Compatibility and release preparation for 1.0.0

.gitattributes

@@ -12,3 +12,6 @@
 /docs export-ignore
 /recipe export-ignore
 /composer-dependency-analyser.php export-ignore
+/phpstan.php85.neon export-ignore
+/CONTRIBUTING.md export-ignore
+/phpunit-baseline.xml export-ignore

.github/nightly-issue.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+# Opens one issue per failing nightly job, or comments on the open one. A person closes it after the fix.
+# Usage: nightly-issue.sh <job name> [report file]. The text of the report file, if it exists, goes into the issue or comment.
+set -euo pipefail
+job="$1"
+title="Nightly: ${job} failed"
+run_url="${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}"
+gh label create nightly --color B60205 --description "A scheduled upstream or release check failed" 2>/dev/null || true
+number="$(gh issue list --label nightly --state open --limit 100 --json number,title --jq ".[] | select(.title == \"${title}\") | .number" | head -n 1)"
+body="The nightly job \`${job}\` failed: ${run_url}"
+report="${2:-}"
+if [ -n "${report}" ] && [ -s "${report}" ]; then
+  # An issue body holds at most 65536 characters.
+  body+=$'\n\n'"$(head -c 60000 "${report}")"
+fi
+if [ -n "${number}" ]; then
+  gh issue comment "${number}" --body "${body}"
+else
+  gh issue create --title "${title}" --label nightly --body "${body}"
+fi

.github/workflows/ci.yml

@@ -14,10 +14,12 @@ concurrency:
   group: ci-${{ github.ref }}
   cancel-in-progress: true
 
+# Each job's timeout-minutes is about three times its usual run time; GitHub's default is 6 hours.
 jobs:
   static:
     name: Static analysis
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
@@ -33,13 +35,33 @@ jobs:
       - run: composer normalize --dry-run
       - run: vendor/bin/php-cs-fixer check --diff
       - run: vendor/bin/rector process --dry-run
-      - run: vendor/bin/phpstan analyse --no-progress --error-format=github
+      - run: vendor/bin/phpstan analyse --no-progress --error-format=github --memory-limit=1G
+      - run: vendor/bin/phpstan analyse --no-progress --error-format=github --memory-limit=1G --configuration=phpstan.php85.neon
       - run: vendor/bin/composer-dependency-analyser
       - run: composer audit
 
+  static-lowest:
+    name: Static analysis (lowest dependencies)
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+        with:
+          php-version: '8.5'
+          coverage: none
+      - uses: ramsey/composer-install@65e4f84970763564f46a70b8a54b90d033b3bdda # 4.0.0
+        with:
+          dependency-versions: lowest
+      - run: vendor/bin/phpstan analyse --no-progress --error-format=github --memory-limit=1G
+      - run: vendor/bin/phpstan analyse --no-progress --error-format=github --memory-limit=1G --configuration=phpstan.php85.neon
+
   tests:
     name: Tests (PHP ${{ matrix.php }}, ${{ matrix.deps }})
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     strategy:
       fail-fast: false
       matrix:
@@ -61,6 +83,7 @@ jobs:
   tests-next:
     name: Tests (PHP 8.6, experimental)
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     continue-on-error: true
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -73,11 +96,15 @@ jobs:
       - uses: ramsey/composer-install@65e4f84970763564f46a70b8a54b90d033b3bdda # 4.0.0
         with:
           dependency-versions: highest
-      - run: vendor/bin/phpunit
+          # ergebnis/composer-normalize caps PHP below 8.6.
+          composer-options: --ignore-platform-req=php+
+      # The baseline holds the deprecations that PHP 8.6 raises inside a dependency (opis/json-schema).
+      - run: vendor/bin/phpunit --use-baseline phpunit-baseline.xml
 
   coverage:
     name: Coverage
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
@@ -132,9 +159,10 @@ jobs:
         if: github.event_name != 'pull_request'
         run: vendor/bin/infection --threads=max --logger-github
 
-  mcp-sdk-main:
-    name: mcp/sdk main (PHP 8.5)
+  mcp-sdk-0-9:
+    name: mcp/sdk 0.9.0 (PHP 8.5)
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
@@ -148,8 +176,8 @@ jobs:
           dependency-versions: highest
       - name: Remove symfony/mcp-bundle, which requires mcp/sdk ^0.8.1
         run: composer remove --dev --no-update symfony/mcp-bundle
-      - name: Install mcp/sdk main at the commit this release was verified against
-        run: composer require --dev --no-interaction --update-with-all-dependencies "mcp/sdk:dev-main#82e19d114e95671e05e7df7909195f7ace03d90e as 0.9.0"
+      - name: Install the mcp/sdk 0.9.0 tag
+        run: composer require --dev --no-interaction --update-with-all-dependencies "mcp/sdk:0.9.0"
       - run: vendor/bin/phpstan analyse --no-progress --error-format=github --configuration=phpstan.no-bundle.neon
       - run: vendor/bin/phpunit --testsuite Contract,Integration,E2E
 
@@ -177,11 +205,54 @@ jobs:
         env:
           AGENTCAT_RUNTIME_TESTS: '1'
 
+  package:
+    name: Package probe (PHP 8.3, mcp/sdk ${{ matrix.mcp-sdk }})
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        mcp-sdk: ['0.8.1', '0.9.0']
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+        with:
+          php-version: '8.3'
+          coverage: none
+      - name: Install the dist in a fresh project and track an mcp/sdk server
+        run: tests/bin/package-probe.sh "$MCP_SDK"
+        env:
+          MCP_SDK: ${{ matrix.mcp-sdk }}
+
+  bc:
+    name: Backward compatibility
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+      - uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0
+        with:
+          php-version: '8.3'
+          extensions: bcmath
+          coverage: none
+      - name: Compare with the latest 1.x tag
+        run: |
+          base="$(git tag --list 'v1.*' --sort=-v:refname | head -n 1)"
+          if [ -z "$base" ]; then echo "No v1.* tag yet: nothing to compare against (D63)."; exit 0; fi
+          composer global require --no-interaction roave/backward-compatibility-check:8.19.0
+          "$(composer global config bin-dir --absolute)/roave-backward-compatibility-check" --from="$base" --format=github-actions --install-development-dependencies
+
   all-green:
     name: All green
     if: always()
-    needs: [static, tests, coverage, mutation, mcp-sdk-main, runtime]
+    needs: [static, static-lowest, tests, coverage, mutation, mcp-sdk-0-9, runtime, package, bc]
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     steps:
       - uses: re-actors/alls-green@b5b5b37504aa4183270bd3d855c52a67f212be35 # v1.3.0
         with: