Merge pull request #528 from asgrim/dep-updates

Dependency updates

Author: asgrim

.github/workflows/build-and-push-docker-image.yml

@@ -45,7 +45,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Fetch built PHAR from artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: pie-${{ github.sha }}.phar
 
@@ -90,7 +90,7 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
 
       - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest@v4
         with:
           subject-name: ghcr.io/${{ github.repository }}
           subject-digest: ${{ steps.build-and-push.outputs.digest }}

.github/workflows/build-assets.yml

@@ -56,10 +56,10 @@ jobs:
         # code, which would store attestation that `php/pie` built the PHAR, and
         # it would look genuine. So this should NOT run for PR builds.
         if: github.event_name != 'pull_request'
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest@v4
         with:
           subject-path: '${{ github.workspace }}/pie.phar'
-      - uses: actions/upload-artifact@v6
+      - uses: actions/upload-artifact@v7
         with:
           name: pie-${{ github.sha }}.phar
           path: pie.phar
@@ -124,7 +124,7 @@ jobs:
           echo "PIE_BINARY_OUTPUT=pie-${{ runner.os }}-${{ runner.arch }}.exe" >> $env:GITHUB_ENV
 
       - name: Grab the pie.phar from artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: pie-${{ github.sha }}.phar
 
@@ -151,11 +151,11 @@ jobs:
         # code, which would store attestation that `php/pie` built the binaries,
         # and it would look genuine. So this should NOT run for PR builds.
         if: github.event_name != 'pull_request'
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest@v4
         with:
           subject-path: '${{ github.workspace }}/${{ env.PIE_BINARY_OUTPUT }}'
 
-      - uses: actions/upload-artifact@v6
+      - uses: actions/upload-artifact@v7
         with:
           name: pie-${{ github.sha }}-${{ runner.os }}-${{ runner.arch }}.bin
           path: ${{ env.PIE_BINARY_OUTPUT }}

.github/workflows/docs.yml

@@ -37,11 +37,11 @@ jobs:
       - name: Build documentation
         run: .github/docs/build-docs.sh
       - name: Fetch built PHAR from artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: pie-${{ github.sha }}.phar
       - name: Fetch the executable PIEs from artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           path: executable-pie-binaries
           pattern: pie-${{ github.sha }}-*.bin

.github/workflows/release.yml

@@ -49,11 +49,11 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       - name: Fetch built PHAR from artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: pie-${{ github.sha }}.phar
       - name: Fetch the executable PIEs from artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           path: executable-pie-binaries
           pattern: pie-${{ github.sha }}-*.bin

composer.json

@@ -34,7 +34,7 @@
         "fidry/cpu-core-counter": "^1.3.0",
         "illuminate/container": "^10.49.0",
         "psr/container": "^2.0.2",
-        "symfony/console": "^6.4.32",
+        "symfony/console": "^6.4.34",
         "symfony/event-dispatcher": "^6.4.32",
         "symfony/process": "^6.4.33",
         "thephpf/attestation": "^0.0.5",
@@ -45,8 +45,8 @@
         "behat/behat": "^3.29.0",
         "bnf/phpstan-psr-container": "^1.1",
         "doctrine/coding-standard": "^14.0.0",
-        "phpstan/phpstan": "^2.1.38",
-        "phpstan/phpstan-phpunit": "^2.0",
+        "phpstan/phpstan": "^2.1.40",
+        "phpstan/phpstan-phpunit": "^2.0.16",
         "phpstan/phpstan-webmozart-assert": "^2.0",
         "phpunit/phpunit": "^10.5.63"
     },