Version 6 (#2504)

---------

Co-authored-by: Martin Stone <[email protected]>

.env.example

@@ -17,12 +17,15 @@ APP_FORCE_HTTPS=false
 # Do note that this disable CSP!!
 DEBUGBAR_ENABLED=false
 
-# enable or disable the v5 layout.
-LIVEWIRE_ENABLED=true
+# enable or disable the v6 layout.
+VUEJS_ENABLED=true
 
 # enable or disable log viewer. By default it is enabled.
 LOG_VIEWER_ENABLED=true
 
+# enable or disable clockwork. By default it is disabled (and not provided on non-dev build).
+CLOCKWORK_ENABLE=false
+
 # enable s3 bucket (required in addition to needing AWS_ACCESS_KEY_ID)
 # S3_ENABLED=true
 

.github/dependabot.yml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: daily
+
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: daily
+
+  - package-ecosystem: composer
+    directory: /
+    schedule:
+      interval: daily

.github/workflows/.env.legacy.mariadb

@@ -3,7 +3,7 @@ APP_URL=https://localhost
 APP_ENV=dev
 APP_KEY=SomeRandomString
 APP_DEBUG=true
-LIVEWIRE_ENABLED=false
+VUEJS_ENABLED=false
 LEGACY_API_ENABLED=true
 
 DB_CONNECTION=mysql

.github/workflows/.env.legacy.postgresql

@@ -3,7 +3,7 @@ APP_URL=https://localhost
 APP_ENV=dev
 APP_KEY=SomeRandomString
 APP_DEBUG=true
-LIVEWIRE_ENABLED=false
+VUEJS_ENABLED=false
 LEGACY_API_ENABLED=true
 
 DB_CONNECTION=pgsql

.github/workflows/.env.legacy.sqlite

@@ -3,7 +3,7 @@ APP_URL=https://localhost
 APP_ENV=dev
 APP_KEY=SomeRandomString
 APP_DEBUG=true
-LIVEWIRE_ENABLED=false
+VUEJS_ENABLED=false
 LEGACY_API_ENABLED=true
 
 DB_CONNECTION=sqlite

.github/workflows/.env.mariadb

@@ -0,0 +1,21 @@
+APP_NAME=Lychee
+APP_URL=https://localhost
+APP_ENV=dev
+APP_KEY=SomeRandomString
+APP_DEBUG=true
+VUEJS_ENABLED=true
+LEGACY_API_ENABLED=false
+
+DB_CONNECTION=mysql
+DB_HOST=localhost
+DB_PORT=3306
+DB_DATABASE=homestead_test
+DB_USERNAME=root
+DB_PASSWORD=root
+DB_LIST_FOREIGN_KEYS=true
+
+CACHE_DRIVER=array
+SESSION_DRIVER=array
+QUEUE_CONNECTION=sync
+
+PHOTO_PIPES=true

.github/workflows/.env.postgresql

@@ -0,0 +1,18 @@
+APP_NAME=Lychee
+APP_URL=https://localhost
+APP_ENV=dev
+APP_KEY=SomeRandomString
+APP_DEBUG=true
+VUEJS_ENABLED=true
+LEGACY_API_ENABLED=false
+
+DB_CONNECTION=pgsql
+DB_HOST=localhost
+DB_PORT=5432
+DB_DATABASE=postgres
+DB_USERNAME=postgres
+DB_PASSWORD=postgres
+
+CACHE_DRIVER=array
+SESSION_DRIVER=array
+QUEUE_CONNECTION=sync

.github/workflows/.env.sqlite

@@ -0,0 +1,14 @@
+APP_NAME=Lychee
+APP_URL=https://localhost
+APP_ENV=dev
+APP_KEY=SomeRandomString
+APP_DEBUG=true
+VUEJS_ENABLED=true
+LEGACY_API_ENABLED=false
+
+DB_CONNECTION=sqlite
+DB_LIST_FOREIGN_KEYS=true
+
+CACHE_DRIVER=array
+SESSION_DRIVER=array
+QUEUE_CONNECTION=sync

.github/workflows/CICD.yml

@@ -27,6 +27,11 @@ jobs:
     # We want to run on external PRs, but not on our own internal PRs as they'll be run by the push to the branch.
     if: (github.event_name == 'push' || github.event.pull_request.head.repo.full_name != github.repository)
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
+        with:
+          egress-policy: audit
+
       - name: Cancel Previous Runs
         uses: styfle/cancel-workflow-action@85880fa0301c86cca9da44039ee3bb12d3bedbfa # 0.12.1
         with:
@@ -38,6 +43,11 @@ jobs:
     needs:
       - kill_previous
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
+        with:
+          egress-policy: audit
+
       - name: Setup PHP Action
         uses: shivammathur/setup-php@a4e22b60bbb9c1021113f2860347b0759f66fe5d # 2.30.0
         with:
@@ -58,6 +68,11 @@ jobs:
     needs:
       - php_syntax_errors
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
+        with:
+          egress-policy: audit
+
       - name: Set up PHP
         uses: shivammathur/setup-php@a4e22b60bbb9c1021113f2860347b0759f66fe5d # 2.30.0
         with:
@@ -84,6 +99,11 @@ jobs:
     needs:
       - php_syntax_errors
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
+        with:
+          egress-policy: audit
+
       - name: Checkout code
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
@@ -101,34 +121,53 @@ jobs:
 
   tests_legacy:
     name:  2️⃣ PHP tests legacy
-    uses: ./.github/workflows/php_tests.yml
     needs:
       - php_syntax_errors
+    uses: ./.github/workflows/php_tests.yml
     with:
       test-suite: 'Feature_v1'
       env-file: '.env.legacy'
+    secrets:
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+
+  tests:
+    name:  2️⃣ PHP tests
+    needs:
+      - php_syntax_errors
+    uses: ./.github/workflows/php_tests.yml
+    with:
+      test-suite: 'Unit,Feature_v2'
+      env-file: '.env'
+    secrets:
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
   dist:
     name:  3️⃣ PHP dist
     needs:
       - code_style_errors
     uses: ./.github/workflows/php_dist.yml
-    with:
-      env-file: '.env.legacy'
 
   createArtifact:
     name: 4️⃣ Build Artifact
     if: github.ref == 'refs/heads/master'
     needs:
       - phpstan
       - dist
+      - tests
       - tests_legacy
       - check_js
     runs-on: ubuntu-latest
     env:
       extensions: bcmath, curl, dom, gd, imagick, json, libxml, mbstring, pcntl, pdo, pdo_sqlite, pdo_mysql, pdo_pgsql, pgsql, sqlite3, zip
 
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
+        with:
+          egress-policy: audit
+
       - name: Checkout code
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1