Fix integration tests skipped in parallel mode + CI hardening

The skip guard ->skip(!pebbleAvailable(), ...) evaluated pebbleAvailable() in
the orchestrator process before Pest workers were spawned, caching false and
freezing all tests as skipped. Using a closure ->skip(fn () => ...) defers
evaluation to each worker where the env var is live.

Also: add PEBBLE_WFE_NONCEREJECT=0 (eliminates 5% nonce rejection) and a
Docker health check so GitHub Actions confirms Pebble is ready before any step
runs rather than relying solely on the wait loop.

Author: bashgeek

.github/workflows/tests.yml

@@ -25,6 +25,12 @@ jobs:
         env:
           PEBBLE_VA_NOSLEEP: "1"
           PEBBLE_VA_ALWAYS_VALID: "1"
+          PEBBLE_WFE_NONCEREJECT: "0"
+        options: >-
+          --health-cmd "curl -sk https://localhost:14000/dir > /dev/null || exit 1"
+          --health-interval 5s
+          --health-timeout 3s
+          --health-retries 10
 
     steps:
       - uses: actions/checkout@v6

tests/Integration/CoyoteCertIssueTest.php

@@ -20,7 +20,7 @@
     expect($cert->fullchain)->toContain('-----BEGIN CERTIFICATE-----');
     expect($cert->domains)->toBe(['test.example.com']);
     expect(openssl_x509_parse($cert->certificate))->toBeArray();
-})->skip(!pebbleAvailable(), 'Pebble not running — skipping integration tests');
+})->skip(fn () => !pebbleAvailable(), 'Pebble not running — skipping integration tests');
 
 it('issues a certificate with an EC P-256 account key', function () {
     $cert = CoyoteCert::with(pebble())
@@ -32,7 +32,7 @@
         ->issue();
 
     expect($cert->certificate)->toContain('-----BEGIN CERTIFICATE-----');
-})->skip(!pebbleAvailable(), 'Pebble not running — skipping integration tests');
+})->skip(fn () => !pebbleAvailable(), 'Pebble not running — skipping integration tests');
 
 it('reuses an existing account on a second issue', function () {
     $storage = new InMemoryStorage();
@@ -54,7 +54,7 @@
 
     expect($first->certificate)->not->toBe($second->certificate);
     expect($second->certificate)->toContain('-----BEGIN CERTIFICATE-----');
-})->skip(!pebbleAvailable(), 'Pebble not running — skipping integration tests');
+})->skip(fn () => !pebbleAvailable(), 'Pebble not running — skipping integration tests');
 
 it('issueOrRenew returns the cached cert when still valid', function () {
     $storage = new InMemoryStorage();
@@ -74,7 +74,7 @@
         ->issueOrRenew(daysBeforeExpiry: 1);
 
     expect($returned->certificate)->toBe($issued->certificate);
-})->skip(!pebbleAvailable(), 'Pebble not running — skipping integration tests');
+})->skip(fn () => !pebbleAvailable(), 'Pebble not running — skipping integration tests');
 
 it('issues a certificate with the shortlived profile', function () {
     $cert = CoyoteCert::with(pebble())
@@ -86,4 +86,4 @@
         ->issue();
 
     expect($cert->certificate)->toContain('-----BEGIN CERTIFICATE-----');
-})->skip(!pebbleAvailable(), 'Pebble not running — skipping integration tests');
+})->skip(fn () => !pebbleAvailable(), 'Pebble not running — skipping integration tests');

tests/Integration/CoyoteCertRevokeTest.php

@@ -19,7 +19,7 @@
         ->revoke($cert);
 
     expect($result)->toBeTrue();
-})->skip(!pebbleAvailable(), 'Pebble not running — skipping integration tests');
+})->skip(fn () => !pebbleAvailable(), 'Pebble not running — skipping integration tests');
 
 it('revokes with a specific reason code', function () {
     $storage = new InMemoryStorage();
@@ -36,7 +36,7 @@
         ->revoke($cert, reason: 1); // keyCompromise
 
     expect($result)->toBeTrue();
-})->skip(!pebbleAvailable(), 'Pebble not running — skipping integration tests');
+})->skip(fn () => !pebbleAvailable(), 'Pebble not running — skipping integration tests');
 
 it('throws when revoke is called without storage', function () {
     $storage = new InMemoryStorage();
@@ -50,4 +50,4 @@
 
     expect(fn () => CoyoteCert::with(pebble())->revoke($cert))
         ->toThrow(\CoyoteCert\Exceptions\LetsEncryptClientException::class);
-})->skip(!pebbleAvailable(), 'Pebble not running — skipping integration tests');
+})->skip(fn () => !pebbleAvailable(), 'Pebble not running — skipping integration tests');