dependabot[bot]
478422e010
Bump mheap/github-action-required-labels from 2 to 3
...
Bumps [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels ) from 2 to 3.
- [Release notes](https://github.com/mheap/github-action-required-labels/releases )
- [Commits](https://github.com/mheap/github-action-required-labels/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: mheap/github-action-required-labels
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-01-02 07:04:00 +00:00
Bruce Weirdan
7dd25b46d8
Fix missing version in PHARs build on GA
...
We were overriding the root version with COMPOSER_ROOT_VERSION, so all
PHARs had `dev-master` as the version for `vimeo/psalm` baked in.
Fixed vimeo/psalm#7606
2022-12-23 17:26:39 -04:00
Corey Taylor
d6eca8c056
Verify nullable callmap parameters
2022-12-23 06:04:35 -06:00
dependabot[bot]
a30622bfb5
Bump fkirc/skip-duplicate-actions from 4.0.0 to 5.3.0
...
Bumps [fkirc/skip-duplicate-actions](https://github.com/fkirc/skip-duplicate-actions ) from 4.0.0 to 5.3.0.
- [Release notes](https://github.com/fkirc/skip-duplicate-actions/releases )
- [Commits](https://github.com/fkirc/skip-duplicate-actions/compare/v4.0.0...v5.3.0 )
---
updated-dependencies:
- dependency-name: fkirc/skip-duplicate-actions
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-12-05 07:05:39 +00:00
orklah
74d37452ee
Test CI on 8.2
2022-11-25 03:43:24 -04:00
7b6e09afc9
Merge branch 'merge_4.x' into immutable_readonly_3
2022-10-17 12:58:41 +02:00
748a74bb2c
Merge remote-tracking branch 'origin/4.x' into HEAD
2022-10-16 13:41:27 +02:00
3abd0b961f
Immutable Unions
2022-10-03 10:45:36 +02:00
Alex
a6710791e4
Update build-phar.yml
...
Signed-off-by: sashashura <93376818+sashashura@users.noreply.github.com>
2022-09-02 19:16:42 +01:00
AndrolGenhald
285740a753
Merge branch '4.x'
2022-07-07 15:01:38 -05:00
orklah
b1568920ee
Merge pull request #8210 from vimeo/dependabot/github_actions/actions/checkout-3
...
build(deps): bump actions/checkout from 2 to 3
2022-06-30 19:30:34 +02:00
orklah
fdb664fe1b
Merge pull request #8209 from vimeo/dependabot/github_actions/actions/cache-3
...
build(deps): bump actions/cache from 2 to 3
2022-06-30 19:18:33 +02:00
orklah
cf8f0a0734
Merge pull request #8208 from vimeo/dependabot/github_actions/fkirc/skip-duplicate-actions-4.0.0
...
build(deps): bump fkirc/skip-duplicate-actions from 3.4.0 to 4.0.0
2022-06-30 19:18:13 +02:00
dependabot[bot]
005d3e2f50
build(deps): bump actions/checkout from 2 to 3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-06-30 17:05:08 +00:00
dependabot[bot]
236c24faea
build(deps): bump actions/cache from 2 to 3
...
Bumps [actions/cache](https://github.com/actions/cache ) from 2 to 3.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-06-30 17:05:06 +00:00
dependabot[bot]
206a903e46
build(deps): bump fkirc/skip-duplicate-actions from 3.4.0 to 4.0.0
...
Bumps [fkirc/skip-duplicate-actions](https://github.com/fkirc/skip-duplicate-actions ) from 3.4.0 to 4.0.0.
- [Release notes](https://github.com/fkirc/skip-duplicate-actions/releases )
- [Commits](https://github.com/fkirc/skip-duplicate-actions/compare/v3.4.0...v4.0.0 )
---
updated-dependencies:
- dependency-name: fkirc/skip-duplicate-actions
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-06-30 17:05:02 +00:00
dependabot[bot]
f4e518c350
build(deps): bump mheap/github-action-required-labels from 1 to 2
...
Bumps [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels ) from 1 to 2.
- [Release notes](https://github.com/mheap/github-action-required-labels/releases )
- [Commits](https://github.com/mheap/github-action-required-labels/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: mheap/github-action-required-labels
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-06-30 17:04:59 +00:00
orklah
ebb2ca2b3b
Merge pull request #8203 from turrisxyz/Dependabot-GitHub-Actions
...
chore: Included githubactions in the dependabot config
2022-06-30 19:04:39 +02:00
naveen
4c9747203e
chore: Included githubactions in the dependabot config
...
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.
Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot
GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-30 01:29:15 +00:00
naveen
bd50c4e7b0
chore: Set permissions for GitHub actions
...
