fix issue #210 : phar manifest is broken

.github/workflows/release.yml

@@ -48,11 +48,20 @@ jobs:
         with:
           composer-options: "--prefer-dist"
 
-      -   # https://github.com/box-project/box
-        name: Build Release Artifacts
-        run: |
-          box compile
-          box info ${{ github.workspace }}/bin/phplint.phar
+      -   # https://github.com/llaville/box-manifest
+          name: Download BOX Manifest Artifact
+          run: |
+              curl -Ls https://github.com/llaville/box-manifest/releases/latest/download/box-manifest.phar -o /usr/local/bin/box-manifest
+              chmod +x /usr/local/bin/box-manifest
+
+      -   # https://github.com/llaville/box-manifest
+          name: Build Release Artifact
+          run: |
+              box-manifest manifest:build --ansi -vv -c box.json --output-file=sbom.json
+              box-manifest manifest:build --ansi -vv -c box.json --output-file=console.txt --format console
+              box-manifest manifest:stub  --ansi -vv -c box.json --output-file=stub.php --resource console.txt --resource sbom.json
+              box compile --ansi -vv -c box.json.dist
+              box info ${{ github.workspace }}/bin/phplint.phar
 
       -   # https://github.com/softprops/action-gh-release
         name: Create Release from current tag

box.json

@@ -0,0 +1,15 @@
+{
+  "compression": "GZ",
+  "chmod": "0700",
+  "banner": [
+    "This file is part of the overtrue/phplint package",
+    "",
+    "(c) overtrue",
+    "",
+    "This source file is subject to the MIT license that is bundled",
+    "with this source code in the file LICENSE."
+  ],
+  "force-autodiscovery": true,
+  "exclude-dev-files": false,
+  "files": ["autoload.php", "phplint.php"]
+}

box.json.dist

@@ -11,5 +11,11 @@
   ],
   "force-autodiscovery": true,
   "exclude-dev-files": false,
-  "files": ["autoload.php", "phplint.php"]
+  "files": ["autoload.php", "phplint.php"],
+  "stub": "stub.php",
+  "files-bin": ["sbom.json", "console.txt"],
+  "map": [
+    { "console.txt": ".box.manifests/console.txt" },
+    { "sbom.json": ".box.manifests/sbom.json" }
+  ]
 }