phpstan.yml

name: PHPStan CI

on: push

concurrency:
  group: phpstan-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  changes:
    name: Detect changed projects
    runs-on: ubuntu-latest
    if: "!contains(github.event.head_commit.message, '[ci skip]')"
    outputs:
      matrix: ${{ steps.set-matrix.outputs.matrix }}
    steps:
      - uses: actions/checkout@v7
      - uses: dorny/paths-filter@v4
        id: filter
        with:
          filters: |
            ngessentials:
              - 'NGEssentials/**'
              - 'libraries/**'
              - 'Lobby/**'
              - 'SkyBlock/**'
              - 'Factions/**'
              - 'shared/**'
              - 'scripts/**'
            lobby:
              - 'Lobby/**'
              - 'libraries/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            skywars:
              - 'Skywars/**'
              - 'libraries/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            bedwars:
              - 'Bedwars/**'
              - 'libraries/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            conquests:
              - 'Conquests/**'
              - 'libraries/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            duels:
              - 'Duels/**'
              - 'libraries/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            mommasays:
              - 'MommaSays/**'
              - 'libraries/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            murdermystery:
              - 'MurderMystery/**'
              - 'libraries/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            soccer:
              - 'Soccer/**'
              - 'libraries/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            thebridge:
              - 'TheBridge/**'
              - 'libraries/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            uhc:
              - 'UHC/**'
              - 'libraries/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            survivalgames:
              - 'SurvivalGames/**'
              - 'libraries/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            meltdown:
              - 'Meltdown/**'
              - 'libraries/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            libdiscord:
              - 'libraries/libDiscord/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            libphysx:
              - 'libraries/libPhysX/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            libreplay:
              - 'libraries/libReplay/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            libvanilla:
              - 'libraries/libVanilla/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            libasyncio:
              - 'libraries/libasyncio/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            libforms:
              - 'libraries/libforms/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            libminigames:
              - 'libraries/libminigames/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            skyblock:
              - 'SkyBlock/**'
              - 'libraries/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            factions:
              - 'Factions/**'
              - 'libraries/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            libmmo:
              - 'libraries/libMMO/**'
              - 'NGEssentials/**'
              - 'shared/**'
              - 'scripts/**'
            shared:
              - '.github/workflows/phpstan.yml'
              - 'phpstan.neon.dist'
      - name: Build matrix
        id: set-matrix
        env:
          MSG: ${{ github.event.head_commit.message }}
        run: |
          FORCE_ALL=false
          if echo "$MSG" | grep -qE '\[All\]'; then
            FORCE_ALL=true
          fi
          if [ "${{ steps.filter.outputs.shared }}" = "true" ]; then
            FORCE_ALL=true
          fi

          ALL='[
            {"project":"NGEssentials"},
            {"project":"Lobby"},
            {"project":"Skywars"},
            {"project":"Bedwars"},
            {"project":"Conquests"},
            {"project":"Duels"},
            {"project":"MommaSays"},
            {"project":"MurderMystery"},
            {"project":"Soccer"},
            {"project":"TheBridge"},
            {"project":"UHC"},
            {"project":"SurvivalGames"},
            {"project":"Meltdown"},
            {"project":"libraries/libDiscord"},
            {"project":"libraries/libPhysX"},
            {"project":"libraries/libReplay"},
            {"project":"libraries/libVanilla"},
            {"project":"libraries/libasyncio"},
            {"project":"libraries/libforms"},
            {"project":"libraries/libminigames"},
            {"project":"SkyBlock"},
            {"project":"libraries/libMMO"},
            {"project":"Factions"}
          ]'

          if [ "$FORCE_ALL" = "true" ]; then
            INCLUDE=$(echo "$ALL" | jq -c '.')
          else
            INCLUDE='[]'
            if [ "${{ steps.filter.outputs.ngessentials }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[0]]')
            fi
            if [ "${{ steps.filter.outputs.lobby }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[1]]')
            fi
            if [ "${{ steps.filter.outputs.skywars }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[2]]')
            fi
            if [ "${{ steps.filter.outputs.bedwars }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[3]]')
            fi
            if [ "${{ steps.filter.outputs.conquests }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[4]]')
            fi
            if [ "${{ steps.filter.outputs.duels }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[5]]')
            fi
            if [ "${{ steps.filter.outputs.mommasays }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[6]]')
            fi
            if [ "${{ steps.filter.outputs.murdermystery }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[7]]')
            fi
            if [ "${{ steps.filter.outputs.soccer }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[8]]')
            fi
            if [ "${{ steps.filter.outputs.thebridge }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[9]]')
            fi
            if [ "${{ steps.filter.outputs.uhc }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[10]]')
            fi
            if [ "${{ steps.filter.outputs.survivalgames }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[11]]')
            fi
            if [ "${{ steps.filter.outputs.meltdown }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[12]]')
            fi
            if [ "${{ steps.filter.outputs.libdiscord }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[13]]')
            fi
            if [ "${{ steps.filter.outputs.libphysx }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[14]]')
            fi
            if [ "${{ steps.filter.outputs.libreplay }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[15]]')
            fi
            if [ "${{ steps.filter.outputs.libvanilla }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[16]]')
            fi
            if [ "${{ steps.filter.outputs.libasyncio }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[17]]')
            fi
            if [ "${{ steps.filter.outputs.libforms }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[18]]')
            fi
            if [ "${{ steps.filter.outputs.libminigames }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[19]]')
            fi
            if [ "${{ steps.filter.outputs.skyblock }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[20]]')
            fi
            if [ "${{ steps.filter.outputs.libmmo }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[21]]')
            fi
            if [ "${{ steps.filter.outputs.factions }}" = "true" ]; then
              INCLUDE=$(echo "$INCLUDE" | jq -c --argjson all "$ALL" '. += [$all[22]]')
            fi
          fi

          echo "matrix={\"include\":$INCLUDE}" >> $GITHUB_OUTPUT

  phpstan:
    name: PHPStan Analysis (${{ matrix.project }})
    needs: changes
    runs-on: ubuntu-latest
    if: "!contains(github.event.head_commit.message, '[ci skip]') && needs.changes.outputs.matrix != '{\"include\":[]}'"
    strategy:
      fail-fast: false
      max-parallel: 4
      matrix: ${{ fromJSON(needs.changes.outputs.matrix) }}

    steps:
      - name: Checkout
        uses: actions/checkout@v7

      - name: Cache PHP Release
        id: cache-php
        uses: actions/cache@v6
        with:
          path: bin
          key: php-8.5-pm5-linux-x86_64-v1

      - name: Download PHP Release
        if: steps.cache-php.outputs.cache-hit != 'true'
        uses: dsaltares/fetch-gh-release-asset@1.1.2
        with:
          file: PHP-8.5-Linux-x86_64-PM5.tar.gz
          repo: NetherGamesMC/php-build-scripts
          version: "tags/pm5-php-8.5-latest"
          token: ${{ secrets.GITHUB_TOKEN }}

      - name: Unpack PHP Release
        if: steps.cache-php.outputs.cache-hit != 'true'
        run: |
          tar -xzvf PHP-8.5-Linux-x86_64-PM5.tar.gz
          rm -f PHP-8.5-Linux-x86_64-PM5.tar.gz

      - name: Configure PHP
        run: |
          EXT_DIR=$(find bin/php7/lib/php/extensions -mindepth 1 -maxdepth 1 -type d 2>/dev/null | head -n 1)
          if [ -n "$EXT_DIR" ]; then
            ABS_EXT_DIR="${{ github.workspace }}/$EXT_DIR"
            find bin -name "*.ini" -exec sed -i "s|^extension_dir[[:space:]]*=.*|extension_dir=\"$ABS_EXT_DIR\"|g" {} +
          fi
          if [ -z "$EXT_DIR" ] || [ ! -f "$EXT_DIR/opcache.so" ]; then
            find bin -name "*.ini" -exec sed -i "s|^zend_extension.*opcache.*|;zend_extension=opcache.so|g" {} +
          fi
          if [ -z "$EXT_DIR" ] || [ ! -f "$EXT_DIR/ext_quiche.so" ]; then
            find bin -name "*.ini" -exec sed -i "s|^extension.*ext_quiche.*|;extension=ext_quiche.so|g" {} +
          fi

      - name: Resolve PocketMine-MP revisions
        id: revisions
        env:
          NG_TOKEN: ${{ secrets.ng_token }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          export GH_TOKEN="${NG_TOKEN:-$GITHUB_TOKEN}"
          PMMP=$(gh api repos/NetherGamesMC/PocketMine-MP/commits/stable --jq .sha)
          PROTOCOL=$(gh api repos/NetherGamesMC/BedrockProtocol/commits/master --jq .sha)
          echo "key=${PMMP:0:12}-${PROTOCOL:0:12}" >> "$GITHUB_OUTPUT"

      - name: Cache vendor
        id: cache-vendor
        uses: actions/cache@v6
        with:
          path: ${{ matrix.project }}/vendor
          key: vendor-dev-${{ matrix.project }}-${{ steps.revisions.outputs.key }}-${{ hashFiles(format('{0}/composer.json', matrix.project), 'shared/repositories.json') }}

      - name: Cache Composer metadata & repo cache
        if: steps.cache-vendor.outputs.cache-hit != 'true'
        uses: actions/cache@v6
        with:
          path: ~/.cache/composer
          key: composer-cache-${{ runner.os }}-${{ hashFiles(format('{0}/composer.json', matrix.project), 'shared/repositories.json') }}
          restore-keys: |
            composer-cache-${{ runner.os }}-
            composer-cache-

      - name: Cache Composer Phar
        id: cache-composer-phar
        if: steps.cache-vendor.outputs.cache-hit != 'true'
        uses: actions/cache@v6
        with:
          path: composer.phar
          key: composer-stable-phar-v1

      - name: Download Composer
        if: steps.cache-vendor.outputs.cache-hit != 'true' && steps.cache-composer-phar.outputs.cache-hit != 'true'
        run: curl -o composer.phar "https://getcomposer.org/composer-stable.phar"

      - name: Add Composer GitHub access token
        if: steps.cache-vendor.outputs.cache-hit != 'true'
        env:
          NG_TOKEN: ${{ secrets.ng_token }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          TOKEN="${NG_TOKEN:-$GITHUB_TOKEN}"
          ${{ github.workspace }}/bin/php7/bin/php composer.phar config --global github-oauth.github.com "$TOKEN"

      - name: Merge shared repositories
        if: steps.cache-vendor.outputs.cache-hit != 'true'
        run: >
          ${{ github.workspace }}/bin/php7/bin/php
          ${{ github.workspace }}/scripts/merge-composer.php
          ${{ github.workspace }}/${{ matrix.project }}/composer.json
          ${{ github.workspace }}/shared/repositories.json
          ${{ github.workspace }}/${{ matrix.project }}/composer.merged.json

      - name: Install Composer dependencies
        if: steps.cache-vendor.outputs.cache-hit != 'true'
        working-directory: ${{ matrix.project }}
        run: COMPOSER_ROOT_VERSION=dev-stable COMPOSER=composer.merged.json ${{ github.workspace }}/bin/php7/bin/php ${{ github.workspace }}/composer.phar install --prefer-dist --no-interaction --no-progress

      - name: Run PHPStan
        working-directory: ${{ matrix.project }}
        run: ${{ github.workspace }}/bin/php7/bin/php vendor/bin/phpstan analyze --no-progress --memory-limit=2G