minor #1629 [CI] Add configurable dependency version validation script (OskarStark)

This PR was squashed before being merged into the main branch.

Discussion
----------

[CI] Add configurable dependency version validation script

| Q             | A
| ------------- | ---
| Bug fix?      | no
| New feature?  | no
| Docs?         | no
| Issues        | --
| License       | MIT

Commits
-------

bf117c2 [CI] Add configurable dependency version validation script

Author: OskarStark

.github/scripts/validate-dependency-versions.sh

@@ -0,0 +1,46 @@
+#!/bin/bash
+#
+# Validates that all components and bridges use the required version of a given package in require-dev.
+#
+# Usage: validate-dependency-versions.sh PACKAGE REQUIRED_VERSION
+#
+# Example: validate-dependency-versions.sh phpunit/phpunit "^11.5.53"
+#
+# Checks all composer.json files under src/ and ensures that if the given package is
+# present in require-dev, it is set to exactly the required version.
+
+set -e
+
+if [[ $# -ne 2 ]]; then
+    echo "Usage: $0 PACKAGE REQUIRED_VERSION"
+    exit 1
+fi
+
+PACKAGE="$1"
+REQUIRED_VERSION="$2"
+ERRORS=0
+
+echo "Validating ${PACKAGE} version in all composer.json files..."
+echo ""
+
+while IFS= read -r -d '' composer_file; do
+    package_version=$(jq -r --arg pkg "$PACKAGE" '.["require-dev"][$pkg] // empty' "$composer_file" 2>/dev/null)
+
+    if [[ -n "$package_version" ]]; then
+        if [[ "$package_version" != "$REQUIRED_VERSION" ]]; then
+            echo "::error file=${composer_file}::${PACKAGE} version must be \"${REQUIRED_VERSION}\" but found \"${package_version}\" in ${composer_file}"
+            ERRORS=$((ERRORS + 1))
+        else
+            echo "✓ ${composer_file}: ${PACKAGE} = \"${package_version}\""
+        fi
+    fi
+done < <(find src/ -name "composer.json" -not -path "*/vendor/*" -print0 | sort -z)
+
+if [[ $ERRORS -gt 0 ]]; then
+    echo ""
+    echo "::error::Found $ERRORS composer.json file(s) with incorrect ${PACKAGE} version (expected \"${REQUIRED_VERSION}\")"
+    exit 1
+fi
+
+echo ""
+echo "All composer.json files use the required ${PACKAGE} version (${REQUIRED_VERSION})!"

.github/scripts/validate-phpunit-version.sh

@@ -12,7 +12,7 @@ on:
             - '.github/scripts/validate-bridge-splitsh.sh'
             - '.github/scripts/validate-bridge-files.sh'
             - '.github/scripts/validate-bridge-type.sh'
-            - '.github/scripts/validate-phpunit-version.sh'
+            - '.github/scripts/validate-dependency-versions.sh'
     pull_request:
         paths:
             - 'src/*/src/Bridge/**/*'
@@ -24,7 +24,7 @@ on:
             - '.github/scripts/validate-bridge-splitsh.sh'
             - '.github/scripts/validate-bridge-files.sh'
             - '.github/scripts/validate-bridge-type.sh'
-            - '.github/scripts/validate-phpunit-version.sh'
+            - '.github/scripts/validate-dependency-versions.sh'
 
 concurrency:
     group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
@@ -141,12 +141,24 @@ jobs:
             - name: Validate Mate bridges have correct type
               run: .github/scripts/validate-bridge-type.sh mate
 
-    validate_phpunit_version:
-        name: PHPUnit Version
+    validate_dependency_versions:
+        name: "${{ matrix.package }} ${{ matrix.version }}"
         runs-on: ubuntu-latest
+        strategy:
+            fail-fast: false
+            matrix:
+                include:
+                    - package: phpunit/phpunit
+                      version: "^11.5.53"
+                    - package: phpstan/phpstan
+                      version: "^2.1"
+                    - package: phpstan/phpstan-phpunit
+                      version: "^2.0"
+                    - package: phpstan/phpstan-strict-rules
+                      version: "^2.0"
         steps:
             - name: Checkout
               uses: actions/checkout@v6
 
-            - name: Validate phpunit/phpunit version in all composer.json files
-              run: .github/scripts/validate-phpunit-version.sh
+            - name: Validate ${{ matrix.package }} version in all composer.json files
+              run: .github/scripts/validate-dependency-versions.sh "${{ matrix.package }}" "${{ matrix.version }}"

.github/workflows/validation.yaml

@@ -62,7 +62,7 @@
         "symfony/uid": "^7.3|^8.0"
     },
     "require-dev": {
-        "phpstan/phpstan": "^2.1.17",
+        "phpstan/phpstan": "^2.1",
         "phpstan/phpstan-phpunit": "^2.0",
         "phpstan/phpstan-strict-rules": "^2.0",
         "phpunit/phpunit": "^11.5.53",