ci: upgrade and improve GitHub actions

Author: williamdes

.github/workflows/build-published-docs.yml

@@ -1,5 +1,9 @@
 name: Publish Api documentations to GitHub pages
 
+permissions:
+  # The SSH key has the write access
+  contents: none
+
 on:
     repository_dispatch:
         types: run-build-api-docs
@@ -15,13 +19,13 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - name: Checkout
-              uses: actions/checkout@v2
+              uses: actions/checkout@v3
               with:
                   fetch-depth: 0
                   ssh-key: ${{ secrets.SSH_KEY_DEPLOY }}
             - name: Import GPG key
-              # v4 - 8c43807e82148a7bafc633cc9584d04bf54be8d0
-              uses: crazy-max/ghaction-import-gpg@8c43807e82148a7bafc633cc9584d04bf54be8d0
+              # v5.2.0 - 111c56156bcc6918c056dbef52164cfa583dc549
+              uses: crazy-max/ghaction-import-gpg@111c56156bcc6918c056dbef52164cfa583dc549
               with:
                   gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
                   passphrase: ${{ secrets.GPG_PASSPHRASE }}

.github/workflows/lint-and-analyse.yml

@@ -1,17 +1,17 @@
 name: Lint and analyse files
 
+permissions:
+  contents: read
+
 on:
   push:
   pull_request:
-    types: [opened, synchronize, reopened]
-    branches:
-      - main
 
 jobs:
     lint-php:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v2
+            - uses: actions/checkout@v3
             - name: Use php 7.2
               uses: shivammathur/setup-php@v2
               with:
@@ -24,7 +24,7 @@ jobs:
               run: |
                 echo "::set-output name=dir::$(composer config cache-files-dir)"
             - name: Restore cache
-              uses: actions/cache@v2
+              uses: actions/cache@v3
               with:
                 path: ${{ steps.composer-cache.outputs.dir }}
                 key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
@@ -38,7 +38,7 @@ jobs:
     analyse-php:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v2
+            - uses: actions/checkout@v3
             - name: Use php 7.4
               uses: shivammathur/setup-php@v2
               with:
@@ -49,7 +49,7 @@ jobs:
               run: |
                 echo "::set-output name=dir::$(composer config cache-files-dir)"
             - name: Restore cache
-              uses: actions/cache@v2
+              uses: actions/cache@v3
               with:
                 path: ${{ steps.composer-cache.outputs.dir }}
                 key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}

.github/workflows/lint-docs.yml

@@ -1,17 +1,17 @@
 name: lint php documentation
 
-on: 
+permissions:
+  contents: read
+
+on:
   push:
   pull_request:
-    types: [opened, synchronize, reopened]
-    branches:
-      - main
 
 jobs:
     lint-docs:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@v2
+            - uses: actions/checkout@v3
             - name: lint php documentation
               uses: sudo-bot/action-doctum@v5
               with:

.github/workflows/tests.yml

@@ -1,11 +1,11 @@
 name: Run tests
 
+permissions:
+  contents: read
+
 on:
   push:
   pull_request:
-    types: [opened, synchronize, reopened]
-    branches:
-      - main
 
 jobs:
     test-php:
@@ -21,7 +21,7 @@ jobs:
                 include:
                     - { php-version: 'nightly', experimental: true, os: ubuntu-latest, composer-options: '--ignore-platform-reqs' }
         steps:
-            - uses: actions/checkout@v2
+            - uses: actions/checkout@v3
             - name: Use php ${{ matrix.php-version }}
               uses: shivammathur/setup-php@v2
               with:
@@ -32,7 +32,7 @@ jobs:
               run: |
                 echo "::set-output name=dir::$(composer config cache-files-dir)"
             - name: Restore cache
-              uses: actions/cache@v2
+              uses: actions/cache@v3
               with:
                 path: ${{ steps.composer-cache.outputs.dir }}
                 key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
@@ -59,13 +59,13 @@ jobs:
                 include:
                     - { php-version: '8.1', experimental: true, os: ubuntu-latest, composer-options: '--ignore-platform-reqs' }
         steps:
-            - uses: actions/checkout@v2
+            - uses: actions/checkout@v3
             - name: Use php ${{ matrix.php-version }}
               uses: shivammathur/setup-php@v2
               with:
                   php-version: ${{ matrix.php-version }}
             - name: Cache module
-              uses: actions/cache@v2
+              uses: actions/cache@v3
               with:
                   path: ~/v2.1.8.tar.gz
                   key: shunit2-cache
@@ -90,7 +90,7 @@ jobs:
                 include:
                     - { php-version: '8.1', experimental: true, os: ubuntu-latest, composer-options: '--ignore-platform-reqs' }
         steps:
-            - uses: actions/checkout@v2
+            - uses: actions/checkout@v3
             - name: Use php ${{ matrix.php-version }}
               uses: shivammathur/setup-php@v2
               with:
@@ -100,7 +100,7 @@ jobs:
               run: |
                 echo "::set-output name=dir::$(composer config cache-files-dir)"
             - name: Restore cache
-              uses: actions/cache@v2
+              uses: actions/cache@v3
               with:
                 path: ${{ steps.composer-cache.outputs.dir }}
                 key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
@@ -125,7 +125,7 @@ jobs:
                 include:
                     - { php-version: '8.1', experimental: true, os: ubuntu-latest, composer-options: '--ignore-platform-reqs' }
         steps:
-            - uses: actions/checkout@v2
+            - uses: actions/checkout@v3
             - name: Use php ${{ matrix.php-version }}
               uses: shivammathur/setup-php@v2
               with:
@@ -135,7 +135,7 @@ jobs:
               run: |
                 echo "::set-output name=dir::$(composer config cache-files-dir)"
             - name: Restore cache
-              uses: actions/cache@v2
+              uses: actions/cache@v3
               with:
                 path: ${{ steps.composer-cache.outputs.dir }}
                 key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}