James Titcumb
330475728d
557: use suffix directive for Docker tags
2026-03-23 11:39:37 +00:00
James Titcumb
02bf17d5f5
551: update box version to require 4.7.x
2026-03-23 10:24:52 +00:00
James Titcumb
d2144f95ba
Merge pull request #553 from asgrim/add-infection-mutation-testing
...
Add mutation testing with Infection
2026-03-23 08:59:00 +00:00
James Titcumb
6d7cd2cf9c
Add version check to see what SPC version we use
2026-03-23 07:49:29 +00:00
James Titcumb
b70ed6c06b
Re-enable Windows pie executable build
2026-03-23 07:49:29 +00:00
James Titcumb
cbbe697859
Ensure mutation tests have GH token
2026-03-19 10:39:22 +00:00
James Titcumb
37abd01c4d
Improve PIE developer documentation
2026-03-19 08:53:58 +00:00
James Titcumb
5175bec268
Add mutation testing with Infection
2026-03-18 13:02:07 +00:00
James Titcumb
7fa3aa6e59
Bump actions/attest-build-provenance from 3 to 4
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 3 to 4.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](https://github.com/actions/attest-build-provenance/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-06 10:43:40 +00:00
dependabot[bot]
730f3c2836
Bump actions/download-artifact from 7 to 8
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '8'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-06 10:39:38 +00:00
dependabot[bot]
2796a0c1ad
Bump actions/upload-artifact from 6 to 7
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-06 10:39:20 +00:00
James Titcumb
db110ff70c
Fixes #514 disable Windows build
2026-02-24 10:27:45 +00:00
James Titcumb
f3f8b73998
Merge pull request #469 from php/dependabot/github_actions/actions/download-artifact-7
...
Bump actions/download-artifact from 5 to 7
2026-01-02 17:43:25 +00:00
dependabot[bot]
8f4ac5f672
Bump actions/upload-artifact from 5 to 6
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-01 17:10:14 +00:00
dependabot[bot]
7dc848d129
Bump actions/download-artifact from 5 to 7
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 5 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v5...v7 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-01 17:10:11 +00:00
James Titcumb
6da2c7ee6a
Merge pull request #452 from asgrim/434-prompt-to-install-build-tools
...
Prompt to install build tools if they're missing
2025-12-22 17:37:13 +00:00
James Titcumb
f7f8c570be
Added nightly executables
2025-12-22 14:18:46 +00:00
James Titcumb
51929b0ed2
Rename various jobs and steps for the addition of static binaries
2025-12-22 14:06:55 +00:00
James Titcumb
17c33e85cb
Add all the binaries to the PIE release too
2025-12-22 14:06:55 +00:00
James Titcumb
b1b35575fc
Tidying up PIE binary build pipeline a bit
2025-12-22 14:06:55 +00:00
James Titcumb
1dc43c3a8a
Add Windows into SPC build matrix
2025-12-22 14:06:54 +00:00
James Titcumb
ab2a90b326
Add self contained PIE executable CI step
2025-12-22 14:06:54 +00:00
James Titcumb
82b1ec2a08
434: run Dockerfile e2e test in CI
2025-12-17 15:47:32 +00:00
James Titcumb
2af89a9ee0
455: fix trunk actions to run on default branch (whatever that may be)
2025-12-17 15:07:48 +00:00
dependabot[bot]
cbd6265259
Bump actions/checkout from 4 to 6
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-26 08:43:22 +00:00
James Titcumb
9bac9f83b7
Remove 8.5 RC step
2025-11-24 14:54:30 +00:00
James Titcumb
d771cdc74c
Ensure all the tags are available
2025-11-14 12:21:44 +00:00
James Titcumb
8a0d5438cc
Implemented self-update feature check
2025-11-14 11:43:55 +00:00
James Titcumb
4bea38646c
Use Dockerfile for reproducible Behat test environment
2025-11-14 09:27:49 +00:00
James Titcumb
3018777f7a
Display more output for some failures
2025-11-14 09:27:49 +00:00
James Titcumb
74e35f453c
Implemented feature tests for PHP project pie install
2025-11-14 09:27:49 +00:00
James Titcumb
65351ce429
Ensure repo is checked out for gh to attach the release
2025-11-05 15:25:26 +00:00
James Titcumb
458bf2d4f4
Modify release workflow to allow immutable releases
...
