From fdcfc39cf047eeb3ae1be3ca2b37e4dfaf6cef09 Mon Sep 17 00:00:00 2001
From: Antoine Lamirault <lamiraultantoine@gmail.com>
Date: Mon, 5 Jan 2026 11:00:39 +0100
Subject: [PATCH 1/4] wip

---
 .github/workflows/tests.yaml | 63 ++++++++++++++++++++++++------------
 1 file changed, 42 insertions(+), 21 deletions(-)

diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index d152269..78a57c7 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -10,29 +10,50 @@ env:
   COMPOSER_ROOT_VERSION: "dev-main"
 
 jobs:
-  tests:
-    strategy:
-      fail-fast: false
-      matrix:
-        actions:
-          -
-            name: 'Phpunit'
-            run: composer phpunit
-
-    name: ${{ matrix.actions.name }}
+  composer-audit:
     runs-on: ubuntu-latest
-    timeout-minutes: 10
-
+    name: Composer audit
     steps:
-      -   uses: actions/checkout@v3
+      - name: "Checkout code"
+        uses: actions/checkout@v4
 
-      # see https://github.com/shivammathur/setup-php
-      -
-        uses: shivammathur/setup-php@v2
+      - name: Install PHP with extensions
+        uses: shivammathur/setup-php@2.26.0
         with:
-          php-version: 8.1
-          coverage: none
+          coverage: "none"
+          php-version: 8.2
+          tools: composer:v2
 
-      -   uses: "ramsey/composer-install@v1"
-
-      -   run: ${{ matrix.actions.run }}
+      - name: "Composer install"
+        uses: "ramsey/composer-install@2.2.0"
+        with:
+          composer-options: "--prefer-dist"
+
+      - name: Run composer audit
+        uses: alamirault/composer-audit-action@v1
+#  tests:
+#    strategy:
+#      fail-fast: false
+#      matrix:
+#        actions:
+#          -
+#            name: 'Phpunit'
+#            run: composer phpunit
+#
+#    name: ${{ matrix.actions.name }}
+#    runs-on: ubuntu-latest
+#    timeout-minutes: 10
+#
+#    steps:
+#      -   uses: actions/checkout@v3
+#
+#      # see https://github.com/shivammathur/setup-php
+#      -
+#        uses: shivammathur/setup-php@v2
+#        with:
+#          php-version: 8.1
+#          coverage: none
+#
+#      -   uses: "ramsey/composer-install@v1"
+#
+#      -   run: ${{ matrix.actions.run }}

From a48ebd5cba5425ff084633ec51fa3a42af9b51f0 Mon Sep 17 00:00:00 2001
From: Antoine Lamirault <lamiraultantoine@gmail.com>
Date: Mon, 5 Jan 2026 11:07:31 +0100
Subject: [PATCH 2/4] wip

---
 .github/workflows/tests.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 78a57c7..7a60351 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -16,6 +16,8 @@ jobs:
     steps:
       - name: "Checkout code"
         uses: actions/checkout@v4
+        with:
+          set-safe-directory: '*'
 
       - name: Install PHP with extensions
         uses: shivammathur/setup-php@2.26.0

From 09402b2f3503b2d7d1b3d91a938168ff4112a8e0 Mon Sep 17 00:00:00 2001
From: Antoine Lamirault <lamiraultantoine@gmail.com>
Date: Mon, 5 Jan 2026 11:12:08 +0100
Subject: [PATCH 3/4] wip

---
 composer.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/composer.json b/composer.json
index 4f65d7a..f25e156 100644
--- a/composer.json
+++ b/composer.json
@@ -25,7 +25,8 @@
         "ext-json": "*",
 
         "guzzlehttp/guzzle": "^6.3",
-        "reisraff/accentuation": "^2.0"
+        "reisraff/accentuation": "^2.0",
+        "symfony/http-foundation": "6.4.26"
     },
     "require-dev": {
         "friendsofphp/php-cs-fixer": "^3.11",

From 6952e305bb68904bc69653644e741f4d5bcf5860 Mon Sep 17 00:00:00 2001
From: Antoine Lamirault <lamiraultantoine@gmail.com>
Date: Mon, 5 Jan 2026 11:14:12 +0100
Subject: [PATCH 4/4] wip

---
 composer.json | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/composer.json b/composer.json
index f25e156..ac71ee6 100644
--- a/composer.json
+++ b/composer.json
@@ -52,6 +52,9 @@
         ]
     },
     "config": {
-        "bin-dir": "bin"
+        "bin-dir": "bin",
+        "audit": {
+            "block-insecure": false
+        }
     }
 }