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-28 00:29:16 +00:00
Sam Mousa
037c9ed118
ci: run tests on php 8.1
2022-06-14 15:29:46 +02:00
Bruce Weirdan
8455d71a9b
Run Shepherd with 8.0
...
Because installing packages with 8.1 and checking them as if we're
running 7.1 just doesn't work.
2022-05-29 23:34:06 +03:00
Bruce Weirdan
c3ea97949d
Fix syntax check failures
...
They were caused by installing packages with `--ignore-platform-reqs`
which brought PHP 8.1 autoloaded packages and caused fatal errors when
running php-parallel-lint. Instead of ignoring platform requirements we
now remove packages that are incompatible with PHP 7.1 (phpunit and its
dependents).
2022-05-29 00:24:11 -04:00
Bruce Weirdan
9784fe4999
Use lowest supported PHP version for shepherd run
...
Having Psalm installed under 8.1 leads to installing composer
dependencies that use PHP syntax incompatible with 7.4, however Psalm
analyzes itself using 7.4 parser.
2022-05-28 16:51:17 -04:00
Bruce Weirdan
220d656706
Added backward compatibility check
2022-02-04 04:15:32 +02:00
orklah
2966f1c9d4
Merge pull request #7107 from AndrolGenhald/feature/5482-load-extensions-based-on-composer-config
...
Enable extensions based on composer.json instead of those loaded at runtime (fixes #5482 ).
2022-01-28 18:45:52 +01:00
AndrolGenhald
35353c6931
Re-add failing assert, enable assertions on CI.
2022-01-27 21:29:43 -06:00
AndrolGenhald
4672e5a324
Disable all PHP extensions for CI except those required by psalm.
2022-01-27 16:30:14 -06:00
AndrolGenhald
2fe4fc397c
Enable extensions based on composer.json instead of those loaded at runtime ( fixes #5482 ).
2022-01-27 16:30:14 -06:00
Bruce Weirdan
fa33632958
Bump PHP version to 7.4
...
Also exclude 8.2+ for now - we don't know if current Psalm version would
be compatible with that.
2022-01-04 10:25:00 +02:00
Bruce Weirdan
b41722ef74
Added 'release:removed' as a valid PR label
2022-01-02 13:41:15 +02:00
Bruce Weirdan
18fbaeeda5
Attempt to avoid timeouts
2021-12-30 14:38:58 +02:00
Bruce Weirdan
1ae2bff5ff
Speed up Windows tests
...
Enable multiple workers for Windows, just like we do on Linux already.
2021-12-30 14:30:06 +02:00
AndrolGenhald
466696cda4
Remove decimal extension from Windows CI.
2021-12-08 13:39:13 -06:00
AndrolGenhald
5808d4ea83
Add decimal extension to CI.
2021-12-08 12:10:31 -06:00
Bruce Weirdan
d99485671b
Disable coverage (and xdebug) on CI
...
I'd expect to see some performance gains here.
2021-11-29 08:07:14 +02:00
Bruce Weirdan
08f824228f
Added 'Removed' section to release notes
2021-11-03 22:11:53 +02:00
Bruce Weirdan
72b03dc30b
Added check for release:*
labels
2021-10-31 14:45:03 +02:00
Bruce Weirdan
5500ce575a
Add 'documentation' label to Docs
category
2021-10-24 01:01:21 +03:00
Bruce Weirdan
99e510d6ab
Add catch-all category
2021-10-24 00:08:14 +03:00
Bruce Weirdan
2c26007176
Added mapping of labels to release categories
2021-10-24 00:06:10 +03:00
sasezaki
82d6e4c83b
exclude dictionaries/scripts from lint
2021-10-05 09:57:06 +09:00
sasezaki
9879aba283
Lint all *.php files, not only src
2021-10-05 09:39:10 +09:00
orklah
7ac7b03b4c
configs for windows
2021-07-25 01:01:10 +02:00
orklah
7926681e6f
Use paratest
2021-07-25 00:43:09 +02:00
orklah
31ec26d73a
simplify windows ci
2021-07-25 00:27:05 +02:00
orklah
348628fe90
fix trigger?
2021-07-25 00:12:31 +02:00
orklah
a550dea83d
test migrate windows ci to github actions
2021-07-25 00:09:44 +02:00
Bruce Weirdan
1128687621
Always build Phar on release events ( #5982 )
...
Refs vimeo/psalm#5968 , vimeo/psalm#5703 and many others
2021-06-22 18:04:19 -04:00
Bruce Weirdan
4a8e94444f
Prevent concurrent phar pushes ( #5563 )
...
Fixes vimeo/psalm#5346
2021-04-03 23:59:40 -04:00