build.yml

name: build

on: [ push, pull_request ]

jobs:
  run:
    runs-on: ubuntu-latest
    name: PHP 8.2 Test on ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: Setup PHP
        uses: shivammathur/setup-php@v2
        with:
          php-version: 8.2
          extensions: mbstring, intl, zip, gd, apcu
          tools: composer:v2
          coverage: none

      - name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: 22 # jsdom 30 requires ^22.22.2; Vitest 4 / Vite 8 require >= 20.19 / 22.12
          cache: yarn

      - name: Install Yarn
        run: npm install -g yarn

      - name: Install JS dependencies
        run: yarn install --frozen-lockfile

      - name: Run JS tests (with coverage gate)
        run: yarn test:js:coverage

      - name: Check PHP version
        run: php -v

      - name: Check Composer version
        run: composer -V

      - name: Check PHP extensions
        run: php -m

      - name: Validate composer.json and composer.lock
        run: composer validate

      # Must run before `composer build`, which regenerates the manifest against
      # dist and would mask a stale one in the repo. The committed manifest is
      # what source installs (composer dev-* / create-project) verify against,
      # and when it drifts the site answers every request with "installation has
      # been corrupted". The test suite cannot catch it — the check is skipped
      # under APP_ENV=test — so CI is the only gate before a customer sees it.
      # No dependencies needed: make-bundle.php is plain PHP with no autoload.
      - name: Check bundle integrity manifest is current
        run: composer run bundle:check

      - name: Install dependencies
        run: composer build

      - name: Run test suite
        run: composer test:build
        env:
          PHP_CS_FIXER_IGNORE_ENV: 1