.github/workflows/publish_docs.yml

@@ -13,7 +13,7 @@ jobs:
       - name: Setup PHP with PECL extension
         uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.1'
+          php-version: '8.2'
           extensions: xdebug
 
       - name: Cache Composer packages
@@ -37,4 +37,4 @@ jobs:
       - name: Push docs to site
         run: make push-docs
         env:
-          DOCS_RETRIEVER_HTTP_TOKEN: ${{ secrets.MR_LINTER_GITHUB_HTTP_TOKEN }}
+          DOCS_RETRIEVER_HTTP_TOKEN: ${{ secrets.DOCS_RETRIEVER_GITHUB_HTTP_TOKEN }}

.github/workflows/release.yml

@@ -9,8 +9,19 @@ jobs:
     steps:
       - uses: actions/checkout@master
 
+      - name: Setup PHP with PECL extension
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.2'
+
+      - name: Get release
+        id: get_release
+        uses: bruceadams/get-release@v1.3.2
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+
       - name: set MR-Linter version
-        run: echo "MR_LINTER_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
+        run: echo "MR_LINTER_VERSION=${{ steps.get_release.outputs.tag_name }}" >> $GITHUB_ENV
 
       - name: composer deps
         run: composer install --no-interaction --no-dev --prefer-dist --optimize-autoloader
@@ -26,11 +37,25 @@ jobs:
         with:
           args: gpg --command-fd 0 --pinentry-mode loopback -u temicska99@mail.ru --batch --detach-sign --output bin/build/mr-linter.phar.asc bin/build/mr-linter.phar
 
-      - name: release phar
-        uses: fnkr/github-action-ghr@v1
+      - name: Upload phar
+        uses: actions/upload-release-asset@v1
         env:
-          GHR_PATH: bin/build
-          GITHUB_TOKEN: ${{ secrets.MR_LINTER_GITHUB_HTTP_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          upload_url: ${{ steps.get_release.outputs.upload_url }}
+          asset_path: ./bin/build/mr-linter.phar
+          asset_name: mr-linter.phar
+          asset_content_type: application/octet-stream
+
+      - name: Upload phar.asc
+        uses: actions/upload-release-asset@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          upload_url: ${{ steps.get_release.outputs.upload_url }}
+          asset_path: ./bin/build/mr-linter.phar.asc
+          asset_name: mr-linter.phar.asc
+          asset_content_type: application/octet-stream
 
       - name: build and publish Docker Image
         env:

.github/workflows/review.yml

@@ -12,6 +12,8 @@ on:
 jobs:
   review:
 
+    if: github.actor != 'dependabot[bot]'
+
     runs-on: ubuntu-latest
 
     steps:
@@ -20,7 +22,7 @@ jobs:
       - name: Setup PHP with PECL extension
         uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.1'
+          php-version: '8.2'
           extensions: xdebug
 
       - name: Cache Composer packages
@@ -38,7 +40,7 @@ jobs:
 
       - name: Review Pull Request
         env:
-          MR_LINTER_GITHUB_HTTP_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          MR_LINTER_GITHUB_HTTP_TOKEN: ${{ secrets.MR_LINTER_GITHUB_HTTP_TOKEN }}
           MR_LINTER_TELEGRAM_BOT_TOKEN: ${{ secrets.MR_LINTER_TELEGRAM_BOT_TOKEN }}
           MR_LINTER_TELEGRAM_CHAT_ID: ${{ secrets.MR_LINTER_TELEGRAM_CHAT_ID }}
           MR_LINTER_TIMEZONE: 'Europe/Moscow'

.github/workflows/security.yml

@@ -0,0 +1,18 @@
+name: Security
+
+on:
+  push:
+    branches: [ master ]
+  pull_request:
+    branches: [ master ]
+
+jobs:
+  security:
+    name: Local PHP Security Checker
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Local PHP Security Checker
+        uses: docker://pplotka/local-php-security-checker-github-actions

