Bump squizlabs/php_codesniffer from 3.13.5 to 4.0.1 #6
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Composer Dependency Updates | |
| on: | |
| pull_request: | |
| paths: | |
| - 'composer.json' | |
| - 'composer.lock' | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| jobs: | |
| composer-diff: | |
| name: Composer Lock Diff | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| fetch-depth: 0 # Required for IonBazan/composer-diff-action | |
| - name: Setup PHP and tools | |
| uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1 | |
| - name: Audit Composer dependencies | |
| run: composer audit --abandoned=report | |
| - name: Generate composer.lock diff | |
| id: composer-diff | |
| uses: IonBazan/composer-diff-action@3140157575f6a67799cc80248ae35f5fb303ab15 # v1.2.0 | |
| - name: Post diff as sticky comment | |
| uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4 | |
| # An empty diff result will break this action. | |
| if: ${{ steps.composer_diff.outputs.composer_diff_exit_code != 0 }} | |
| with: | |
| header: composer-diff # Creates a collapsed comment with the report | |
| message: | | |
| <details> | |
| <summary>Composer package changes</summary> | |
| ${{ steps.composer_diff.outputs.composer_diff }} | |
| </details> |