Skip to content

Unpushed commits (local main ahead of origin/main) #45

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
StanBarrows merged 7 commits into from
Mar 21, 2026
Merged

Unpushed commits (local main ahead of origin/main) #45

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
3684f33
chore: sync PHPStan workflow from template
Mar 21, 2026
90ac410
chore: sync Laravel Pint workflow from template
Mar 21, 2026
020886b
chore: sync Dependabot config and workflows from template
Mar 21, 2026
c753d49
chore: sync Laravel Pint workflow from template
Mar 21, 2026
c631099
chore: sync PHPStan workflow from template
Mar 21, 2026
a8e88ed
chore: sync release workflow from template
Mar 21, 2026
39d27ee
Merge remote-tracking branch 'origin/main'
Mar 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/dependency-review.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,6 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: 'Checkout Repository'
uses: actions/checkout@v6
uses: actions/checkout@v6.0.2
Comment on lines 17 to +18

Copilot AI Mar 21, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

actions/checkout is now pinned to v6.0.2 here (and in some other workflows), but .github/workflows/run-tests.yml still uses actions/checkout@v4. Consider standardizing on a single pinned version across workflows to reduce drift and unexpected differences between CI jobs.

Copilot uses AI. Check for mistakes.
- name: 'Dependency Review'
uses: actions/dependency-review-action@v4
uses: actions/dependency-review-action@v4.9.0
2 changes: 1 addition & 1 deletion .github/workflows/fix-php-code-style-issues.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,6 @@ jobs:
uses: aglipanci/laravel-pint-action@2.6

- name: Commit changes
uses: stefanzweifel/git-auto-commit-action@v6.0.1
uses: stefanzweifel/git-auto-commit-action@v7.1.0
with:
commit_message: Fix styling
31 changes: 24 additions & 7 deletions .github/workflows/phpstan.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,25 +1,42 @@
name: PHPStan

on: [push]
on:
push:
paths:
- '**/*.php'
- 'phpstan.neon.dist'
- 'phpstan-baseline.neon'
- 'composer.json'
- 'composer.lock'
pull_request:
paths:
- '**/*.php'
- 'phpstan.neon.dist'
- 'phpstan-baseline.neon'
- 'composer.json'
- 'composer.lock'
workflow_dispatch:

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true

jobs:
phpstan:
name: phpstan
runs-on: ubuntu-latest
timeout-minutes: 5
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6.0.2

- name: Setup PHP
uses: shivammathur/setup-php@v2
uses: shivammathur/setup-php@2.37.0
with:
php-version: '8.4'
coverage: none

Copilot AI Mar 21, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

composer.json requires laravel/nova from https://nova.laravel.com (private repo). With the Nova auth step removed, the composer-install step is likely to fail due to missing credentials. Re-add the Nova license/auth configuration (or set COMPOSER_AUTH / composer config http-basic.nova.laravel.com ...) before installing dependencies in this workflow.

Suggested change
- name: Configure Nova auth for Composer
run: composer config http-basic.nova.laravel.com "${{ secrets.NOVA_USERNAME }}" "${{ secrets.NOVA_PASSWORD }}"

Copilot uses AI. Check for mistakes.
- name: Apply Nova license
run: composer config http-basic.nova.laravel.com ${{ secrets.NOVA_USERNAME }} ${{ secrets.NOVA_LICENSE_KEY }}

- name: Install composer dependencies
uses: ramsey/composer-install@v3
uses: ramsey/composer-install@4.0.0
Comment on lines 32 to +39

Copilot AI Mar 21, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The action refs here drop the usual v-prefixed tag format used elsewhere in the repo (e.g. shivammathur/setup-php@v2). If these tags are meant to be version tags, verify they exist and consider switching to the consistent tag naming (@v2.x.y / @v4.x.y) to avoid pointing at an unintended or non-existent ref.

Copilot uses AI. Check for mistakes.

- name: Run PHPStan
run: ./vendor/bin/phpstan --error-format=github
5 changes: 3 additions & 2 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,12 +10,13 @@ jobs:
release:
name: Release
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6.0.2
with:
fetch-depth: '0'
- name: Bump version and push tag
uses: anothrNick/github-tag-action@master
uses: anothrNick/github-tag-action@1.75.0
env:
GITHUB_TOKEN: ${{ secrets.MY_GITHUB_TOKEN }}
WITH_V: true
Comment on lines 18 to 22

Copilot AI Mar 21, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The workflow runs on pull_request closed, which also triggers when a PR is closed without being merged. That can create release tags for abandoned PRs. Add a guard (e.g., if: github.event.pull_request.merged == true) at the job or tag step level, or change the trigger to a push on main (or tag) so releases only happen after merge.

Copilot uses AI. Check for mistakes.
Expand Down
Loading