release-validation.yml

name: Release Validation

on:
  workflow_call:

permissions:
  contents: read

jobs:
  validate:
    name: Release-ready validation
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v7

      - name: Set up PHP
        uses: shivammathur/setup-php@v2
        with:
          php-version: "8.4"
          tools: composer
          extensions: intl, mbstring, pdo_sqlite, sqlite3

      - name: Set up Node.js
        uses: actions/setup-node@v7
        with:
          node-version: "24"
          cache: npm

      - name: Install dependencies
        run: |
          composer install --no-interaction --no-progress --prefer-dist
          npm ci --no-audit --fund=false

      - name: Validate release
        env:
          APP_KEY: base64:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
        run: |
          npm run build
          php artisan test
          composer audit --no-interaction --abandoned=report
          npm audit --omit=dev --audit-level=high