Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
52 changes: 31 additions & 21 deletions .github/workflows/continuous-integration.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,34 +19,44 @@ jobs:
- "7.4"
- "8.0"
- "8.1"
- "8.2"
- "8.3"
- "8.4"
- "8.5"

steps:
- name: "Checkout"
uses: "actions/checkout@v2"
- name: Checkout
uses: actions/checkout@v4

- name: "Install PHP with extensions"
uses: "shivammathur/setup-php@v2"
- name: Setup PHP ${{ matrix.php-version }}
uses: shivammathur/setup-php@v2
with:
coverage: "none"
ini-values: "memory_limit=-1"
php-version: "${{ matrix.php-version }}"
php-version: ${{ matrix.php-version }}
coverage: xdebug
tools: composer:v2
ini-values: assert.exception=1, zend.assertions=1

- name: "Determine composer cache directory"
id: "determine-composer-cache-directory"
run: "echo \"::set-output name=directory::$(composer config cache-dir)\""
- name: Get composer cache directory
id: composer-cache
run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT

- name: "Cache dependencies installed with composer"
uses: "actions/cache@v1"
- name: Cache dependencies
uses: actions/cache@v4
with:
path: "${{ steps.determine-composer-cache-directory.outputs.directory }}"
key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('**/composer.json') }}"
restore-keys: "php-${{ matrix.php-version }}-composer-"
path: ${{ steps.composer-cache.outputs.dir }}
key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
restore-keys: ${{ runner.os }}-composer-

- name: "Install dependencies with composer"
run: "composer install --no-interaction --no-progress --no-suggest"
- name: Install dependencies
run: composer install --no-interaction --prefer-dist

- name: "Run tests with phpunit/phpunit"
run: "vendor/bin/phpunit"
- name: Run test suite
run: php -d xdebug.mode=coverage ./vendor/bin/phpunit --coverage-clover=coverage.xml

- name: Upload coverage report
uses: codecov/codecov-action@v5
with:
fail_ci_if_error: false
Comment on lines +56 to +59
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🌐 Web query:

codecov-action GitHub latest version 2025 2026

💡 Result:

As of Jan 16, 2026 the latest released tag for codecov/codecov-action is v5.5.2 (release published Dec 9, 2025). [1][2]

Sources:

  • codecov/codecov-action releases (v5.5.2). [1]
  • Codecov GitHub Marketplace (recommends @v5). [2]

🌐 Web query:

codecov-action v4 v5 token parameter required private repository

💡 Result:

Short answer: Yes — for private repositories you must provide a Codecov upload token when using either codecov-action v4 or v5. v5 adds tokenless upload options for public repos (global upload token opt-out and OIDC), but private repos still require a token. [1][2][3]

Sources:

  • codecov/codecov-action README (v4/v5 notes). [1]
  • Codecov Tokens docs — "For private repositories, all uploads require a token." [2]
  • Codecov Uploader docs — upload token notes and public-vs-private behavior. [3]

Update codecov-action to v5.

The codecov/codecov-action@v2 is outdated. The current stable version is v5 (latest v5.5.2 as of December 2025), which is the recommended version on GitHub Marketplace.

🔧 Suggested fix
       - name: Upload coverage report
-        uses: codecov/codecov-action@v2
+        uses: codecov/codecov-action@v5
         with:
           fail_ci_if_error: false
+          token: ${{ secrets.CODECOV_TOKEN }}

Note: The token parameter is required for private repositories and recommended for public repositories to avoid rate limiting. Store your token in repository secrets.

📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- name: Upload coverage report
uses: codecov/codecov-action@v2
with:
fail_ci_if_error: false
- name: Upload coverage report
uses: codecov/codecov-action@v5
with:
fail_ci_if_error: false
token: ${{ secrets.CODECOV_TOKEN }}
🧰 Tools
🪛 actionlint (1.7.10)

52-52: the runner of "codecov/codecov-action@v2" action is too old to run on GitHub Actions. update the action's version to fix this issue

(action)

🤖 Prompt for AI Agents
In @.github/workflows/continuous-integration.yml around lines 51 - 54, Update
the GitHub Action step named "Upload coverage report" to use the modern Codecov
action by changing uses: from codecov/codecov-action@v2 to the v5 release (e.g.,
codecov/codecov-action@v5) and add the required token input (token: ${{
secrets.CODECOV_TOKEN }}) for private repos (recommended for public repos as
well); keep or translate the fail behavior as appropriate for the v5 action and
ensure the step still references the same step name "Upload coverage report" and
the action identifier codecov/codecov-action so the workflow runs with the
latest stable Codecov action.


psalm-tests:
name: "Psalm Tests"
Expand All @@ -59,7 +69,7 @@ jobs:

steps:
- name: "Checkout"
uses: "actions/checkout@v2"
uses: "actions/checkout@v4"

- name: "Install PHP with extensions"
uses: "shivammathur/setup-php@v2"
Expand All @@ -73,7 +83,7 @@ jobs:
run: "echo \"::set-output name=directory::$(composer config cache-dir)\""

- name: "Cache dependencies installed with composer"
uses: "actions/cache@v1"
uses: "actions/cache@v4"
with:
path: "${{ steps.determine-composer-cache-directory.outputs.directory }}"
key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('**/composer.json') }}"
Expand Down
14 changes: 6 additions & 8 deletions .scrutinizer.yml
Original file line number Diff line number Diff line change
@@ -1,10 +1,8 @@
build:
nodes:
analysis:
tests:
override:
- php-scrutinizer-run
filter:
paths: ["src/*"]
tools:
external_code_coverage: true
php_code_coverage: true
php_sim: true
php_mess_detector: true
php_pdepend: true
php_analyzer: true
php_cpd: true
6 changes: 3 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,9 +22,9 @@ Alternatively, [download a release](https://github.com/auraphp/Aura.Auth/release

### Quality

[![Scrutinizer Code Quality](https://scrutinizer-ci.com/g/auraphp/Aura.Auth/badges/quality-score.png?b=develop-2)](https://scrutinizer-ci.com/g/auraphp/Aura.Auth/?branch=develop-2)
[![Code Coverage](https://scrutinizer-ci.com/g/auraphp/Aura.Auth/badges/coverage.png?b=develop-2)](https://scrutinizer-ci.com/g/auraphp/Aura.Auth/?branch=develop-2)
[![Build Status](https://travis-ci.org/auraphp/Aura.Auth.png?branch=develop-2)](https://travis-ci.org/auraphp/Aura.Auth)
[![Scrutinizer Code Quality](https://scrutinizer-ci.com/g/auraphp/Aura.Auth/badges/quality-score.png?b=4.x)](https://scrutinizer-ci.com/g/auraphp/Aura.Auth/)
[![codecov](https://codecov.io/gh/auraphp/Aura.Auth/branch/4.x/graph/badge.svg?token=UASDouLxyc)](https://codecov.io/gh/auraphp/Aura.Auth)
[![Continuous Integration](https://github.com/auraphp/Aura.Auth/actions/workflows/continuous-integration.yml/badge.svg?branch=4.x)](https://github.com/auraphp/Aura.Auth/actions/workflows/continuous-integration.yml)

To run the unit tests at the command line, issue `composer install` and then `vendor/bin/phpunit` at the package root. This requires [Composer](http://getcomposer.org/) to be available as `composer`.

Expand Down
1 change: 1 addition & 0 deletions codecov.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
comment: false
Loading