633 Commits

Author SHA1 Message Date
William Storey
ee572d79e6 Merge pull request #230 from maxmind/greg/eng-3770
Pin GitHub Actions to SHA for security
2026-01-08 14:24:56 -08:00
Gregory Oschwald
b86944d9f4 Pin GitHub Actions to SHA for security
Update official GitHub Actions (actions/*, github/*) to use pinned
commit SHAs instead of version tags. This satisfies zizmor's
unpinned-action-reference security check.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-07 14:14:00 -08:00
faktas2
3d45e5b961 Merge pull request #229 from maxmind/wstorey/php-versions
Test on PHP 8.5
2025-12-29 12:04:06 -05:00
William Storey
b416ef9876 Test on PHP 8.5 2025-12-29 08:48:33 -08:00
William Storey
e920cf5a1d Merge pull request #228 from maxmind/greg/eng-3638
Update Dependabot cooldown to 7 days
2025-12-15 12:55:42 -08:00
Gregory Oschwald
01b96934bb Update Dependabot cooldown from 4 to 7 days 2025-12-12 09:19:33 -08:00
William Storey
1fe6b63711 Merge pull request #227 from maxmind/greg/eng-1733
Improve release script reliability (ENG-1733)
2025-12-04 20:00:41 -08:00
Gregory Oschwald
7095078684 Replace i386 tests with arm64 in CI workflow
i386 support has been dropped upstream in setup-php due to deb.sury
removing i386 packages.

See: https://github.com/shivammathur/setup-php/issues/1040#issuecomment-3608728874

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-04 07:04:36 -08:00
Gregory Oschwald
bfd717e908 Fix release script consistency issues
- Support pre-release versions in changelog parsing
- Quote date command substitution for defensive programming
- Fix shellcheck SC2162: add -r flag to read command
- Apply shfmt formatting
2025-12-04 07:04:32 -08:00
Gregory Oschwald
29cb614921 Add pre-flight checks to release script 2025-12-03 10:12:19 -08:00
William Storey
985e277cff Merge pull request #226 from maxmind/dependabot/github_actions/shivammathur/setup-php-2.36.0
Bump shivammathur/setup-php from 2.35.5 to 2.36.0
2025-12-02 12:31:49 -08:00
dependabot[bot]
ca64b098d6 Bump shivammathur/setup-php from 2.35.5 to 2.36.0
Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.35.5 to 2.36.0.
- [Release notes](https://github.com/shivammathur/setup-php/releases)
- [Commits](bf6b4fbd49...44454db4f0)

---
updated-dependencies:
- dependency-name: shivammathur/setup-php
  dependency-version: 2.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-02 14:05:38 +00:00
William Storey
909b600971 Merge pull request #225 from maxmind/dependabot/github_actions/zizmorcore/zizmor-action-0.3.0
Bump zizmorcore/zizmor-action from 0.2.0 to 0.3.0
2025-11-27 08:18:29 -08:00
dependabot[bot]
de83442d3e Bump zizmorcore/zizmor-action from 0.2.0 to 0.3.0
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.2.0 to 0.3.0.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](e673c3917a...e639db9933)

