixtures/app/var/cache/*
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link . --permanent
composer update --prefer-lowest
Expand Down Expand Up @@ -1040,7 +1044,7 @@ jobs:
run: echo "COVERAGE=1" >> $GITHUB_ENV
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link .
- name: Clear test app cache
Expand Down Expand Up @@ -1075,7 +1079,7 @@ jobs:
env:
COVERALLS_REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
composer global require --prefer-dist --no-interaction --no-progress --ansi php-coveralls/php-coveralls
composer global require --prefer-dist --no-interaction --no-progress --ansi "php-coveralls/php-coveralls:$PHP_COVERALLS_VERSION"
export PATH="$PATH:$HOME/.composer/vendor/bin"
php-coveralls --coverage_clover=build/logs/phpunit/clover.xml
continue-on-error: true
Expand Down Expand Up @@ -1114,7 +1118,7 @@ jobs:
restore-keys: ${{ runner.os }}-composer-
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link .
- name: Clear test app cache
Expand All @@ -1125,7 +1129,7 @@ jobs:
tests/Fixtures/app/console api:openapi:export --yaml -o build/out/openapi/openapi_v3.yaml
- name: Validate OpenAPI documents
run: |
npm i -g @quobix/vacuum
npm i -g @quobix/vacuum@0.30.0
vacuum lint -r tests/Fixtures/app/ruleset.yaml build/out/openapi/openapi_v3.yaml -d --ignore-array-circle-ref --ignore-polymorph-circle-ref -b --no-clip

laravel:
Expand All @@ -1151,7 +1155,7 @@ jobs:
ini-values: memory_limit=-1
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link . --permanent
composer api-platform/laravel update
Expand All @@ -1177,12 +1181,12 @@ jobs:
ini-values: memory_limit=-1
- name: Update project dependencies
run: |
composer global require soyuka/pmu
composer global require "soyuka/pmu:$PMU_VERSION"
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link . --permanent
- name: Setup laravel project
run: |
composer global require laravel/installer
composer global require laravel/installer:5.31.0
laravel new test-api-platform-install --pest --no-interaction
- name: Install api-platform/laravel
run: |
Expand Down
5 changes: 3 additions & 2 deletions .github/workflows/guides.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,8 @@ jobs:
cd $(composer -n config --global home)
echo "{\"repositories\":[{\"type\":\"vcs\",\"url\":\"https://github.com/php-documentation-generator/php-documentation-generator\"}]}" > composer.json
composer global config --no-plugins allow-plugins.symfony/runtime true
composer global require php-documentation-generator/php-documentation-generator:dev-main
# pdg has no usable tag, so the branch is pinned to a commit
composer global require "php-documentation-generator/php-documentation-generator:dev-main#0d8dd6222ef14338d502294016a3a263437d6b7a"
- name: Cache dependencies
uses: actions/cache@v5
with:
Expand All @@ -47,7 +48,7 @@ jobs:
- name: Install project dependencies
working-directory: docs
run: |
composer global require soyuka/pmu
composer global require soyuka/pmu:0.3.0
composer global config allow-plugins.soyuka/pmu true --no-interaction
composer global link ..
- name: Test guides
Expand Down
Loading