Skip to content

feat(ci): remove audit step #2235

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Litarnus merged 2 commits into from
Oct 5, 2026
Merged

feat(ci): remove audit step #2235

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
df50033
feat(ci): remove audit step
Litarnus Oct 2, 2026
bd779a1
fix
Litarnus Oct 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
56 changes: 11 additions & 45 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -80,30 +80,19 @@ jobs:
run: composer remove spiral/roadrunner-http spiral/roadrunner-worker --dev --no-interaction --no-update

- name: Remove OpenTelemetry dependencies
run: composer remove open-telemetry/api open-telemetry/context open-telemetry/exporter-otlp open-telemetry/sem-conv open-telemetry/sdk --dev --no-interaction --no-update
run: composer remove open-telemetry/api open-telemetry/context open-telemetry/exporter-otlp open-telemetry/gen-otlp-protobuf open-telemetry/sem-conv open-telemetry/sdk --dev --no-interaction --no-update

- name: Set phpunit/phpunit version constraint
run: composer require phpunit/phpunit:'${{ matrix.php.phpunit }}' --dev --no-interaction --no-update

- name: Resolve highest dependencies
run: composer update --no-progress --no-interaction --prefer-dist --no-install --no-plugins --no-scripts --no-audit
- name: Install highest dependencies
run: composer update --no-progress --no-interaction --prefer-dist
if: ${{ matrix.dependencies == 'highest' }}

- name: Resolve lowest dependencies
run: composer update --no-progress --no-interaction --prefer-dist --prefer-lowest --no-install --no-plugins --no-scripts --no-audit
- name: Install lowest dependencies
run: composer update --no-progress --no-interaction --prefer-dist --prefer-lowest
if: ${{ matrix.dependencies == 'lowest' }}

- name: Audit highest dependencies
run: composer audit --locked --no-interaction --format=table
if: ${{ matrix.dependencies == 'highest' }}

- name: Audit lowest dependencies
run: composer audit --locked --no-interaction --format=table --abandoned=report
if: ${{ matrix.dependencies == 'lowest' }}

- name: Install dependencies
run: composer install --no-progress --no-interaction --prefer-dist --no-plugins --no-scripts

- name: Run unit tests
run: vendor/bin/phpunit --testsuite unit --coverage-clover=coverage.xml
# The reason for running some OOM tests without coverage is that because the coverage information collector can cause another OOM event invalidating the test
Expand Down Expand Up @@ -157,25 +146,14 @@ jobs:
- name: Set phpunit/phpunit version constraint
run: composer require phpunit/phpunit:'^9.6.34' --dev --no-interaction --no-update

- name: Resolve highest dependencies
run: composer update --no-progress --no-interaction --prefer-dist --no-install --no-plugins --no-scripts --no-audit
if: ${{ matrix.dependencies == 'highest' }}

- name: Resolve lowest dependencies
run: composer update --no-progress --no-interaction --prefer-dist --prefer-lowest --no-install --no-plugins --no-scripts --no-audit
if: ${{ matrix.dependencies == 'lowest' }}

- name: Audit highest dependencies
run: composer audit --locked --no-interaction --format=table
- name: Install highest dependencies
run: composer update --no-progress --no-interaction --prefer-dist
if: ${{ matrix.dependencies == 'highest' }}

- name: Audit lowest dependencies
run: composer audit --locked --no-interaction --format=table --abandoned=report
- name: Install lowest dependencies
run: composer update --no-progress --no-interaction --prefer-dist --prefer-lowest
if: ${{ matrix.dependencies == 'lowest' }}

- name: Install dependencies
run: composer install --no-progress --no-interaction --prefer-dist --no-plugins --no-scripts

- name: Run OpenTelemetry tests
run: vendor/bin/phpunit --testsuite opentelemetry --no-coverage

Expand Down Expand Up @@ -207,14 +185,8 @@ jobs:
key: ${{ runner.os }}-runtime-frankenphp-composer-${{ hashFiles('**/composer.lock') }}
restore-keys: ${{ runner.os }}-runtime-frankenphp-composer-

- name: Resolve dependencies
run: composer update --no-progress --no-interaction --prefer-dist --no-install --no-plugins --no-scripts --no-audit

- name: Audit dependencies
run: composer audit --locked --no-interaction --format=table

- name: Install dependencies
run: composer install --no-progress --no-interaction --prefer-dist --no-plugins --no-scripts
run: composer install --no-progress --no-interaction --prefer-dist

- name: Install FrankenPHP
env:
Expand Down Expand Up @@ -278,14 +250,8 @@ jobs:
key: ${{ runner.os }}-runtime-roadrunner-composer-${{ hashFiles('**/composer.lock') }}
restore-keys: ${{ runner.os }}-runtime-roadrunner-composer-

- name: Resolve dependencies
run: composer update --no-progress --no-interaction --prefer-dist --no-install --no-plugins --no-scripts --no-audit

- name: Audit dependencies
run: composer audit --locked --no-interaction --format=table

- name: Install dependencies
run: composer install --no-progress --no-interaction --prefer-dist --no-plugins --no-scripts
run: composer install --no-progress --no-interaction --prefer-dist

- name: Install RoadRunner
env:
Expand Down
24 changes: 3 additions & 21 deletions .github/workflows/static-analysis.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,14 +23,8 @@ jobs:
with:
php-version: '8.4'

- name: Resolve dependencies
run: composer update --no-progress --no-interaction --prefer-dist --no-install --no-plugins --no-scripts --no-audit

- name: Audit dependencies
run: composer audit --locked --no-interaction --format=table

- name: Install dependencies
run: composer install --no-progress --no-interaction --prefer-dist --no-plugins --no-scripts
run: composer update --no-progress --no-interaction --prefer-dist

- name: Run script
run: vendor/bin/php-cs-fixer fix --verbose --diff --dry-run
Expand All @@ -47,14 +41,8 @@ jobs:
with:
php-version: '8.4'

- name: Resolve dependencies
run: composer update --no-progress --no-interaction --prefer-dist --no-install --no-plugins --no-scripts --no-audit

- name: Audit dependencies
run: composer audit --locked --no-interaction --format=table

- name: Install dependencies
run: composer install --no-progress --no-interaction --prefer-dist --no-plugins --no-scripts
run: composer update --no-progress --no-interaction --prefer-dist

- name: Run script
run: vendor/bin/phpstan analyse
Expand All @@ -71,14 +59,8 @@ jobs:
with:
php-version: '8.4'

- name: Resolve dependencies
run: composer update --no-progress --no-interaction --prefer-dist --no-install --no-plugins --no-scripts --no-audit

- name: Audit dependencies
run: composer audit --locked --no-interaction --format=table

- name: Install dependencies
run: composer install --no-progress --no-interaction --prefer-dist --no-plugins --no-scripts
run: composer update --no-progress --no-interaction --prefer-dist

- name: Run script
run: composer mago
6 changes: 6 additions & 0 deletions composer.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,7 @@
"open-telemetry/api": "^1.1",
"open-telemetry/context": "^1.1",
"open-telemetry/exporter-otlp": "^1.1",
"open-telemetry/gen-otlp-protobuf": "^1.2.1",
"open-telemetry/sem-conv": "^1.27",
"open-telemetry/sdk": "^1.1",
"phpstan/phpstan": "^1.3",
Expand Down Expand Up @@ -86,6 +87,11 @@
"allow-plugins": {
"php-http/discovery": false,
"tbachert/spi": false
},
"policy": {
"advisories": {
"block": false
}
}
},
"prefer-stable": true
Expand Down
Loading