---
updated-dependencies:
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-27 14:05:26 +00:00
William Storey
162dcf0281 Merge pull request #224 from maxmind/dependabot/github_actions/actions/checkout-6
Bump actions/checkout from 5 to 6
2025-11-25 09:27:32 -08:00
dependabot[bot]
ff324006ae Bump actions/checkout from 5 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-25 14:05:30 +00:00
William Storey
bc6017e996 Merge pull request #223 from maxmind/greg/eng-3504
Release to PIE
2025-11-21 14:54:01 -08:00
Gregory Oschwald
2194f58d0f Add check that repo is clean v1.13.1 2025-11-21 14:24:26 -08:00
Gregory Oschwald
45b2e9c929 Add .claude to .gitignore 2025-11-21 14:23:12 -08:00
Gregory Oschwald
ea35c4fa9a Bumped version to 1.13.1 2025-11-21 14:21:26 -08:00
Gregory Oschwald
c951fffeab Check that we aren't behind origin/main 2025-11-21 14:21:15 -08:00
Gregory Oschwald
753d644c42 Add changelog for pie release 2025-11-21 14:20:34 -08:00
Gregory Oschwald
173687978e Add PIE extension support via separate repository
- Update release.sh to automate extension repo releases
  - Clone extension repo to .ext directory
  - Update submodule reference after main release
  - Create matching release in extension repo
  - Include safety checks and error handling
  - Create php_maxminddb-{version}-src.tgz from submodule ext/ directory
  - Upload as GitHub release asset
- Update README.md to promote PIE as recommended installation method
- Add maxmind-db/reader-ext to composer.json suggest section
- Add .ext to .gitignore
- Document implementation plan in plan.md

References:
- https://github.com/php/pie/issues/39
2025-11-21 14:18:46 -08:00
William Storey
62cdd95fdf Merge pull request #222 from maxmind/greg/eng-3323
Release 1.13.0
2025-11-20 12:01:22 -08:00
Gregory Oschwald
b298986c4f Bumped version to 1.13.0 v1.13.0 2025-11-20 10:37:57 -08:00
Gregory Oschwald
253eb1db72 Set release date 2025-11-20 10:36:50 -08:00
Gregory Oschwald
57c3358385 Check that we are not on main 2025-11-20 10:36:28 -08:00
mm-kevcenteno
75f834a1da Merge pull request #221 from maxmind/greg/eng-3236
Set Dependabot cooldown period
2025-10-31 08:52:43 -04:00
Gregory Oschwald
ae1a4ccb46 Set Dependabot cooldown period to 4 days
This addresses the zizmor findings by setting a cooldown period of 4 days
for all package ecosystems in dependabot.yml.

Related to: ENG-3236
2025-10-30 14:28:20 -07:00
Gregory Oschwald
8b2bff3ab8 Merge pull request #220 from maxmind/wstorey/eng-3188-zizmor-github-action-does-not-depend-on-astral-shsetup-uv
Run zizmor via zizmorcore/zizmor-action
2025-10-10 10:43:05 -07:00
William Storey
0690503a6c Run zizmor via zizmorcore/zizmor-action 2025-10-09 22:04:03 +00:00
William Storey
381b0f8095 Merge pull request #219 from maxmind/dependabot/github_actions/astral-sh/setup-uv-7.0.0
Bump astral-sh/setup-uv from 6.8.0 to 7.0.0
2025-10-08 08:59:26 -07:00
dependabot[bot]
419cd60834 Bump astral-sh/setup-uv from 6.8.0 to 7.0.0
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6.8.0 to 7.0.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](d0cc045d04...eb1897b8dc)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-08 14:05:31 +00:00
William Storey
642e4a3974 Merge pull request #218 from maxmind/dependabot/github_actions/astral-sh/setup-uv-6.8.0
Bump astral-sh/setup-uv from 6.7.0 to 6.8.0
2025-10-01 10:24:28 -07:00
dependabot[bot]
d236b0678e Bump astral-sh/setup-uv from 6.7.0 to 6.8.0
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6.7.0 to 6.8.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](b75a909f75...d0cc045d04)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 6.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-01 14:06:48 +00:00
Gregory Oschwald
f38eb9bfe9 Merge pull request #215 from maxmind/dependabot/composer/squizlabs/php_codesniffer-3.staror-4.star
Update squizlabs/php_codesniffer requirement from 3.* to 3.* || 4.*
2025-09-19 10:40:25 -07:00
William Storey
e11acd7360 Require PHP_CodeSniffer 4+ 2025-09-19 17:28:14 +00:00
dependabot[bot]
7fd1cad717 Update squizlabs/php_codesniffer requirement from 3.* to 3.* || 4.*
Updates the requirements on [squizlabs/php_codesniffer](https://github.com/PHPCSStandards/PHP_CodeSniffer) to permit the latest version.
- [Release notes](https://github.com/PHPCSStandards/PHP_CodeSniffer/releases)
- [Changelog](https://github.com/PHPCSStandards/PHP_CodeSniffer/blob/4.x/CHANGELOG-4.x.md)
- [Commits](https://github.com/PHPCSStandards/PHP_CodeSniffer/compare/3.0.0...4.0.0)

---
updated-dependencies:
- dependency-name: squizlabs/php_codesniffer
  dependency-version: 4.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-19 17:28:05 +00:00
William Storey
cca3aaf359 Merge pull request #217 from maxmind/dependabot/github_actions/shivammathur/setup-php-2.35.5
Bump shivammathur/setup-php from 2.35.4 to 2.35.5
2025-09-19 08:24:21 -07:00
dependabot[bot]
b34e587142 Bump shivammathur/setup-php from 2.35.4 to 2.35.5
Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.35.4 to 2.35.5.
- [Release notes](https://github.com/shivammathur/setup-php/releases)
- [Commits](ec406be512...bf6b4fbd49)

---
updated-dependencies:
- dependency-name: shivammathur/setup-php
  dependency-version: 2.35.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-19 14:04:49 +00:00
mmpnelson
6a57b70144 Merge pull request #216 from maxmind/mmavletkulov/zizmore-update
update zizmor to version 1.13.0
2025-09-18 07:48:11 -07:00
Marsel Mavletkulov
616306d5f9 update zizmor to version 1.13.0 2025-09-16 18:07:28 +00:00
William Storey
facddba111 Merge pull request #214 from maxmind/dependabot/github_actions/astral-sh/setup-uv-6.7.0
Bump astral-sh/setup-uv from 6.6.1 to 6.7.0
2025-09-15 10:50:40 -07:00
dependabot[bot]
b7de78b024 Bump astral-sh/setup-uv from 6.6.1 to 6.7.0
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6.6.1 to 6.7.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](557e51de59...b75a909f75)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 6.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-15 14:37:23 +00:00
William Storey
82b6ab030e Merge pull request #213 from maxmind/dependabot/github_actions/astral-sh/setup-uv-6.6.1
Bump astral-sh/setup-uv from 6.6.0 to 6.6.1
2025-09-03 11:25:06 -07:00
dependabot[bot]
02d82a2dc5 Bump astral-sh/setup-uv from 6.6.0 to 6.6.1
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6.6.0 to 6.6.1.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](4959332f0f...557e51de59)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 6.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-03 09:59:44 +00:00
William Storey
cb8b6f6aba Merge pull request #212 from maxmind/dependabot/github_actions/shivammathur/setup-php-2.35.4
Bump shivammathur/setup-php from 2.35.3 to 2.35.4
2025-08-26 08:03:06 -07:00
dependabot[bot]
fbc53ce83d Bump shivammathur/setup-php from 2.35.3 to 2.35.4
Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.35.3 to 2.35.4.
- [Release notes](https://github.com/shivammathur/setup-php/releases)
- [Commits](20529878ed...ec406be512)

---
updated-dependencies:
- dependency-name: shivammathur/setup-php
  dependency-version: 2.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-26 02:07:10 +00:00
William Storey
71009355a7 Merge pull request #211 from maxmind/dependabot/github_actions/astral-sh/setup-uv-6.6.0
Bump astral-sh/setup-uv from 6.5.0 to 6.6.0
2025-08-21 10:48:35 -07:00
dependabot[bot]
0dd3e84c31 Bump astral-sh/setup-uv from 6.5.0 to 6.6.0
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6.5.0 to 6.6.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](d9e0f98d3f...4959332f0f)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 6.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-21 14:24:54 +00:00