Skip to content

ci: restore standards in protected dependency updates - #13

Merged
brianvarskonst merged 1 commit into
mainfrom
fix/canary-toolchain-pin
Oct 6, 2026
Merged

brianvarskonst merged 1 commit into
mainfrom
fix/canary-toolchain-pin

Conversation

@brianvarskonst

Copy link
Copy Markdown
Member

The current dependency canary disables Composer plugins during installation but
its pinned reusable workflow does not restore PHPCS standards and PHPStan
discovery. The run fails with Referenced sniff "SymPress-Pure" does not exist
before checking the kernel.

Pin the current shared SymPress workflow, which restores this metadata explicitly
after the protected installation. Keep plugins disabled and preserve every QA
gate. Runtime code and the v1.1.7 release are unchanged.

Signed-off-by: Brian Schäffner <burnify.design@gmail.com>
@brianvarskonst
brianvarskonst merged commit 2d551bf into main Oct 6, 2026
3 checks passed
@brianvarskonst
brianvarskonst deleted the fix/canary-toolchain-pin branch October 6, 2026 17:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant