chore(deps): update netresearch/.github digest to fef56c7#80
Closed
renovate[bot] wants to merge 1 commit into
Closed
chore(deps): update netresearch/.github digest to fef56c7#80renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/netresearch-.github-digest
branch
from
9efa302 to
3c69273
Compare
|
CybotTM
added a commit
that referenced
this pull request
Jun 7, 2026
- ci.yml: fold the code-quality + coverage jobs into the org-standard php-ci.yml reusable (PHPStan + PHP-CS-Fixer + PHPUnit-with-coverage + Codecov). Removes the per-repo codecov-action reference that Renovate kept bumping (#81, #82). The bespoke 'tests' job stays inline because the reusable matrices on PHP version only and cannot express this plugin's Symfony x Composer x prefer-lowest matrix or its network-test env. - auto-merge-deps.yml: replace the inlined copy with the reusable auto-merge-deps.yml caller (matches the rest of the org). - release.yml: drop the SHA pin on the intra-org reusable (release-composer-package.yml@<sha> -> @main). Intra-org reusable refs must track @main, not a pinned digest (stops Renovate #80). Signed-off-by: Sebastian Mendel <info@sebastianmendel.de>
CybotTM
added a commit
that referenced
this pull request
Jun 7, 2026
## What Migrates this repo's CI to the org's reusable workflows and removes the SHA pin on an intra-org reusable. - **`ci.yml`** — the `code-quality` (PHPStan + PHP-CS-Fixer) and `coverage` (PHPUnit + Codecov) jobs are folded into one `netresearch/.github/.github/workflows/php-ci.yml@main` caller. The bespoke `tests` job stays **inline** — the reusable matrices on PHP version only and cannot express this plugin's `PHP × Symfony × Composer × prefer-lowest` matrix or the `COMPOSER_AUTH`/github-oauth network-test env (see #77). - **`auto-merge-deps.yml`** — replaces the inlined copy with the reusable `auto-merge-deps.yml` caller. - **`release.yml`** — drops the SHA pin on the intra-org reusable (`release-composer-package.yml@444271f… # main` → `@main`). ## Why Renovate was opening per-repo PRs for things that should be centrally managed: - `codecov/codecov-action` bumps (#81, #82) — now gone, because the action lives once in `php-ci.yml`. - `netresearch/.github` digest bump (#80) — intra-org reusable refs must track `@main`, never a pinned digest. With the pin removed, Renovate won't re-pin (`config:recommended` doesn't add digest pins). Closes #80, #81, #82. ## Note on the inline `tests` job It still pins `actions/checkout`, `setup-php`, `actions/cache` — Renovate will still bump *those* occasionally. This PR stops the **codecov** churn and the intra-org SHA pin; it does not (and cannot, without losing the bespoke matrix) eliminate every per-repo action bump. ## Validation `yamllint` (org config), `actionlint`, `zizmor` clean on all three changed files. No intra-org SHA pins and no inline `codecov-action` remain.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
444271f→fef56c7Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.