1
0
mirror of https://github.com/php/pie.git synced 2026-03-23 23:12:17 +01:00

112 Commits

Author SHA1 Message Date
James Titcumb
330475728d 557: use suffix directive for Docker tags 2026-03-23 11:39:37 +00:00
James Titcumb
02bf17d5f5 551: update box version to require 4.7.x 2026-03-23 10:24:52 +00:00
James Titcumb
d2144f95ba Merge pull request #553 from asgrim/add-infection-mutation-testing
Add mutation testing with Infection
2026-03-23 08:59:00 +00:00
James Titcumb
6d7cd2cf9c Add version check to see what SPC version we use 2026-03-23 07:49:29 +00:00
James Titcumb
b70ed6c06b Re-enable Windows pie executable build 2026-03-23 07:49:29 +00:00
James Titcumb
cbbe697859 Ensure mutation tests have GH token 2026-03-19 10:39:22 +00:00
James Titcumb
37abd01c4d Improve PIE developer documentation 2026-03-19 08:53:58 +00:00
James Titcumb
5175bec268 Add mutation testing with Infection 2026-03-18 13:02:07 +00:00
James Titcumb
7fa3aa6e59 Bump actions/attest-build-provenance from 3 to 4
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 3 to 4.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 10:43:40 +00:00
dependabot[bot]
730f3c2836 Bump actions/download-artifact from 7 to 8
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 10:39:38 +00:00
dependabot[bot]
2796a0c1ad Bump actions/upload-artifact from 6 to 7
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 10:39:20 +00:00
James Titcumb
db110ff70c Fixes #514 disable Windows build 2026-02-24 10:27:45 +00:00
James Titcumb
f3f8b73998 Merge pull request #469 from php/dependabot/github_actions/actions/download-artifact-7
Bump actions/download-artifact from 5 to 7
2026-01-02 17:43:25 +00:00
dependabot[bot]
8f4ac5f672 Bump actions/upload-artifact from 5 to 6
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-01 17:10:14 +00:00
dependabot[bot]
7dc848d129 Bump actions/download-artifact from 5 to 7
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v5...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-01 17:10:11 +00:00
James Titcumb
6da2c7ee6a Merge pull request #452 from asgrim/434-prompt-to-install-build-tools
Prompt to install build tools if they're missing
2025-12-22 17:37:13 +00:00
James Titcumb
f7f8c570be Added nightly executables 2025-12-22 14:18:46 +00:00
James Titcumb
51929b0ed2 Rename various jobs and steps for the addition of static binaries 2025-12-22 14:06:55 +00:00
James Titcumb
17c33e85cb Add all the binaries to the PIE release too 2025-12-22 14:06:55 +00:00
James Titcumb
b1b35575fc Tidying up PIE binary build pipeline a bit 2025-12-22 14:06:55 +00:00
James Titcumb
1dc43c3a8a Add Windows into SPC build matrix 2025-12-22 14:06:54 +00:00
James Titcumb
ab2a90b326 Add self contained PIE executable CI step 2025-12-22 14:06:54 +00:00
James Titcumb
82b1ec2a08 434: run Dockerfile e2e test in CI 2025-12-17 15:47:32 +00:00
James Titcumb
2af89a9ee0 455: fix trunk actions to run on default branch (whatever that may be) 2025-12-17 15:07:48 +00:00
dependabot[bot]
cbd6265259 Bump actions/checkout from 4 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-26 08:43:22 +00:00
James Titcumb
9bac9f83b7 Remove 8.5 RC step 2025-11-24 14:54:30 +00:00
James Titcumb
d771cdc74c Ensure all the tags are available 2025-11-14 12:21:44 +00:00
James Titcumb
8a0d5438cc Implemented self-update feature check 2025-11-14 11:43:55 +00:00
James Titcumb
4bea38646c Use Dockerfile for reproducible Behat test environment 2025-11-14 09:27:49 +00:00
James Titcumb
3018777f7a Display more output for some failures 2025-11-14 09:27:49 +00:00
James Titcumb
74e35f453c Implemented feature tests for PHP project pie install 2025-11-14 09:27:49 +00:00
James Titcumb
65351ce429 Ensure repo is checked out for gh to attach the release 2025-11-05 15:25:26 +00:00
James Titcumb
458bf2d4f4 Modify release workflow to allow immutable releases
Instead of creating the release by hand and then having a workflow triggered
to add the release, which is not possible if immutable releases are enabled,
we will now:

 - run the release workflow on "tag" instead of "release"
 - the workflow creates a DRAFT release based on the tag that triggered
 - the workflow then attaches the PHAR to the release
 - maintainer must then review the release, ensure it is correct, then publish

Once the release is published (assuming immutable releases are enabled):

 - the tag is immutable
 - the attached assets on the release are immutable
 - the flag that dictates pre-release/latest release status is immutable
 - the release changelog may still be changed
 - the release title may still be changed
 - a release attestation is added to the release which can be verified

The release can be verified with:

```shell
gh release verify <release-tag>
```

A given `pie.phar` on your machine can be verified as the release asset with:

```shell
gh release verify-asset <release-tag> pie.phar
```

For more documentation, see:
https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/immutable-releases
2025-11-04 18:39:40 +00:00
dependabot[bot]
25417fd05e Bump actions/upload-artifact from 4 to 5
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-03 15:20:38 +00:00
dependabot[bot]
64c0ff74ce Bump actions/download-artifact from 5 to 6
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-03 15:20:20 +00:00
James Titcumb
5abb970178 Use PHP site JSON format to determine download URLs
Ref: 04d3329726/.github/actions/install-php/action.yml (L38-L46)
2025-10-20 21:58:29 +01:00
James Titcumb
e3245cd247 Use PHP 8.5.0RC2 2025-10-20 19:46:17 +01:00
James Titcumb
1f41cff129 Define some lib dependencies for sodium, curl, bz2 2025-10-06 19:55:43 +01:00
James Titcumb
06de5a1a75 Removed redundant trusted-root store 2025-09-29 13:41:27 +01:00
James Titcumb
e8dbb79d8c Introduce phpstan instead of psalm 2025-09-29 11:47:14 +01:00
James Titcumb
3c4e20aab2 Apply GH token for Windows builds too 2025-09-09 22:45:20 +01:00
James Titcumb
70fcaa605c Fixed build-and-push-docker-image example 2025-09-03 21:49:11 +01:00
James Titcumb
bd66f7d63b Only tag bin Docker image when tagging stable 2025-09-03 21:17:09 +01:00
James Titcumb
533c0d2645 De-duplicate docker image build for nightly and release tags 2025-09-03 20:57:27 +01:00
James Titcumb
66c5d9ef9d Updated bundled-php-extension-tests to use latest releases of 8.3, 8.4, 8.5 2025-09-02 19:43:06 +01:00
James Titcumb
b0afa93b59 Merge pull request #341 from php/dependabot/github_actions/actions/download-artifact-5
Bump actions/download-artifact from 4 to 5
2025-09-02 19:05:15 +01:00
James Titcumb
fc2c00fb98 Merge pull request #340 from php/dependabot/github_actions/actions/checkout-5
Bump actions/checkout from 4 to 5
2025-09-02 19:04:44 +01:00
James Titcumb
56537afab3 Merge pull request #339 from php/dependabot/github_actions/actions/upload-pages-artifact-4
Bump actions/upload-pages-artifact from 3 to 4
2025-09-02 19:04:20 +01:00
dependabot[bot]
07d5f4ae89 Bump actions/download-artifact from 4 to 5
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-02 08:44:06 +00:00
dependabot[bot]
bfe58d2a4d Bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-02 08:39:05 +00:00