Instead of creating the release by hand and then having a workflow triggered
to add the release, which is not possible if immutable releases are enabled,
we will now:
- run the release workflow on "tag" instead of "release"
- the workflow creates a DRAFT release based on the tag that triggered
- the workflow then attaches the PHAR to the release
- maintainer must then review the release, ensure it is correct, then publish
Once the release is published (assuming immutable releases are enabled):
- the tag is immutable
- the attached assets on the release are immutable
- the flag that dictates pre-release/latest release status is immutable
- the release changelog may still be changed
- the release title may still be changed
- a release attestation is added to the release which can be verified
The release can be verified with:
```shell
gh release verify <release-tag>
```
A given `pie.phar` on your machine can be verified as the release asset with:
```shell
gh release verify-asset <release-tag> pie.phar
```
For more documentation, see:
https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/immutable-releases
2025-11-04 18:39:40 +00:00
dependabot[bot]
25417fd05e
Bump actions/upload-artifact from 4 to 5
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-03 15:20:38 +00:00
dependabot[bot]
64c0ff74ce
Bump actions/download-artifact from 5 to 6
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 5 to 6.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-03 15:20:20 +00:00
James Titcumb
5abb970178
Use PHP site JSON format to determine download URLs
...
Ref: 04d3329726/.github/actions/install-php/action.yml (L38-L46)
2025-10-20 21:58:29 +01:00
James Titcumb
e3245cd247
Use PHP 8.5.0RC2
2025-10-20 19:46:17 +01:00
James Titcumb
1f41cff129
Define some lib dependencies for sodium, curl, bz2
2025-10-06 19:55:43 +01:00
James Titcumb
06de5a1a75
Removed redundant trusted-root store
2025-09-29 13:41:27 +01:00
James Titcumb
e8dbb79d8c
Introduce phpstan instead of psalm
2025-09-29 11:47:14 +01:00
James Titcumb
3c4e20aab2
Apply GH token for Windows builds too
2025-09-09 22:45:20 +01:00
James Titcumb
70fcaa605c
Fixed build-and-push-docker-image example
2025-09-03 21:49:11 +01:00
James Titcumb
bd66f7d63b
Only tag bin Docker image when tagging stable
2025-09-03 21:17:09 +01:00
James Titcumb
533c0d2645
De-duplicate docker image build for nightly and release tags
2025-09-03 20:57:27 +01:00
James Titcumb
66c5d9ef9d
Updated bundled-php-extension-tests to use latest releases of 8.3, 8.4, 8.5
2025-09-02 19:43:06 +01:00
James Titcumb
b0afa93b59
Merge pull request #341 from php/dependabot/github_actions/actions/download-artifact-5
...
Bump actions/download-artifact from 4 to 5
2025-09-02 19:05:15 +01:00
James Titcumb
fc2c00fb98
Merge pull request #340 from php/dependabot/github_actions/actions/checkout-5
...
Bump actions/checkout from 4 to 5
2025-09-02 19:04:44 +01:00
James Titcumb
56537afab3
Merge pull request #339 from php/dependabot/github_actions/actions/upload-pages-artifact-4
...
Bump actions/upload-pages-artifact from 3 to 4
2025-09-02 19:04:20 +01:00
dependabot[bot]
07d5f4ae89
Bump actions/download-artifact from 4 to 5
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4 to 5.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-02 08:44:06 +00:00
dependabot[bot]
bfe58d2a4d
Bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-02 08:39:05 +00:00