From cbb70b39853adee357ded8a5fffd7af3bb7aea9d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=94=D0=BC=D0=B8=D1=82=D1=80=D0=B8=D0=B9?=
 <noreply@anthropic.com>
Date: Thu, 4 Jun 2026 05:21:39 +0300
Subject: [PATCH] chore(imitation): remove DB password from tracked phpunit.xml
 (B4)

DB_USERNAME/DB_PASSWORD now come from the untracked local .env (dev creds postgres/liderra_dev_pass that already match liderra_testing on the same local Postgres). phpunit.xml keeps only the non-secret DB_DATABASE/DB_CONNECTION override. Verified: tests still connect (FakeDaDataClientTest 3/3 GREEN) without the env vars in phpunit.xml. .env.testing remains gitignored.
---
 app/phpunit.xml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/app/phpunit.xml b/app/phpunit.xml
index e1ae2dfe..dbb4d1c6 100644
--- a/app/phpunit.xml
+++ b/app/phpunit.xml
@@ -28,9 +28,8 @@
         <env name="CACHE_STORE" value="array"/>
         <env name="DB_CONNECTION" value="pgsql"/>
         <env name="DB_DATABASE" value="liderra_testing"/>
-        <env name="DB_USERNAME" value="postgres"/>
-        <!-- DB_PASSWORD: worktree-local override (no .env.testing in this worktree). NOT for production. -->
-        <env name="DB_PASSWORD" value="liderra_dev_pass"/>
+        <!-- DB_USERNAME / DB_PASSWORD come from the untracked local .env (dev creds). -->
+        <!-- Not hardcoded here so no secret is committed to git. -->
         <env name="DB_URL" value=""/>
         <env name="MAIL_MAILER" value="array"/>
         <env name="AUTH_PASSWORD_RESET_TOKEN_TABLE" value="password_resets" force="true"/>