chore: add vendor-bin

.gitattributes

@@ -0,0 +1,3 @@
+# SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors
+# SPDX-License-Identifier: AGPL-3.0-or-later
+/vendor-bin/**/composer.lock binary

.github/dependabot.yml

@@ -2,17 +2,53 @@
 # SPDX-License-Identifier: AGPL-3.0-only
 version: 2
 updates:
+
+  # Composer
   - package-ecosystem: composer
     directory: "/"
+    commit-message:
+      prefix: "build"
+      include: "scope"
+    versioning-strategy: "increase"
     schedule:
       interval: weekly
       day: saturday
       time: "03:00"
       timezone: Europe/Paris
-    open-pull-requests-limit: 10
     labels:
       - 3. to review
       - dependencies
+
+  # Composer (tooling)
+  - package-ecosystem: composer
+    directories:
+      - "/vendor-bin/cs-fixer"
+      - "/vendor-bin/phpunit"
+      - "/vendor-bin/psalm"
     commit-message:
-      prefix: chore
-      include: scope
+      prefix: "ci"
+      include: "scope"
+    versioning-strategy: "increase"
+    schedule:
+      interval: weekly
+      day: saturday
+      time: "03:15"
+      timezone: Europe/Berlin
+    labels:
+      - 3. to review
+      - dependencies
+
+  # GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: ".github/workflows"
+    commit-message:
+      prefix: "ci"
+      include: "scope"
+    schedule:
+      interval: weekly
+      day: saturday
+      time: "03:30"
+      timezone: Europe/Berlin
+    labels:
+      - 3. to review
+      - dependencies

.gitignore

@@ -4,3 +4,4 @@
 /.php_cs.cache
 /tests/.phpunit.result.cache
 /vendor
+/vendor-bin/**/vendor/

.php-cs-fixer.dist.php

@@ -5,7 +5,7 @@
  * SPDX-FileCopyrightText: 2023 Nextcloud GmbH and Nextcloud contributors
  * SPDX-License-Identifier: AGPL-3.0-only
  */
-require_once './vendor/autoload.php';
+require_once './vendor-bin/cs-fixer/vendor/autoload.php';
 
 use Nextcloud\CodingStandard\Config;
 

composer.json

@@ -1,27 +1,33 @@
 {
 	"require-dev": {
-		"nextcloud/coding-standard": "^v1.1.1",
-		"psalm/phar": "^5.15.0",
-		"bantu/ini-get-wrapper": "v1.0.1",
-		"phpunit/phpunit": "^9.5",
+		"bamarni/composer-bin-plugin": "^1.8",
+		"bantu/ini-get-wrapper": "1.0.1",
 		"nextcloud/ocp": "dev-master"
 	},
-	"scripts": {
-		"cs:check": "php-cs-fixer fix --dry-run --diff",
-		"cs:fix": "php-cs-fixer fix",
-		"psalm": "psalm.phar --threads=1",
-		"psalm:update-baseline": "psalm.phar --threads=1 --update-baseline --set-baseline=tests/psalm-baseline.xml",
-		"psalm:clear": "psalm.phar --clear-cache && psalm --clear-global-cache",
-		"psalm:fix": "psalm.phar --alter --issues=InvalidReturnType,InvalidNullableReturnType,MissingParamType,InvalidFalsableReturnType",
-		"lint": "find . -name \\*.php -not -path './vendor/*' -print0 | xargs -0 -n1 php -l",
-		"test:unit": "phpunit -c tests/phpunit.xml --fail-on-warning"
-	},
 	"config": {
 		"allow-plugins": {
+			"bamarni/composer-bin-plugin": true,
 			"composer/package-versions-deprecated": true
 		},
 		"platform": {
 			"php": "8.1"
+		},
+		"sort-packages": true
+	},
+	"extra": {
+		"bamarni-bin": {
+			"bin-links": false,
+			"forward-command": true,
+			"target-directory": "vendor-bin"
 		}
+	},
+	"scripts": {
+		"cs:check": "vendor-bin/cs-fixer/vendor/bin/php-cs-fixer fix --dry-run --diff",
+		"cs:fix": "vendor-bin/cs-fixer/vendor/bin/php-cs-fixer fix",
+		"lint": "find . -name \\*.php -not -path './vendor/*' -print0 | xargs -0 -n1 php -l",
+		"psalm": "vendor-bin/psalm/vendor/bin/psalm --threads=1",
+		"psalm:clear": "vendor-bin/psalm/vendor/bin/psalm --clear-cache && vendor-bin/psalm/vendor/bin/psalm --clear-cache --clear-global-cache",
+		"psalm:update-baseline": "vendor-bin/psalm/vendor/bin/psalm --update-baseline --set-baseline=tests/psalm-baseline.xml",
+		"test:unit": "vendor-bin/phpunit/vendor/bin/phpunit -c tests/phpunit.xml --fail-on-warning"
 	}
 }