Merge branch 'develop' into 'main'

Develop

See merge request ldc-web/shared-ci!26

build/composer.yml

@@ -1,23 +1,27 @@
 composer-build:
     stage: build
-    image: $CI_REGISTRY/ldc-web/projets/ldc-web-images-docker/uwil-qa-8.5:latest
-    before_script:
-        - composer config gitlab-token.lab.s-web.fr $CI_DEPLOY_USER $CI_DEPLOY_PASSWORD
+    image: composer:2.10
     cache:
+        key:
+            files:
+                - composer.lock
         paths:
             - vendor/
+        policy: pull-push
+    before_script:
+        - composer config gitlab-token.lab.s-web.fr "${CI_DEPLOY_USER}" "${CI_DEPLOY_PASSWORD}"
     script:
-        - composer install --no-dev --optimize-autoloader --classmap-authoritative --no-scripts
+        - composer install --ignore-platform-reqs --no-interaction --no-plugins --no-scripts --no-dev --prefer-dist
     artifacts:
-      expose_as: 'vendor'
-      paths:
-          - vendor
-    allow_failure: false
+        paths:
+            - vendor/
+        expire_in: 1h
     dependencies:
         - composer-security
     needs:
         - job: composer-security
           optional: true
+    allow_failure: false
     rules:
         - if: $CI_COMMIT_BRANCH == "trunk" || $CI_COMMIT_BRANCH == "master" || $CI_COMMIT_BRANCH == "main"
-        - if: $CI_COMMIT_TAG != null
+        - if: $CI_COMMIT_TAG != null

lint/phpcs.yml

@@ -1,6 +1,6 @@
 phpcs:
     stage: lint
-    image: $CI_REGISTRY/ldc-web/projets/ldc-web-images-docker/uwil-qa-8.5:latest
+    image: composer:2.10
     before_script:
         - composer config gitlab-token.lab.s-web.fr $CI_DEPLOY_USER $CI_DEPLOY_PASSWORD
         - composer install --no-scripts

lint/phpstan.yml

@@ -16,7 +16,12 @@ spec:
 
 phpstan:
     stage: lint
-    image: $CI_REGISTRY/ldc-web/projets/ldc-web-images-docker/uwil-qa-8.5:latest
+    image: composer:2.10
+    cache:
+      key: phpstan-cache-${CI_COMMIT_REF_SLUG}
+      paths:
+          - vendor/
+          - .phpstan-cache/
     variables:
         DB_CONNECTION: "$[[ inputs.db_connection ]]"
         DB_DATABASE: "$[[ inputs.db_database ]]"
@@ -24,7 +29,7 @@ phpstan:
         SESSION_DRIVER: "$[[ inputs.session_driver ]]"
     before_script:
         - composer config gitlab-token.lab.s-web.fr $CI_DEPLOY_USER $CI_DEPLOY_PASSWORD
-        - composer install --no-scripts
+        - composer install --no-scripts --no-interaction
         - |
           if [ "$[[ inputs.larastan_bootstrap ]]" = "true" ]; then
             cp .env.example .env

lint/rector.yml

@@ -8,14 +8,15 @@ spec:
 
 rector:
     stage: lint
-    image: $CI_REGISTRY/ldc-web/projets/ldc-web-images-docker/uwil-qa-8.5:latest
+    image: composer:2.10
     cache:
       key: rector-cache-$CI_COMMIT_REF_SLUG
       paths:
+        - vendor/
         - .rector-cache/
     before_script:
         - composer config gitlab-token.lab.s-web.fr $CI_DEPLOY_USER $CI_DEPLOY_PASSWORD
-        - composer install --no-scripts
+        - composer install --no-scripts --no-interaction
     script:
         - vendor/bin/rector process --dry-run --no-progress-bar --output-format=junit > rector-report.xml
     artifacts:

security/composer.yml

@@ -1,8 +1,8 @@
 composer-security:
     stage: security
-    image: $CI_REGISTRY/ldc-web/projets/ldc-web-images-docker/uwil-qa-8.5:latest
+    image: composer:2.10
     script:
-        - local-php-security-checker --format=json --path=./composer.lock > composer-security-checker-report.json
+        - composer audit --locked --format=json > composer-security-checker-report.json || true
     artifacts:
         when: on_failure
         expose_as: 'composer-security-checker'

security/npm.yml

@@ -1,6 +1,6 @@
 npm-security:
     stage: security
-    image: node:17.9.1
+    image: node:24
     before_script: 
         - npm install --location=global audit-ci@^6
     script: