Skip to content

ci: reuse Cacti dependency caches and cover dependency changes - #8246

Merged
TheWitness merged 1 commit into
Cacti:developfrom
somethingwithproof:ci/actions-audit-develop
Oct 9, 2026
Merged

TheWitness merged 1 commit into
Cacti:developfrom
somethingwithproof:ci/actions-audit-develop

Conversation

@somethingwithproof

Copy link
Copy Markdown
Member

Cookie and CSRF test jobs currently duplicate PHP setup without using Cacti's existing Composer download cache. CSRF and installer path filters also miss changes to their Composer dependencies or shared setup action.

Reuse .github/actions/setup-php-composer with the existing locked-tests cache namespace and add the missing dependency paths. Preserve job names, PHP versions, extensions, test commands, coverage settings, permissions, and concurrency groups. This targets develop; the separate 1.2.x cache improvement is included in #8241.

The required full PHPStan check exposed three existing undefined-variable errors in the installer CLI helpers. Reuse exactly the two argument guards already present in #8012 and #7790. Offline merges with each PR are conflict-free in both orders and produce identical trees, so either merge order preserves both changes. None of the workflow files modified here is modified by those PRs or the other currently open PRs.

Validation: actionlint 1.7.12 across develop workflows; Cacti's workflow-policy checker; PHP CS Fixer; full PHPStan; all commit hooks; 20 PHP cookie/CSRF tests (166 assertions); 7 JavaScript cookie/CSRF tests; installer numeric-argument and absent-argument smoke checks. PHP checks used PHP 8.5.11 through mise and JavaScript checks used Node 22.22.2. GitHub's PHP-version matrix and Docker integration checks remain necessary before merging.

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
@somethingwithproof
somethingwithproof requested a review from a team as a code owner October 9, 2026 12:51
@somethingwithproof
somethingwithproof requested review from TheWitness and removed request for a team October 9, 2026 12:51
@TheWitness
TheWitness merged commit 1b9460b into Cacti:develop Oct 9, 2026
33 checks passed
@somethingwithproof
somethingwithproof deleted the ci/actions-audit-develop branch October 10, 2026 09:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants