chore(deps): bump symfony/security-http from 6.4.15 to 7.2.0 #243
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Run tests | |
| on: [pull_request] | |
| jobs: | |
| tests: | |
| name: Run tests | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| checks: write | |
| pull-requests: write | |
| actions: read | |
| statuses: write | |
| steps: | |
| - name: Checkout Code | |
| id: checkout | |
| uses: actions/checkout@v4 | |
| - name: Extract PHP Version | |
| id: php | |
| uses: docker://ghcr.io/un-ocha/actions:extract-php-version-main | |
| with: | |
| docker_file: 'docker/Dockerfile' | |
| docker_image: 'public.ecr.aws/unocha/php-k8s' | |
| - name: Setup PHP with PECL extension | |
| uses: shivammathur/setup-php@v2 | |
| if: ${{ !env.ACT }} | |
| with: | |
| php-version: ${{ steps.php.outputs.php_version }} | |
| tools: composer | |
| env: | |
| fail-fast: true | |
| - name: Setup PHP with PECL extension | |
| uses: shivammathur/setup-php@v2 | |
| if: ${{ env.ACT }} | |
| with: | |
| php-version: ${{ steps.php.outputs.php_version }} | |
| tools: composer | |
| env: | |
| fail-fast: true | |
| runner: self-hosted | |
| - name: Software versions | |
| id: versions | |
| uses: cafuego/command-output@main | |
| with: | |
| run: | | |
| php --version && composer --version | |
| - name: Composer Validate | |
| id: validate | |
| uses: cafuego/command-output@main | |
| with: | |
| run: | | |
| composer validate --no-check-version --strict | |
| env: | |
| fail-fast: true | |
| - name: Composer Audit | |
| id: audit | |
| uses: cafuego/command-output@main | |
| with: | |
| run: | | |
| composer audit | |
| env: | |
| fail-fast: true | |
| - name: Code Lint | |
| id: lint | |
| uses: cafuego/command-output@main | |
| with: | |
| run: | | |
| test ! -d ./src || find -L ./src -iregex '.*\.\(php\)$' -print0 | xargs -0 -n 1 -P 4 php -l | |
| env: | |
| fail-fast: true | |
| - name: Configure AWS Credentials | |
| id: aws | |
| if: ${{ !env.ACT }} | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-access-key-id: ${{ secrets.ECR_AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.ECR_AWS_SECRET_ACCESS_KEY }} | |
| aws-region: us-east-1 | |
| - name: Login to Public ECR | |
| id: aws-login | |
| if: ${{ !env.ACT }} | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: public.ecr.aws | |
| username: ${{ secrets.ECR_AWS_ACCESS_KEY_ID }} | |
| password: ${{ secrets.ECR_AWS_SECRET_ACCESS_KEY }} | |
| env: | |
| AWS_REGION: us-east-1 | |
| - name: Build Image | |
| id: build | |
| uses: cafuego/command-output@main | |
| with: | |
| run: | | |
| make | |
| env: | |
| fail-fast: true | |
| - name: Setup Environment | |
| id: docker | |
| uses: cafuego/command-output@main | |
| with: | |
| run: | | |
| docker compose -f tests/docker-compose.yml up -d | |
| sleep 4 | |
| docker ps -a | |
| env: | |
| fail-fast: true | |
| - name: Install Environment | |
| id: install | |
| uses: cafuego/command-output@main | |
| with: | |
| run: | | |
| docker compose -f tests/docker-compose.yml exec -w /srv/www -T site ./bin/console doctrine:database:drop --force | |
| docker compose -f tests/docker-compose.yml exec -w /srv/www -T site ./bin/console doctrine:database:create --if-not-exists -n | |
| docker compose -f tests/docker-compose.yml exec -w /srv/www -T site ./bin/console doctrine:schema:create -n | |
| docker compose -f tests/docker-compose.yml exec -w /srv/www -T site ./bin/console netbrothers:version --drop-version -n | |
| docker compose -f tests/docker-compose.yml exec -w /srv/www -T site ./bin/console netbrothers:version -n | |
| docker compose -f tests/docker-compose.yml exec -w /srv/www -T site ./bin/console hautelook:fixtures:load -n | |
| docker compose -f tests/docker-compose.yml exec -w /srv/www -T site ./bin/console cache:clear | |
| env: | |
| fail-fast: true | |
| - name: Config Lint | |
| id: symfony | |
| uses: cafuego/command-output@main | |
| with: | |
| run: | | |
| docker compose -f tests/docker-compose.yml exec -w /srv/www -T site ./bin/console lint:yaml config --parse-tags | |
| docker compose -f tests/docker-compose.yml exec -w /srv/www -T site ./bin/console lint:twig templates --env=prod | |
| docker compose -f tests/docker-compose.yml exec -w /srv/www -T site ./bin/console lint:xliff translations | |
| docker compose -f tests/docker-compose.yml exec -w /srv/www -T site ./bin/console lint:container | |
| docker compose -f tests/docker-compose.yml exec -w /srv/www -T site ./bin/console doctrine:schema:validate --skip-sync -vvv --no-interaction | |
| env: | |
