Merge pull request #302 from mimmi20/dependabot/composer/master/minor…

…-patch-dependencies-ec7da5bd3e

composer(deps-dev): bump the minor-patch-dependencies group with 2 updates

.github/renovate.json5

@@ -1,32 +1,33 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
 
-  "extends": ["mergeConfidence:all-badges"],
-
-  "enabled": true,
-
-  "assignees": [
-    "mimmi20"
+  "extends": [
+    ":assignAndReview(mimmi20)",
+    ":automergeDisabled",
+    ":combinePatchMinorReleases",
+    ":disableDependencyDashboard",
+    ":disableRateLimiting",
+    ":enableRenovate",
+    ":enableVulnerabilityAlertsWithLabel(security)",
+    ":gitSignOff",
+    ":ignoreUnstable",
+    ":label(dependencies)",
+    ":maintainLockFilesDisabled",
+    ":prImmediately",
+    ":rebaseStalePrs",
+    ":semanticCommitsDisabled",
+    ":separateMajorReleases",
+    ":timezone(Europe/Berlin)",
+    ":updateNotScheduled",
+    "group:allDigest",
+    "group:allNonMajor",
+    "security:openssf-scorecard",
+    "mergeConfidence:all-badges"
   ],
-  "automerge": false,
-  "branchConcurrentLimit": 0,
-  "commitBody": "Signed-off-by: {{{gitAuthor}}}",
+
   "commitBodyTable": true,
   "configMigration": true,
-  "configWarningReuseIssue": false,
-  "dependencyDashboard": false,
-  "dependencyDashboardApproval": false,
-  "dependencyDashboardOSVVulnerabilitySummary": "all",
-  // "enabledManagers": ["composer", "github-actions", "npm"],
-  "ignoreTests": false,
-  "ignoreUnstable": true,
-  "internalChecksFilter": "strict",
-  "labels": [
-    "dependencies"
-  ],
-  "lockFileMaintenance": {
-    "enabled": false
-  },
+  "ignorePaths": ["**/node_modules/**", "**/vendor/**"],
   "osvVulnerabilityAlerts": true,
   "platformAutomerge": false,
   "prBodyColumns": [
@@ -41,39 +42,11 @@
     "Update": "{{{updateType}}}",
     "Change": "[{{#if displayFrom}}`{{{displayFrom}}}` -> {{else}}{{#if currentValue}}`{{{currentValue}}}` -> {{/if}}{{/if}}{{#if displayTo}}`{{{displayTo}}}`{{else}}`{{{newValue}}}`{{/if}}]({{#if depName}}https://renovatebot.com/diffs/npm/{{replace '/' '%2f' depName}}/{{{currentVersion}}}/{{{newVersion}}}{{/if}})"
   },
-  "prConcurrentLimit": 0,
-  "prCreation": "immediate",
-  "prHourlyLimit": 0,
   "rangeStrategy": "bump",
-  "rebaseWhen": "behind-base-branch",
-  "reviewers": [
-    "mimmi20"
-  ],
   "rollbackPrs": true,
-  "schedule": ["at 4:00 am on Saturday"],
-  "semanticCommits": "disabled",
-  "separateMajorMinor": true,
-  "separateMinorPatch": false,
-  "timezone": "Europe/Berlin",
-  "updateLockFiles": false,
-  "updateNotScheduled": false,
+  "schedule": ["before 4am on Saturday"],
   "packageRules": [
     {
-      "groupName": "PHP",
-      "matchDepNames": ["php"],
-      "allowedVersions": "~8.1.0 || ~8.2.0 || ~8.3.0 || ~8.4.0",
-      "ignoreUnstable": false,
-      "rangeStrategy": "widen"
-    },
-    {
-      "groupName": "Node",
-      "matchDepNames": ["node"],
-      "allowedVersions": "~19.5.0 || ~20.0.0 || ~21.0.0 || ~22.0.0",
-      "ignoreUnstable": false,
-      "rangeStrategy": "widen"
-    },
-    {
-      "groupName": "devDependencies",
       "matchDepTypes": ["devDependencies", "peerDependencies"],
       "rangeStrategy": "widen"
     },
@@ -89,9 +62,5 @@
         "patch"
       ]
     }
-  ],
-  "vulnerabilityAlerts": {
-    "enabled": true,
-    "labels": ["security"]
-  }
+  ]
 }

.github/workflows/lint-workflow-files.yml

@@ -0,0 +1,27 @@
+name: "Lint GitHub Actions workflows"
+
+on:
+  pull_request:
+    paths:
+      - ".github/**"
+
+jobs:
+  actionlint:
+    runs-on: "ubuntu-22.04"
+
+    steps:
+      - name: "Checkout"
+        uses: "actions/checkout@v4"
+        with:
+          # Disabling shallow clone is recommended for improving relevancy of reporting
+          fetch-depth: 0
+          lfs: false
+          persist-credentials: false
+
+      - name: "Check workflow files"
+        uses: "raven-actions/actionlint@v1"
+        with:
+          matcher: true
+          cache: true
+          fail-on-error: false
+          flags: "-ignore SC2086"

.github/workflows/renovate-config-validator.yml

@@ -0,0 +1,20 @@
+name: "Validate Config for Renovate"
+
+on:
+  - pull_request
+  - push
+
+jobs:
+  validate:
+    runs-on: "ubuntu-22.04"
+
+    steps:
+      - name: "Checkout"
+        uses: "actions/checkout@v4"
+        with:
+          # Disabling shallow clone is recommended for improving relevancy of reporting
+          fetch-depth: 0
+          lfs: false
+          persist-credentials: false
+
+      - uses: "suzuki-shunsuke/github-action-renovate-config-validator@v1.0.1"

composer.json

@@ -38,8 +38,8 @@
     "laminas/laminas-servicemanager": "^3.22.1",
     "mimmi20/coding-standard": "^5.2.33",
     "nikic/php-parser": "^4.19.1 || ^5.0.2",
-    "phpstan/extension-installer": "^1.3.1",
-    "phpstan/phpstan": "^1.11.3",
+    "phpstan/extension-installer": "^1.4.0",
+    "phpstan/phpstan": "^1.11.4",
     "phpstan/phpstan-deprecation-rules": "^1.2.0",
     "phpstan/phpstan-phpunit": "^1.4.0",
     "phpunit/phpunit": "^10.5.20",