fix: use locked dependencies for psalm in CI

Author: thomasvargiu

.github/workflows/continuous-integration.yml

@@ -41,7 +41,7 @@ jobs:
           restore-keys: "php-${{ matrix.php-version }}-composer-"
 
       - name: "Install dependencies with composer"
-        run: "composer update --no-interaction --no-progress --no-suggest --prefer-dist"
+        run: "composer install --no-interaction --no-progress --no-suggest --prefer-dist"
 
       - name: "Run psalm"
         run: "vendor/bin/psalm --long-progress --output-format=github --report=psalm.sarif --php-version=${{ matrix.php-version }}"

.gitignore

@@ -2,5 +2,4 @@
 /.phpstorm.meta.php
 /phpstan
 /.phpunit.result.cache
-/.php-cs-fixer.cache
-/composer.lock
+/.php-cs-fixer.cache

composer.json

@@ -14,7 +14,8 @@
         "sort-packages": true,
         "allow-plugins": {
             "facile-it/facile-coding-standard": true,
-            "laminas/laminas-component-installer": true
+            "laminas/laminas-component-installer": true,
+            "php-http/discovery": true
         }
     },
     "keywords": [