| fail-fast: true | |
| - name: Unit Tests | |
| id: phpunit | |
| uses: cafuego/command-output@main | |
| with: | |
| run: | | |
| docker compose -f tests/docker-compose.yml exec -T site mkdir -p /srv/www/html/build/logs | |
| docker compose -f tests/docker-compose.yml exec -T site chmod -R 777 /srv/www/html/build/logs | |
| docker compose -f tests/docker-compose.yml exec -T site mkdir -p /srv/www/coverage | |
| docker compose -f tests/docker-compose.yml exec -T site chmod -R 777 /srv/www/coverage | |
| docker compose -f tests/docker-compose.yml exec -u appuser -T -w /srv/www -e XDEBUG_MODE=coverage -e BROWSERTEST_OUTPUT_DIRECTORY=/srv/www/html/sites/default/files/browser_output -e DTT_BASE_URL=http://127.0.0.1 site ./bin/phpunit --coverage-clover /srv/www/html/build/logs/clover.xml --cache-result-file /tmp/phpunit-result-cache --debug | |
| docker cp "$(docker compose -f tests/docker-compose.yml ps -q site)":/srv/www/html/build/logs/clover.xml . | |
| env: | |
| fail-fast: true | |
| - name: Monitor coverage | |
| uses: slavcodev/coverage-monitor-action@v1 | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| coverage_path: "clover.xml" | |
| threshold_alert: 10 | |
| threshold_warning: 50 | |
| threshold_metric: "lines" | |
| - name: Post Comment | |
| if: ${{ !env.ACT }} | |
| uses: actions/github-script@v7 | |
| with: | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| script: | | |
| const output = `#### Composer Validate \`${{ steps.validate.outcome }}\` | |
| #### Composer Audit \`${{ steps.audit.outcome }}\` | |
| #### PHP Lint \`${{ steps.lint.outcome }}\` | |
| #### Docker Build \`${{ steps.build.outcome }}\` | |
| #### Environment Setup \`${{ steps.docker.outcome }}\` | |
| #### Site Install \`${{ steps.install.outcome }}\` | |
| #### Config Lint \`${{ steps.symfony.outcome }}\` | |
| #### Unit Tests \`${{ steps.phpunit.outcome }}\` | |
| <details><summary>Software Versions</summary> | |
| \`\`\`${{ steps.versions.outputs.stdout }}\`\`\` | |
| </details> | |
| <details><summary>Composer Audit</summary> | |
| \`\`\`${{ steps.audit.outputs.stdout }}\`\`\` | |
| </details> | |
| <details><summary>Config Lint</summary> | |
| \`\`\`${{ steps.symfony.outputs.stdout }}\`\`\` | |
| </details> | |
| <details><summary>Unit Tests</summary> | |
| \`\`\`${{ steps.phpunit.outputs.stdout }}\`\`\` | |
| </details> | |
| *Pusher: @${{ github.actor }}, Action: \`${{ github.event_name }}\`, Workflow: \`${{ github.workflow }}\`*`; | |
| github.rest.issues.createComment({ | |
| issue_number: context.issue.number, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| body: output | |
| }) | |
| - name: Slack Success Notification | |
| id: slack_success | |
| if: ${{ !env.ACT && success() }} | |
| uses: slackapi/slack-github-action@v1.25.0 | |
| with: | |
| channel-id: '${{ vars.SLACK_CHANNEL }}' | |
| payload: | | |
| { | |
| "text": "Tests passed for a pull request on ${{ github.repository }}", | |
| "attachments": [ | |
| { | |
| "color": "#00FF00", | |
| "blocks": [ | |
| { | |
| "type": "section", | |
| "text": { | |
| "type": "mrkdwn", | |
| "text": "Pull request by @${{ github.triggering_actor }} to merge _${{ github.head_ref }}_ into _${{ github.base_ref }}_ on <${{ github.repositoryUrl }}|${{ github.repository }}> passed tests (<${{ github.event.pull_request.html_url }}|Review>)" | |
| } | |
| } | |
| ] | |
| } | |
| ] | |
| } | |
| env: | |
| SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }} | |
| - name: Slack Failure Notification | |
| id: slack_failure | |
| if: ${{ !env.ACT && failure() }} | |
| uses: slackapi/slack-github-action@v1.25.0 | |
| with: | |
| channel-id: '${{ vars.SLACK_CHANNEL }}' | |
| payload: | | |
| { | |
| "text": "Tests failed for a pull request on ${{ github.repository }}", | |
| "attachments": [ | |
| { | |
| "color": "#FF0000", | |
| "blocks": [ | |
| { | |
| "type": "section", | |
| "text": { | |
| "type": "mrkdwn", | |
| "text": "Pull request by @${{ github.triggering_actor }} to merge _${{ github.head_ref }}_ into _${{ github.base_ref }}_ on <${{ github.repositoryUrl }}|${{ github.repository }}> failed tests (<https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}|Review>)" | |
| } | |
| } | |
| ] | |
| } | |
| ] | |
| } | |
| env: | |
| SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }} | |
| - name: Clean up | |
| id: docker-clean-up | |
| if: ${{ env.ACT }} | |
| uses: cafuego/command-output@main | |
| with: | |
| run: | | |
| docker compose -f tests/docker-compose.yml down | |
| env: | |
| fail-fast: true |