From f5cfa39f60db22ac9f223ca1d95ea4954b43d71f Mon Sep 17 00:00:00 2001
From: "Engineer (geomonitor)" <engineer-geomonitor@peptiderepo.com>
Date: Sun, 14 Jun 2026 13:08:44 +0000
Subject: [PATCH] ci: switch PHPCS job to global composer require (fixes
 Packagist SSL timeout)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

No project-level composer.lock → full Packagist fetch was timing out with
SSL error 28 on every run. Switch to setup-php built-in phpcs tool +
composer global require for WPCS, matching the pattern used in prautoblogger
which does not need a lock file for the global install path.

Refs #4
---
 .github/workflows/ci.yml | 18 +++++++++++++++---
 1 file changed, 15 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 295b155..e564520 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -47,12 +47,24 @@ jobs:
         uses: shivammathur/setup-php@v2
         with:
           php-version: '8.1'
+          tools: composer:v2, phpcs
 
-      - name: Install Composer dependencies
-        run: composer install --no-interaction --prefer-dist --no-progress
+      - name: Install WordPress Coding Standards (global)
+        run: |
+          composer global config --no-plugins allow-plugins.dealerdirect/phpcodesniffer-composer-installer true
+          composer global require --no-interaction \
+            "dealerdirect/phpcodesniffer-composer-installer:^1.0" \
+            "wp-coding-standards/wpcs:^3.0" \
+            "phpcsstandards/phpcsutils:^1.0"
 
       - name: Run PHPCS
-        run: composer run lint
+        run: |
+          phpcs --standard=phpcs.xml.dist \
+            --extensions=php \
+            --ignore=vendor/*,tests/*,node_modules/* \
+            --warning-severity=0 \
+            --report=full \
+            includes/ pr-vision.php uninstall.php
 
   # ── 300-line file check ──────────────────────────────────────────
   file-size: