build: manage psalm and box via composer in tools/ instead of committed phars

.github/dependabot.yml

@@ -12,6 +12,20 @@ updates:
     commit-message:
       prefix: "deps"
       include: "scope"
+  - package-ecosystem: "composer"
+    directories:
+      - "/tools/psalm"
+      - "/tools/box"
+    schedule:
+      interval: "weekly"
+      day: "tuesday"
+      time: "09:00"
+      timezone: "Europe/Rome"
+    open-pull-requests-limit: 5
+    versioning-strategy: increase
+    commit-message:
+      prefix: "deps"
+      include: "scope"
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:

.github/workflows/build.yml

@@ -37,7 +37,9 @@ jobs:
       id: composer-cache
       uses: actions/cache@v6
       with:
-        path: vendor
+        path: |
+          vendor
+          tools/psalm/vendor
         key: ${{ runner.os }}-php-${{ hashFiles('**/composer.lock') }}
         restore-keys: |
           ${{ runner.os }}-php-
@@ -47,7 +49,9 @@ jobs:
 
     - name: Static Analysis
       if: ${{ matrix.php-versions  == '8.0' }}
-      run: ./bin/psalm.phar --no-cache
+      run: |
+        composer install --prefer-dist -d tools/psalm
+        tools/psalm/vendor/bin/psalm --no-cache
 
     - name: Test with coverage
       if: ${{ matrix.php-versions  == '8.0' }}
@@ -86,8 +90,11 @@ jobs:
       - name: Install dependencies
         run: composer install --prefer-dist --no-dev -o
 
+      - name: "Install box"
+        run: composer install --prefer-dist -d tools/box
+
       - name: "Compile phparkitect phar"
-        run: php bin/box.phar compile -c ./box.json
+        run: tools/box/vendor/bin/box compile -c ./box.json
 
       - name: "Check phar"
         run: php ./phparkitect.phar

.gitignore

@@ -5,10 +5,9 @@
 .php-cs-fixer.cache
 /web
 /bin/
-!/bin/box.phar
-!/bin/psalm.phar
+/tools/*/vendor/
 phparkitect.phar
-composer.lock
+/composer.lock
 .php-version
 composer.phar
 .phpunit.cache/

Makefile

@@ -16,10 +16,11 @@ test_%: ## it launches a test
 	bin/phpunit --filter $@
 
 phar: ## it creates phar
+	composer install -d tools/box
 	rm -rf ${TMP_DIR} && mkdir -p ${TMP_DIR}
 	cp -R src bin-stub box.json README.md composer.json phparkitect-stub.php bin scoper.inc.php ${TMP_DIR}
 	cd ${TMP_DIR} && composer install --prefer-source --no-dev -o
-	bin/box.phar compile -c ${TMP_DIR}/box.json
+	tools/box/vendor/bin/box compile -c ${TMP_DIR}/box.json
 	cp ${TMP_DIR}/phparkitect.phar .
 
 outdated:
@@ -30,10 +31,12 @@ csfix: ## it launches cs fix
 	PHP_CS_FIXER_IGNORE_ENV=1 bin/php-cs-fixer fix -v
 
 psalm: ## it launches psalm
-	bin/psalm.phar --no-cache
+	composer install -d tools/psalm
+	tools/psalm/vendor/bin/psalm --no-cache
 
 build: ## it launches all the build
 	composer install
+	composer install -d tools/psalm
 	PHP_CS_FIXER_IGNORE_ENV=1 bin/php-cs-fixer fix -v
-	bin/psalm.phar --no-cache
+	tools/psalm/vendor/bin/psalm --no-cache
 	bin/phpunit

tools/box/composer.json

@@ -0,0 +1,10 @@
+{
+    "require": {
+        "humbug/box": "^4.7"
+    },
+    "config": {
+        "platform": {
+            "php": "8.2"
+        }
+    }
+}