🐳 Update Dockerfile to include pdo_mysql and pdo_pgsql extensions; add YAML linting workflow to GitHub Actions

.github/workflows/code-lint.yml

@@ -1,3 +1,4 @@
+---
 name: Code Lint
 
 on:
@@ -24,3 +25,25 @@ jobs:
         with:
           dockerfile: ./Dockerfile
           config: .hadolint.yaml
+
+  yaml-lint:
+    name: YAML Lint
+    runs-on: brixion-runners
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 2
+      - name: Run YAML Lint
+        uses: ibiqlik/action-yamllint@v3
+        with:
+          strict: true
+          config_data: |
+            extends: default
+            rules:
+              comments:
+                min-spaces-from-content: 1
+              line-length:
+                max: 100
+                allow-non-breakable-inline-mappings: true
+              truthy: disable

.github/workflows/dependabot.yml

@@ -1,31 +1,31 @@
 ---
-    name: Dependabot Automate
-    
-    on:
-      workflow_call:
-      pull_request:
-    
-    permissions:
-      contents: write
-      pull-requests: write
-    
-    jobs:
-      dependabot:
-        runs-on: brixion-runners
-        if: github.event.pull_request.user.login == 'dependabot[bot]'
-        steps:
-          - name: Dependabot metadata
-            id: metadata
-            uses: dependabot/fetch-metadata@21025c705c08248db411dc16f3619e6b5f9ea21a
-            with:
-              github-token: "${{ secrets.GITHUB_TOKEN }}"
-          - name: Approve a PR
-            run: gh pr review --approve "$PR_URL"
-            env:
-              PR_URL: ${{github.event.pull_request.html_url}}
-              GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
-          - name: Enable auto-merge for Dependabot PRs
-            run: gh pr merge --auto --squash "$PR_URL"
-            env:
-              PR_URL: ${{github.event.pull_request.html_url}}
-              GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+name: Dependabot Automate
+
+on:
+  workflow_call:
+  pull_request:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  dependabot:
+    runs-on: brixion-runners
+    if: github.event.pull_request.user.login == 'dependabot[bot]'
+    steps:
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@21025c705c08248db411dc16f3619e6b5f9ea21a
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+      - name: Approve a PR
+        run: gh pr review --approve "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+      - name: Enable auto-merge for Dependabot PRs
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}

.github/workflows/docker-publish.yml

@@ -1,3 +1,4 @@
+---
 name: Build and Publish Docker image
 
 on:
@@ -40,7 +41,9 @@ jobs:
           cache-to: type=gha,mode=max,scope=image-${{ matrix.php_version }}
 
       - name: Save image as tarball
-        run: docker save frankenphp:${{ matrix.php_version }}-build -o image-${{ matrix.php_version }}.tar
+        run: |
+          docker save frankenphp:${{ matrix.php_version }}-build \
+            -o image-${{ matrix.php_version }}.tar
 
       - name: Upload image artifact
         uses: actions/upload-artifact@v6
@@ -77,8 +80,10 @@ jobs:
         with:
           image: frankenphp:${{ matrix.php_version }}-build
           format: spdx-json
-          artifact-name: ${{ github.event.repository.name }}-${{ matrix.php_version }}-sbom.spdx.json
-          output-file: ${{ github.event.repository.name }}-${{ matrix.php_version }}-sbom.spdx.json
+          artifact-name: >-
+            ${{ github.event.repository.name }}-${{ matrix.php_version }}-sbom.spdx.json
+          output-file: >-
+            ${{ github.event.repository.name }}-${{ matrix.php_version }}-sbom.spdx.json
           upload-artifact: true
 
       - name: Scan SBOM for vulnerabilities

.hadolint.yaml

@@ -1,3 +1,4 @@
+---
 # .hadolint.yaml
 ignored:
   - DL3007 # Using latest is prone to errors if the image will ever update

Dockerfile

@@ -20,13 +20,14 @@ RUN apk upgrade --no-cache && \
 RUN set -eux; \
     install-php-extensions \
     @composer \
+    pdo_mysql \
+    pdo_pgsql \
     apcu \
     gd \
     intl \
     opcache \
     zip \
     bcmath \
-    intl \
     ;
 
 # https://getcomposer.org/doc/03-cli.md#composer-allow-superuser