William Storey
ee572d79e6
Merge pull request #230 from maxmind/greg/eng-3770
...
Pin GitHub Actions to SHA for security
2026-01-08 14:24:56 -08:00
Gregory Oschwald
b86944d9f4
Pin GitHub Actions to SHA for security
...
Update official GitHub Actions (actions/*, github/*) to use pinned
commit SHAs instead of version tags. This satisfies zizmor's
unpinned-action-reference security check.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-01-07 14:14:00 -08:00
faktas2
3d45e5b961
Merge pull request #229 from maxmind/wstorey/php-versions
...
Test on PHP 8.5
2025-12-29 12:04:06 -05:00
William Storey
b416ef9876
Test on PHP 8.5
2025-12-29 08:48:33 -08:00
William Storey
e920cf5a1d
Merge pull request #228 from maxmind/greg/eng-3638
...
Update Dependabot cooldown to 7 days
2025-12-15 12:55:42 -08:00
Gregory Oschwald
01b96934bb
Update Dependabot cooldown from 4 to 7 days
2025-12-12 09:19:33 -08:00
William Storey
1fe6b63711
Merge pull request #227 from maxmind/greg/eng-1733
...
Improve release script reliability (ENG-1733)
2025-12-04 20:00:41 -08:00
Gregory Oschwald
7095078684
Replace i386 tests with arm64 in CI workflow
...
i386 support has been dropped upstream in setup-php due to deb.sury
removing i386 packages.
See: https://github.com/shivammathur/setup-php/issues/1040#issuecomment-3608728874
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-12-04 07:04:36 -08:00
Gregory Oschwald
bfd717e908
Fix release script consistency issues
...
- Support pre-release versions in changelog parsing
- Quote date command substitution for defensive programming
- Fix shellcheck SC2162: add -r flag to read command
- Apply shfmt formatting
2025-12-04 07:04:32 -08:00
Gregory Oschwald
29cb614921
Add pre-flight checks to release script
2025-12-03 10:12:19 -08:00
William Storey
985e277cff
Merge pull request #226 from maxmind/dependabot/github_actions/shivammathur/setup-php-2.36.0
...
Bump shivammathur/setup-php from 2.35.5 to 2.36.0
2025-12-02 12:31:49 -08:00
dependabot[bot]
ca64b098d6
Bump shivammathur/setup-php from 2.35.5 to 2.36.0
...
Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php ) from 2.35.5 to 2.36.0.
- [Release notes](https://github.com/shivammathur/setup-php/releases )
- [Commits](bf6b4fbd49...44454db4f0 )
---
updated-dependencies:
- dependency-name: shivammathur/setup-php
dependency-version: 2.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-02 14:05:38 +00:00
William Storey
909b600971
Merge pull request #225 from maxmind/dependabot/github_actions/zizmorcore/zizmor-action-0.3.0
...
Bump zizmorcore/zizmor-action from 0.2.0 to 0.3.0
2025-11-27 08:18:29 -08:00
dependabot[bot]
de83442d3e
Bump zizmorcore/zizmor-action from 0.2.0 to 0.3.0
...
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ) from 0.2.0 to 0.3.0.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](e673c3917a...e639db9933 )
---
updated-dependencies:
- dependency-name: zizmorcore/zizmor-action
dependency-version: 0.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-27 14:05:26 +00:00
William Storey
162dcf0281
Merge pull request #224 from maxmind/dependabot/github_actions/actions/checkout-6
...
Bump actions/checkout from 5 to 6
2025-11-25 09:27:32 -08:00
dependabot[bot]
ff324006ae
Bump actions/checkout from 5 to 6
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-25 14:05:30 +00:00
William Storey
bc6017e996
Merge pull request #223 from maxmind/greg/eng-3504
...
Release to PIE
2025-11-21 14:54:01 -08:00
Gregory Oschwald
2194f58d0f
Add check that repo is clean
v1.13.1
2025-11-21 14:24:26 -08:00
Gregory Oschwald
45b2e9c929
Add .claude to .gitignore
2025-11-21 14:23:12 -08:00
Gregory Oschwald
ea35c4fa9a
Bumped version to 1.13.1
2025-11-21 14:21:26 -08:00
Gregory Oschwald
c951fffeab
Check that we aren't behind origin/main
2025-11-21 14:21:15 -08:00
Gregory Oschwald
753d644c42
Add changelog for pie release
2025-11-21 14:20:34 -08:00
Gregory Oschwald
173687978e
Add PIE extension support via separate repository
...
- Update release.sh to automate extension repo releases
- Clone extension repo to .ext directory
- Update submodule reference after main release
- Create matching release in extension repo
- Include safety checks and error handling
- Create php_maxminddb-{version}-src.tgz from submodule ext/ directory
- Upload as GitHub release asset
- Update README.md to promote PIE as recommended installation method
- Add maxmind-db/reader-ext to composer.json suggest section
- Add .ext to .gitignore
- Document implementation plan in plan.md
References:
- https://github.com/php/pie/issues/39
2025-11-21 14:18:46 -08:00
William Storey
62cdd95fdf
Merge pull request #222 from maxmind/greg/eng-3323
...
Release 1.13.0
2025-11-20 12:01:22 -08:00
Gregory Oschwald
b298986c4f
Bumped version to 1.13.0
v1.13.0
2025-11-20 10:37:57 -08:00
Gregory Oschwald
253eb1db72
Set release date
2025-11-20 10:36:50 -08:00
Gregory Oschwald
57c3358385
Check that we are not on main
2025-11-20 10:36:28 -08:00
mm-kevcenteno
75f834a1da
Merge pull request #221 from maxmind/greg/eng-3236
...
Set Dependabot cooldown period
2025-10-31 08:52:43 -04:00
Gregory Oschwald
ae1a4ccb46
Set Dependabot cooldown period to 4 days
...
This addresses the zizmor findings by setting a cooldown period of 4 days
for all package ecosystems in dependabot.yml.
Related to: ENG-3236
2025-10-30 14:28:20 -07:00
Gregory Oschwald
8b2bff3ab8
Merge pull request #220 from maxmind/wstorey/eng-3188-zizmor-github-action-does-not-depend-on-astral-shsetup-uv
...
Run zizmor via zizmorcore/zizmor-action
2025-10-10 10:43:05 -07:00
William Storey
0690503a6c
Run zizmor via zizmorcore/zizmor-action
2025-10-09 22:04:03 +00:00
William Storey
381b0f8095
Merge pull request #219 from maxmind/dependabot/github_actions/astral-sh/setup-uv-7.0.0
...
Bump astral-sh/setup-uv from 6.8.0 to 7.0.0
2025-10-08 08:59:26 -07:00
dependabot[bot]
419cd60834
Bump astral-sh/setup-uv from 6.8.0 to 7.0.0
...
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ) from 6.8.0 to 7.0.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases )
- [Commits](d0cc045d04...eb1897b8dc )
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-08 14:05:31 +00:00
William Storey
642e4a3974
Merge pull request #218 from maxmind/dependabot/github_actions/astral-sh/setup-uv-6.8.0
...
Bump astral-sh/setup-uv from 6.7.0 to 6.8.0
2025-10-01 10:24:28 -07:00
dependabot[bot]
d236b0678e
Bump astral-sh/setup-uv from 6.7.0 to 6.8.0
...
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ) from 6.7.0 to 6.8.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases )
- [Commits](b75a909f75...d0cc045d04 )
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 6.8.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-01 14:06:48 +00:00
Gregory Oschwald
f38eb9bfe9
Merge pull request #215 from maxmind/dependabot/composer/squizlabs/php_codesniffer-3.staror-4.star
...
Update squizlabs/php_codesniffer requirement from 3.* to 3.* || 4.*
2025-09-19 10:40:25 -07:00
William Storey
e11acd7360
Require PHP_CodeSniffer 4+
2025-09-19 17:28:14 +00:00
dependabot[bot]
7fd1cad717
Update squizlabs/php_codesniffer requirement from 3.* to 3.* || 4.*
...
Updates the requirements on [squizlabs/php_codesniffer](https://github.com/PHPCSStandards/PHP_CodeSniffer ) to permit the latest version.
- [Release notes](https://github.com/PHPCSStandards/PHP_CodeSniffer/releases )
- [Changelog](https://github.com/PHPCSStandards/PHP_CodeSniffer/blob/4.x/CHANGELOG-4.x.md )
- [Commits](https://github.com/PHPCSStandards/PHP_CodeSniffer/compare/3.0.0...4.0.0 )
---
updated-dependencies:
- dependency-name: squizlabs/php_codesniffer
dependency-version: 4.0.0
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-19 17:28:05 +00:00
William Storey
cca3aaf359
Merge pull request #217 from maxmind/dependabot/github_actions/shivammathur/setup-php-2.35.5
...
Bump shivammathur/setup-php from 2.35.4 to 2.35.5
2025-09-19 08:24:21 -07:00
dependabot[bot]
b34e587142
Bump shivammathur/setup-php from 2.35.4 to 2.35.5
...
Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php ) from 2.35.4 to 2.35.5.
- [Release notes](https://github.com/shivammathur/setup-php/releases )
- [Commits](ec406be512...bf6b4fbd49 )
---
updated-dependencies:
- dependency-name: shivammathur/setup-php
dependency-version: 2.35.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-19 14:04:49 +00:00
mmpnelson
6a57b70144
Merge pull request #216 from maxmind/mmavletkulov/zizmore-update
...
update zizmor to version 1.13.0
2025-09-18 07:48:11 -07:00
Marsel Mavletkulov
616306d5f9
update zizmor to version 1.13.0
2025-09-16 18:07:28 +00:00
William Storey
facddba111
Merge pull request #214 from maxmind/dependabot/github_actions/astral-sh/setup-uv-6.7.0
...
Bump astral-sh/setup-uv from 6.6.1 to 6.7.0
2025-09-15 10:50:40 -07:00
dependabot[bot]
b7de78b024
Bump astral-sh/setup-uv from 6.6.1 to 6.7.0
...
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ) from 6.6.1 to 6.7.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases )
- [Commits](557e51de59...b75a909f75 )
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 6.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-15 14:37:23 +00:00
William Storey
82b6ab030e
Merge pull request #213 from maxmind/dependabot/github_actions/astral-sh/setup-uv-6.6.1
...
Bump astral-sh/setup-uv from 6.6.0 to 6.6.1
2025-09-03 11:25:06 -07:00
dependabot[bot]
02d82a2dc5
Bump astral-sh/setup-uv from 6.6.0 to 6.6.1
...
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ) from 6.6.0 to 6.6.1.
- [Release notes](https://github.com/astral-sh/setup-uv/releases )
- [Commits](4959332f0f...557e51de59 )
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 6.6.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-03 09:59:44 +00:00
William Storey
cb8b6f6aba
Merge pull request #212 from maxmind/dependabot/github_actions/shivammathur/setup-php-2.35.4
...
Bump shivammathur/setup-php from 2.35.3 to 2.35.4
2025-08-26 08:03:06 -07:00
dependabot[bot]
fbc53ce83d
Bump shivammathur/setup-php from 2.35.3 to 2.35.4
...
Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php ) from 2.35.3 to 2.35.4.
- [Release notes](https://github.com/shivammathur/setup-php/releases )
- [Commits](20529878ed...ec406be512 )
---
updated-dependencies:
- dependency-name: shivammathur/setup-php
dependency-version: 2.35.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-26 02:07:10 +00:00
William Storey
71009355a7
Merge pull request #211 from maxmind/dependabot/github_actions/astral-sh/setup-uv-6.6.0
...
Bump astral-sh/setup-uv from 6.5.0 to 6.6.0
2025-08-21 10:48:35 -07:00
dependabot[bot]
0dd3e84c31
Bump astral-sh/setup-uv from 6.5.0 to 6.6.0
...
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ) from 6.5.0 to 6.6.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases )
- [Commits](d9e0f98d3f...4959332f0f )
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 6.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-21 14:24:54 +00:00