.github/workflows/testing.yml

@@ -2,9 +2,9 @@ name: Testing
 
 on:
   push:
-    branches: [ master, 'dev' ]
+    branches: [ master ]
   pull_request:
-    branches: [ master, 'dev' ]
+    branches: [ master ]
 
 jobs:
   testing:
@@ -17,7 +17,7 @@ jobs:
       - name: Setup PHP with PECL extension
         uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.1'
+          php-version: '8.2'
           extensions: xdebug
 
       - name: Validate composer.json

.mr-linter.yml

@@ -1,12 +1,29 @@
 rules:
-  "@mr-linter/has_any_labels_of":
+  "@mr-linter/has_any_labels":
     labels:
       - Feature
       - Bug
       - Docs
       - Tests
       - Optimization
 
+  "@mr-linter/description_template":
+    - definition: description must have list of features
+      template: |
+        ## Added
+        {text_multiline}
+      when:
+        labels:
+          has: "Feature"
+
+    - definition: description must have list of fixed bugs
+      template: |
+        ## Fixed
+        {text_multiline}
+      when:
+        labels:
+          has: "Bug"
+
   "@mr-linter/title_must_starts_with_any_prefix":
     prefixes:
       - '[Feature]'
@@ -17,7 +34,7 @@ rules:
 
   "@mr-linter/description_not_empty": {}
 
-  "@mr-linter/update_changelog":
+  "@mr-linter/changelog_has_new_release":
     when:
       targetBranch:
         equals: "master"
@@ -26,6 +43,10 @@ rules:
           - '[Tests]'
           - '[Docs]'
 
+  "@mr-linter/no_ssh_keys":
+    stopOnFirstFailure: true
+    critical: false
+
   "@mr-linter/has_changes":
     - changes:
       - file: "src/Version.php"
@@ -38,33 +59,23 @@ rules:
             - '[Tests]'
             - '[Docs]'
 
+  "@mr-linter/disable_file_extensions":
+    extensions:
+      - pem
+      - pub
+
   custom:
     - definition: "Branch must be in kebab-case"
       rules:
         sourceBranch:
           isKebabCase: true
 
-    - definition: "Labels must be in StudlyCase"
-      rules:
-        labels:
-          $all:
-            isStudlyCase: true
-
-    - definition: "Description must have list of fixed bugs"
+    - definition: "Split feature / bug PR"
       rules:
-        descriptionMarkdown:
-          containsHeading2: "Fixed"
-      when:
-        labels:
-          has: "Bug"
-
-    - definition: "Description must have list of features"
-      rules:
-        descriptionMarkdown:
-          containsHeading2: "Added"
-      when:
         labels:
-          has: "Feature"
+          notIntersect:
+            - Feature
+            - Bug
 
 notifications:
   channels:
@@ -77,7 +88,7 @@ notifications:
     lint_finished:
       channel: 'dev'
       template: |
-        👀 Review on PR "{{ request.title }}" by {{ request.author.login }} at {{ request.createdAt.format('Y-m-d H:i') }}
+        👀 Review on PR "{{ request.title | raw }}" by {{ request.author.login }} at {{ request.createdAt.format('Y-m-d H:i') }}
         
         🌲 {{ request.sourceBranch }} ➡ {{ request.targetBranch }}
         
@@ -86,10 +97,28 @@ notifications:
         📉 Notes: {{ result.notes.count }}
         
         {% for note in result.notes %}
-        - {{ note.description }}
+        - {{ note.description | raw }}
         {% endfor %}
 
 ci:
   github_actions:
     credentials:
       token: 'env(MR_LINTER_GITHUB_HTTP_TOKEN)'
+
+comments:
+  strategy: 'single'
+  messages:
+    - template: |
+        I found {{ result.notes.count }} notes in your Pull Request:
+        {% for note in result.notes %}
+        - {{ note.description | raw }}
+        {% endfor %}
+      when:
+        result.notes:
+          isEmpty: false
+
+    - template: |
+        I didn't find any notes in your Pull Request.
+      when:
+        result.notes:
+          isEmpty: true