CI - Composer insecure disable

.github/workflows/analysis.yaml

@@ -76,6 +76,3 @@ jobs:
                 name: 'GrumPHP - Run'
                 run: 'if [ -f grumphp.yml ]; then vendor/bin/grumphp run ; else echo Grumphp ruleset file does not exist, skipping step ; fi'
                 if: 'always() && steps.end-of-setup.outcome == ''success'''
-            -
-                uses: symfonycorp/security-checker-action@v3
-                if: 'always() && steps.end-of-setup.outcome == ''success'''

.github/workflows/sylius.yaml

@@ -25,7 +25,7 @@ jobs:
                 symfony:
                     - 6.4
                 node:
-                    - 14.x
+                    - 20.x
         env:
             APP_ENV: test
             package-name: synolia/sylius-scheduler-command-plugin

Makefile

@@ -43,6 +43,8 @@ else
 	${COMPOSER_ROOT} create-project sylius/sylius-standard ${TEST_DIRECTORY} "~${SYLIUS_VERSION}" --no-install --no-scripts
 endif
 	${COMPOSER} config allow-plugins true
+	# CVE are deliberately ignored
+	${COMPOSER} config audit.ignore CVE-2025-31481 CVE-2025-31485 PKSA-gs8r-6kz6-pp56 PKSA-gnn4-pxdg-q76m PKSA-4g5g-4rkv-myqs
 ifeq ($(shell [[ $(SYLIUS_VERSION) == *dev ]] && echo true ),true)
 	${COMPOSER} require sylius/sylius:"${SYLIUS_VERSION}"
 else

composer.json

@@ -70,6 +70,9 @@
         }
     },
     "config": {
+        "audit": {
+            "block-insecure": false
+        },
         "sort-packages": true,
         "allow-plugins": {
             "dealerdirect/phpcodesniffer-composer-installer": true,

src/Twig/BytesFormatterExtension.php

@@ -25,7 +25,7 @@ public function formatBytes(int $bytes): string
         }
 
         try {
-            $number = floor(log($bytes, 1024));
+            $number = (int) floor(log($bytes, 1024));
 
             return round($bytes / (1024 ** $number), [0, 2, 2, 2, 3][$number]) . ['B', 'kB', 'MB', 'GB', 'TB'][$number];
         } catch (\Throwable) {