ci: add mutation testing support and CI/CD workflow

.github/workflows/coding-standards.yml

@@ -4,9 +4,6 @@ on:  # yamllint disable-line rule:truthy
   pull_request:
     branches:
       - master
-  push:
-    branches:
-      - master
 
 name: 🧹 Fix PHP coding standards
 
@@ -26,7 +23,7 @@ jobs:
         with:
           configFile: ${{ github.workspace }}/.github/.commitlint.config.mjs
           failOnWarnings: false
-          failOnErrors: false
+          failOnErrors: true
           helpURL: 'https://github.com/conventional-changelog/commitlint/#what-is-commitlint'
 
   yaml-linting:

.github/workflows/security.yml

@@ -1,10 +1,11 @@
 ---
 
-name: 🔐 Security analysis
-
 on:  # yamllint disable-line rule:truthy
   pull_request:
-  push:
+    branches:
+      - master
+
+name: 🔐 Security analysis
 
 jobs:
   security-analysis:

.github/workflows/testing.yml

@@ -135,6 +135,60 @@ jobs:
       - name: 🧪 Run tests that require separate process using phpunit/phpunit
         run: composer test:sep
 
+
+  mutation-testing:
+    timeout-minutes: 16
+    runs-on: ${{ matrix.os }}
+    concurrency:
+      cancel-in-progress: true
+      group: mutation-testing-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+    strategy:
+      fail-fast: true
+      matrix:
+        os:
+          - ubuntu-latest
+        php-version:
+          - '8.2'
+        dependencies:
+          - locked
+    steps:
+      - name: 📦 Check out the codebase
+        uses: actions/[email protected]
+
+      - name: 🛠️ Setup PHP
+        uses: shivammathur/[email protected]
+        with:
+          php-version: ${{ matrix.php-version }}
+          extensions: mbstring, pdo, pdo_sqlite
+          ini-values: error_reporting=E_ALL
+          coverage: xdebug
+
+      - name: 🛠️ Setup problem matchers
+        run: echo "::add-matcher::${{ runner.tool_cache }}/php.json"
+
+      - name: 🤖 Validate composer.json and composer.lock
+        run: composer validate --ansi --strict
+
+      - name: 🔍 Get composer cache directory
+        uses: wayofdev/gh-actions/actions/composer/[email protected]
+
+      - name: ♻️ Restore cached dependencies installed with composer
+        uses: actions/[email protected]
+        with:
+          path: ${{ env.COMPOSER_CACHE_DIR }}
+          key: php-${{ matrix.php-version }}-composer-${{ matrix.dependencies }}-${{ hashFiles('composer.lock') }}
+          restore-keys: php-${{ matrix.php-version }}-composer-${{ matrix.dependencies }}-
+
+      - name: 📥 Install "${{ matrix.dependencies }}" dependencies with composer
+        uses: wayofdev/gh-actions/actions/composer/[email protected]
+        with:
+          dependencies: ${{ matrix.dependencies }}
+
+      - name: 🧪 Run mutation testing using Xdebug and infection/infection
+        run: composer infect:ci
+        env:
+          STRYKER_DASHBOARD_API_KEY: ${{ secrets.STRYKER_DASHBOARD_API_KEY }}
+
   compile-phar:
     timeout-minutes: 4
     runs-on: ${{ matrix.os }}

composer.json

@@ -67,6 +67,7 @@
         "phpstan/phpstan-phpunit": "^1.3",
         "phpstan/phpstan-strict-rules": "^1.5",
         "phpunit/phpunit": "^10.5",
+        "roave/infection-static-analysis-plugin": "^1.35",
         "roxblnfk/unpoly": "^1.8.1",
         "vimeo/psalm": "^5.11",
         "wayofdev/cs-fixer-config": "^1.4"
@@ -96,6 +97,7 @@
     "config": {
         "allow-plugins": {
             "ergebnis/composer-normalize": true,
+            "infection/extension-installer": true,
             "pestphp/pest-plugin": true,
             "phpstan/extension-installer": true
         },