fix: default to "locked" if "highest" or "lowest" not passed

bin/cache_key.sh

@@ -18,6 +18,14 @@ function join_by {
     fi
 }
 
+# Ensure "highest", "lowest", and "locked" are the only values
+# allowed for dependency_versions.
+case "${dependency_versions}" in
+    highest) ;;
+    lowest) ;;
+    *) dependency_versions="locked" ;;
+esac
+
 if [ -n "${custom_cache_key}" ]; then
     key+=("${custom_cache_key}")
 else

bin/composer_install.sh

@@ -14,9 +14,9 @@ composer_options=(
 )
 
 case "${dependency_versions}" in
-    locked) composer_command="install" ;;
-    lowest) composer_options+=("--prefer-lowest" "--prefer-stable") ;;
     highest) ;;
+    lowest) composer_options+=("--prefer-lowest" "--prefer-stable") ;;
+    *) composer_command="install" ;;
 esac
 
 IFS=' '

tests/expect/cache_key_07.exp

@@ -0,0 +1,29 @@
+#!/usr/bin/env -S expect -f
+
+set gitHubEnvFile cache_key_07.txt
+file delete $gitHubEnvFile
+set ::env(GITHUB_ENV) $gitHubEnvFile
+
+set timeout 3
+spawn ../../bin/cache_key.sh "Windows" "8.0.2" "foobar" "" "some-other-hash"
+match_max 100000
+
+expect -exact "::notice title=Primary Cache Key::Cache primary key is 'Windows-php-8.0.2-composer-locked-some-other-hash'"
+expect -exact "::notice title=Restore Cache Keys::Cache restore keys are 'Windows-php-8.0.2-composer-locked-'"
+expect -exact "::set-output name=key::Windows-php-8.0.2-composer-locked-some-other-hash"
+expect eof
+
+set fp [open $gitHubEnvFile r]
+set fileData [read $fp]
+close $fp
+
+set expectedValue "CACHE_RESTORE_KEY<<EOF
+Windows-php-8.0.2-composer-locked-
+EOF
+"
+
+if { $expectedValue != $fileData } {
+    puts "\nExpected environment variable does not match. Received:\n"
+    puts $fileData
+    exit 1
+}

tests/expect/composer_install_17.exp

@@ -0,0 +1,10 @@
+#!/usr/bin/env -S expect -f
+
+set timeout 3
+spawn ../../bin/composer_install.sh "foobar"
+match_max 100000
+
+expect -exact "::notice title=Composer::Using the following Composer command: 'composer install --no-interaction --no-progress --ansi '"
+expect "Installing dependencies from lock file (including require-dev)"
+expect "Generating autoload files"
+expect eof