Skip to content

Sync PHPStan pre-push hook and workflow fixes [no_release] - #45

Open
snake14 wants to merge 5 commits into
5.x-devfrom
PG-4897-hook-fixes
Open

Sync PHPStan pre-push hook and workflow fixes [no_release]#45
snake14 wants to merge 5 commits into
5.x-devfrom
PG-4897-hook-fixes

Conversation

@snake14

@snake14 snake14 commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Description

Applies the PHPStan tooling fixes from the PG-4897 rollout template to this plugin's copy:

  • The pre-push hook now diffs against the merge base with origin/5.x-dev instead of the local 5.x-dev branch, which could be stale or missing and silently widened the analysis to files the push doesn't touch. It now fails with a clear message when the merge base can't be resolved.
  • The hook falls back to ddev when a local PHP exists but PHPStan isn't installed in the Matomo vendor dir (previously this combination dead-ended and the hook reported no way to run PHPStan).
  • The github-action-tests checkout in the PHPStan workflow no longer persists credentials.
  • Newly created files are now checked at PHPStan level 9: new code carries no pre-existing debt, so it is held to the strictest level.

Tooling-only change: no version bump or changelog entry (no_release).

Issue No

Related to PG-4897 (JIRA)

Steps to Replicate the Issue

  1. Push a branch from a checkout whose local 5.x-dev is stale or missing.
  2. Expected: the pre-push hook analyses only the files the push touches.
  3. Actual: the hook diffed against the stale local branch and analysed unrelated files, or failed to resolve the branch entirely.

Checklist

  • [✔] Tested locally or on demo2/demo3?
  • [NA] New test case added/updated?
  • [NA] Are all newly added texts included via translation?
  • [NA] Are text sanitized properly? (Eg use of v-text v/s v-html for vue)
  • [NA] Version bumped?
  • [✔] I have understood, reviewed, and tested all AI outputs before use
  • [✔] All AI instructions respect security, IP, and privacy rules
  • [NA] Documentation updated?

snake14 added 2 commits August 4, 2026 10:09
@snake14
Sync PHPStan pre-push hook and workflow fixes [no_release]
93cd92b 
Diff against the merge base with origin/5.x-dev instead of the possibly stale
local branch, fall back to ddev when local PHP lacks PHPStan, and stop
persisting credentials on the github-action-tests checkout.
@snake14
Check newly created files at PHPStan level 9 [no_release]
311b91f 
New files carry no pre-existing debt, so hold them to the strictest level.
@snake14
snake14 requested a review from a team August 4, 2026 01:06
@snake14 snake14 added the Needs Review For pull requests that need a code review. label Aug 4, 2026
snake14 added 3 commits August 4, 2026 13:53
@snake14
Check pushed commits rather than the working tree in the pre-push hook
0dcac51 
Uncommitted local changes were analyzed and could block a push for
files the push doesn't contain. Also corrects the hook's log label.
@snake14
Analyse the commits supplied on the hook's stdin rather than HEAD
bd7ef33 
Pushing another local branch, or several refs at once, analysed the
checked-out branch instead of what was actually pushed.
@snake14
Skip the hook instead of rejecting pushes from standalone clones
73b0e13 
A plugin cloned outside a Matomo checkout cannot be checked, which is
no reason to block its pushes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Needs Review For pull requests that need a code review.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@snake14