Upgrade CI and deps (#308)

* ci: remove old artifacts

* ci: run all php versions

* feature: implement selectPrefix
closes #13

* tweak: ignore unused function parameter

* build: update dependencies (for gt/http compatibility)

* ci: upgrade workflows, fix security issue

---------

Co-authored-by: Greg Bowler <[email protected]>

Author: g105b

.github/workflows/ci.yml

@@ -1,13 +1,18 @@
 name: CI
 
-on: [push]
+on: [push, pull_request]
+
+permissions:
+  contents: read
+  actions: read
+  id-token: none
 
 jobs:
   composer:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        php: [ 8.1, 8.2, 8.3, 8.4 ]
+        php: [ 8.3, 8.4 ]
 
     steps:
       - uses: actions/checkout@v4
@@ -24,7 +29,7 @@ jobs:
           php_version: ${{ matrix.php }}
 
       - name: Archive build
-        run: mkdir /tmp/github-actions/ && tar -cvf /tmp/github-actions/build.tar ./
+        run: mkdir /tmp/github-actions/ && tar --exclude=".git" -cvf /tmp/github-actions/build.tar ./
 
       - name: Upload build archive for test runners
         uses: actions/upload-artifact@v4
@@ -37,7 +42,7 @@ jobs:
     needs: [ composer ]
     strategy:
       matrix:
-        php: [ 8.1, 8.2, 8.3, 8.4 ]
+        php: [ 8.3, 8.4 ]
 
     outputs:
       coverage: ${{ steps.store-coverage.outputs.coverage_text }}
@@ -56,7 +61,6 @@ jobs:
         env:
           XDEBUG_MODE: cover
         with:
-          version: 10
           php_version: ${{ matrix.php }}
           php_extensions: xdebug
           coverage_text: _coverage/coverage.txt
@@ -73,9 +77,11 @@ jobs:
     needs: [ phpunit ]
     strategy:
       matrix:
-        php: [ 8.1, 8.2, 8.3, 8.4 ]
+        php: [ 8.3, 8.4 ]
 
     steps:
+      - uses: actions/checkout@v4
+
       - uses: actions/download-artifact@v4
         with:
           name: code-coverage-${{ matrix.php }}-${{ github.run_number }}
@@ -85,16 +91,14 @@ jobs:
         run: cat "_coverage/coverage.txt"
 
       - name: Upload to Codecov
-        uses: codecov/codecov-action@v4
-        with:
-          token: ${{ secrets.CODECOV_TOKEN }}
+        uses: codecov/codecov-action@v5
 
   phpstan:
     runs-on: ubuntu-latest
     needs: [ composer ]
     strategy:
       matrix:
-        php: [ 8.1, 8.2, 8.3, 8.4 ]
+        php: [ 8.3, 8.4 ]
 
     steps:
       - uses: actions/download-artifact@v4
@@ -110,14 +114,13 @@ jobs:
         with:
           php_version: ${{ matrix.php }}
           path: src/
-          level: 6
 
   phpmd:
     runs-on: ubuntu-latest
     needs: [ composer ]
     strategy:
       matrix:
-        php: [ 8.1, 8.2, 8.3, 8.4 ]
+        php: [ 8.3, 8.4 ]
 
     steps:
       - uses: actions/download-artifact@v4
@@ -141,7 +144,7 @@ jobs:
     needs: [ composer ]
     strategy:
       matrix:
-        php: [ 8.1, 8.2, 8.3, 8.4 ]
+        php: [ 8.3, 8.4 ]
 
     steps:
       - uses: actions/download-artifact@v4
@@ -162,12 +165,15 @@ jobs:
   remove_old_artifacts:
     runs-on: ubuntu-latest
 
+    permissions:
+      actions: write
+
     steps:
       - name: Remove old artifacts for prior workflow runs on this repository
         env:
           GH_TOKEN: ${{ github.token }}
         run: |
-          gh api "/repos/${{ github.repository }}/actions/artifacts?name=build-artifact" | jq ".artifacts[] | select(.name | startswith(\"build-artifact\")) | .id" > artifact-id-list.txt
+          gh api "/repos/${{ github.repository }}/actions/artifacts" | jq ".artifacts[] | select(.name | startswith(\"build-artifact\")) | .id" > artifact-id-list.txt
           while read id
           do
             echo -n "Deleting artifact ID $id ... "

composer.json

@@ -4,9 +4,9 @@
 	"license": "MIT",
 
 	"require": {
-		"php": ">=8.1",
-		"phpgt/http": "^1.1",
-		"phpgt/json": "^1.2"
+		"php": ">=8.3",
+		"phpgt/http": "1.*",
+		"phpgt/json": "^2.1"
 	},
 
 	"require-dev": {