From 5176ff3f5f395efb17da5e82dd33acef1faf7082 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20Bundyra?= Date: Thu, 29 Jan 2026 08:33:59 +0100 Subject: [PATCH 1/3] test: Composer - add --no-security-blocking We want to ensure full compatibility with all minor PHPUnit versions. Therefore, we add a flag to Composer during tests so even vulnerable versions can be installed and tested. --- .github/workflows/tests.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 8b87748..875c14b 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -718,7 +718,7 @@ jobs: php-version: ${{ matrix.php-version }} - name: Install Dependencies - run: composer require phpunit/phpunit:~${{ matrix.phpunit-version }} --no-interaction --no-progress + run: composer require phpunit/phpunit:~${{ matrix.phpunit-version }} --no-interaction --no-progress --no-security-blocking - name: PHPUnit run: vendor/bin/phpunit From 194ef544d78040a0448bd624861b9330109ff8d3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20Bundyra?= Date: Thu, 29 Jan 2026 08:41:01 +0100 Subject: [PATCH 2/3] set ENV instead, as flag has been added to latest version of composer --- .github/workflows/tests.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 875c14b..aac84ad 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -716,9 +716,11 @@ jobs: uses: shivammathur/setup-php@v2 with: php-version: ${{ matrix.php-version }} + env: + COMPOSER_NO_SECURITY_BLOCKING: 1 - name: Install Dependencies - run: composer require phpunit/phpunit:~${{ matrix.phpunit-version }} --no-interaction --no-progress --no-security-blocking + run: composer require phpunit/phpunit:~${{ matrix.phpunit-version }} --no-interaction --no-progress - name: PHPUnit run: vendor/bin/phpunit From b834e7ab4bbab61523fd32d026a421912e8e2229 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20Bundyra?= Date: Thu, 29 Jan 2026 08:49:02 +0100 Subject: [PATCH 3/3] move the env to install secion --- .github/workflows/tests.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index aac84ad..c56d0ad 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -716,11 +716,11 @@ jobs: uses: shivammathur/setup-php@v2 with: php-version: ${{ matrix.php-version }} - env: - COMPOSER_NO_SECURITY_BLOCKING: 1 - name: Install Dependencies run: composer require phpunit/phpunit:~${{ matrix.phpunit-version }} --no-interaction --no-progress + env: + COMPOSER_NO_SECURITY_BLOCKING: 1 - name: PHPUnit run: vendor/bin/phpunit