build.yml

name: Quality

on:
  push:
    branches: [master]
  pull_request:

permissions:
  contents: read

concurrency:
  group: quality-${{ github.ref }}
  cancel-in-progress: true

jobs:
  frontend:
    name: Build, unit tests, and audit
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
        with:
          node-version: 24.18.1
          cache: npm

      - run: npm ci
      - run: npm run check:js

      # Catches a version declaration drifting on the commit that drifts it,
      # rather than at the next release — or, as with package-lock.json's two
      # copies, four releases later.
      - run: npm run check:versions

      - run: npm test
      - run: npm run build
      - run: npm audit --audit-level=high

      - name: Generated artifacts must match the committed ones
        run: git diff --exit-code

  php:
    name: PHP ${{ matrix.php }} syntax and Composer
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        php: ['8.5', '8.1']
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
        with:
          php-version: ${{ matrix.php }}
          coverage: none
          tools: composer:v2

      - run: composer validate --strict --no-check-publish

      - name: PHP syntax check (templates and helpers)
        run: find view helper -type f \( -name '*.phtml' -o -name '*.php' \) -print0 | xargs -0 -n1 php -l

      - name: Validate theme configuration
        run: php -r 'if (false === parse_ini_file("config/theme.ini", true, INI_SCANNER_RAW)) { exit(1); }'