chore: revisit GH workflows (#229)

- add concurrency
- minimize permissions
- use latest php
- updated tools

---------

Signed-off-by: Jan Kowalleck <[email protected]>

Author: jkowalleck

.github/dependabot.yml

@@ -1,5 +1,4 @@
-# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-
+# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
 version: 2
 updates:
   - package-ecosystem: 'composer'
@@ -17,64 +16,13 @@ updates:
       include: 'scope'
     open-pull-requests-limit: 999
 
-  - directory: '/tools/composer-require-checker'
-    package-ecosystem: 'composer'
-    schedule:
-      interval: 'weekly'
-      day: 'saturday'
-    allow:
-      - dependency-type: 'all'
-    versioning-strategy: 'auto'
-    labels: [ 'dependencies', 'tools' ]
-    commit-message:
-      ## prefix maximum string length of 15
-      prefix: 'tools'
-      include: 'scope'
-    open-pull-requests-limit: 999
-  - directory: '/tools/composer-unused'
-    package-ecosystem: 'composer'
-    schedule:
-      interval: 'weekly'
-      day: 'saturday'
-    allow:
-      - dependency-type: 'all'
-    versioning-strategy: 'auto'
-    labels: [ 'dependencies', 'tools' ]
-    commit-message:
-      ## prefix maximum string length of 15
-      prefix: 'tools'
-      include: 'scope'
-    open-pull-requests-limit: 999
-  - directory: '/tools/php-cs-fixer'
-    package-ecosystem: 'composer'
-    schedule:
-      interval: 'weekly'
-      day: 'saturday'
-    allow:
-      - dependency-type: 'all'
-    versioning-strategy: 'auto'
-    labels: [ 'dependencies', 'tools' ]
-    commit-message:
-      ## prefix maximum string length of 15
-      prefix: 'tools'
-      include: 'scope'
-    open-pull-requests-limit: 999
-  - directory: '/tools/psalm'
-    package-ecosystem: 'composer'
-    schedule:
-      interval: 'weekly'
-      day: 'saturday'
-    allow:
-      - dependency-type: 'all'
-    versioning-strategy: 'auto'
-    labels: [ 'dependencies', 'tools' ]
-    commit-message:
-      ## prefix maximum string length of 15
-      prefix: 'tools'
-      include: 'scope'
-    open-pull-requests-limit: 999
-  - directory: '/tools/composer-normalize'
-    package-ecosystem: 'composer'
+  - package-ecosystem: 'composer'
+    directories:
+    - '/tools/composer-normalize'
+    - '/tools/composer-require-checker'
+    - '/tools/composer-unused'
+    - '/tools/php-cs-fixer'
+    - '/tools/psalm'
     schedule:
       interval: 'weekly'
       day: 'saturday'

.github/workflows/php.yml

@@ -13,8 +13,14 @@ on:
     # this means: at 23:42 on Fridays
     - cron: '42 23 * * 5'
 
+concurrency:
+  group: '${{ github.workflow }}-${{ github.ref }}'
+  cancel-in-progress: true
+
+permissions: { }
+
 env:
-  PHP_VERSION_LATEST: '8.3'
+  PHP_VERSION_LATEST: '8.4'
 
 jobs:
   tests:
@@ -28,7 +34,8 @@ jobs:
       matrix:
         os: [ ubuntu-latest ]
         php:
-          - '8.3' # highest supported
+          - '8.4' # highest supported
+          - '8.3'
           - '8.2'
           - '8.1'
           - '8.0'
@@ -37,10 +44,10 @@ jobs:
         include:
           - # highest supported Windows
             os: windows-latest
-            php: '8.3' # highest supported
+            php: '8.4' # highest supported
           - # highest supported macOS
             os: macos-latest
-            php: '8.3'
+            php: '8.4'
     timeout-minutes: 30
     steps:
       - name: Checkout
@@ -100,7 +107,7 @@ jobs:
       fail-fast: false
       matrix:
         php-version:
-          - '8.3' # highest supported
+          - '8.4' # highest supported
           - '7.3' # lowest supported
     steps:
       - name: Checkout

tools/composer-normalize/composer.json

@@ -3,7 +3,7 @@
     "description": "composer-normalize",
     "type": "metapackage",
     "require": {
-        "php": ">=7.4"
+        "php": ">=8.4"
     },
     "require-dev": {
         "ergebnis/composer-normalize": "2.48.2",

tools/composer-require-checker/composer.json

@@ -3,10 +3,10 @@
     "description": "composer-require-checker",
     "type": "metapackage",
     "require": {
-        "php": ">=7.4"
+        "php": ">=8.4"
     },
     "require-dev": {
-        "maglnet/composer-require-checker": "3.8.0||4.7.1",
+        "maglnet/composer-require-checker": "4.16.1",
         "roave/security-advisories": "dev-latest"
     },
     "prefer-stable": true,

tools/composer-unused/composer.json

@@ -3,10 +3,10 @@
     "description": "composer-unused",
     "type": "metapackage",
     "require": {
-        "php": ">=7.4"
+        "php": ">=8.4"
     },
     "require-dev": {
-        "icanhazstring/composer-unused": "0.8.11",
+        "icanhazstring/composer-unused": "0.9.5",
         "roave/security-advisories": "dev-latest"
     },
     "prefer-stable": true,

tools/php-cs-fixer/composer.json

@@ -3,10 +3,10 @@
     "description": "php-cs-fixer",
     "type": "metapackage",
     "require": {
-        "php": ">=7.4"
+        "php": ">=8.4"
     },
     "require-dev": {
-        "friendsofphp/php-cs-fixer": "3.88.2",
+        "friendsofphp/php-cs-fixer": "v3.89.0",
         "roave/security-advisories": "dev-latest"
     },
     "prefer-stable": true,

tools/psalm/composer.json

@@ -3,11 +3,11 @@
     "description": "psalm and plugins",
     "type": "metapackage",
     "require": {
-        "php": ">=7.4"
+        "php": ">=8.2"
     },
     "require-dev": {
         "roave/security-advisories": "dev-latest",
-        "vimeo/psalm": "5.16"
+        "vimeo/psalm": "5.16||6.13.1"
     },
     "prefer-stable": true,
     "config": {