Update CI workflow, composer deps and dependabot

.github/dependabot.yml

@@ -0,0 +1,19 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+  - package-ecosystem: "composer"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "monthly"

.github/workflows/main.yml

@@ -1,31 +1,44 @@
 name: TESTS
 
 on:
-    pull_request: null
-    push:
-        branches:
-            - master
-            - develop
+  pull_request: null
+  push:
+    branches:
+      - master
+      - develop
 
 jobs:
-    tests:
-        runs-on: ubuntu-latest
-        strategy:
-            matrix:
-                php: ['7.4', '8.0', '8.1', '8.2']
-
-        name: PHP ${{ matrix.php }} tests
-        steps:
-            # basically git clone
-            -   uses: actions/checkout@v2
-
-            # use PHP of specific version
-            -   uses: shivammathur/setup-php@v2
-                with:
-                    php-version: ${{ matrix.php }}
-                    coverage: none # disable xdebug, pcov
-
-            # if we 2 steps like this, we can better see if composer failed or tests
-            -   run: composer update --no-progress
-
-            -   run: vendor/bin/phpunit
+  tests:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        php: [ '7.4', '8.0', '8.1', '8.2' ]
+
+    name: PHP ${{ matrix.php }} tests
+    steps:
+      # basically git clone
+      - uses: actions/checkout@v3
+
+      # use PHP of specific version
+      - uses: shivammathur/setup-php@v2
+        with:
+          php-version: ${{ matrix.php }}
+          coverage: none # disable xdebug, pcov
+
+      - name: Validate composer.json and composer.lock
+        run: composer validate
+
+      - name: Cache Composer packages
+        id: composer-cache
+        uses: actions/cache@v3
+        with:
+          path: vendor
+          key: ${{ runner.os }}-php-${{ matrix.php }}-${{ hashFiles('**/composer.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-php-${{ matrix.php }}-
+
+      - name: Install dependencies
+        run: composer install --prefer-dist --no-progress
+
+      - name: Run test suite
+        run: composer run-script test

composer.json

@@ -7,7 +7,7 @@
     },
     "require-dev": {
         "phpunit/phpunit": "^9.5",
-        "squizlabs/php_codesniffer": "^2.6",
+        "squizlabs/php_codesniffer": "^3.7",
         "phpdocumentor/reflection-docblock": "2.*",
         "dms/phpunit-arraysubset-asserts": "^0.4.0",
         "phpspec/prophecy-phpunit": "^2.0.1"