Shivam Mathur
8e6e5267e7
Harden tool checksum verification ( #1099 )
Main workflow / Run (windows-2022, 5.3) (push) Has been cancelled
Main workflow / Run (windows-2022, 5.4) (push) Has been cancelled
Main workflow / Run (windows-2022, 5.5) (push) Has been cancelled
Main workflow / Run (windows-2022, 5.6) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.0) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.1) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 5.6) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.0) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.1) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.2) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.3) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.4) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.0) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.1) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.2) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.3) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.4) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.5) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.6) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, php-version-file, ) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.2) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.3) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.4) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.0) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.1) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.2) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.3) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.4) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.5) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.6) (push) Has been cancelled
2026-07-23 19:24:32 +05:30
Keisuke Maeda
8ca9579834
Add support for pinning tools to a checksum ( #1098 )
...
Tools in the tools input can now be pinned to a checksum using the
tool:version@sha256:<hash> or tool:version@sha512:<hash> syntax.
The downloaded tool is verified against the checksum on all platforms,
including when it is served from the tools cache, and it is removed
along with its cache entry if the verification fails.
Checksum verification is supported for tools downloaded as phar
archives. Specifying a checksum for tools set up using composer
packages or custom package scripts results in an error.
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-23 18:15:59 +05:30
Shivam Mathur
5825be4b77
Harden environment lookup
2026-05-18 00:56:40 +05:30
Shivam Mathur
eeef37e059
GHSA-pqwm-q9pv-ph8r - Fix CWE-78 [skip ci]
2026-05-14 08:58:36 +05:30
Shivam Mathur
7748c24380
GHSA-f9f8-rm49-7jv2: Fix GitHub auth handling for composer in affected versions
2026-05-13 16:19:11 +05:30
Shivam Mathur
106fd0866c
Strip backslash line continuation from extension inputs
2026-03-29 20:46:19 +05:30
Shivam Mathur
fe26b509d7
Fix support for pecl_http on Windows [skip ci]
2026-03-13 20:50:10 +05:30
theluckystrike
746e1a46d1
fix: use latest in URL when version is empty
...
When version is not specified (empty string), the getUrl function
was generating invalid URLs like /releases/download/cs2pr without
any version, which returned 404.
This fix ensures that when version is empty or 'latest', the URL
includes '/latest/' which GitHub handles correctly with a redirect
to the actual latest release.
Fixes #1063
2026-03-04 22:03:38 +07:00
Shivam Mathur
f0b3fd9afe
Update brew extensions
2026-02-08 07:56:22 +05:30
Shivam Mathur
46cb5030ab
Replace generic record interfaces with specific ones
2026-01-21 02:46:20 +05:30
Shivam Mathur
109ae4d1c0
Reduce bundle size
...
Replace @actions/core with local functions
@actions/core is unmaintained and poorly designed for projects that just need basic functions
2026-01-20 07:47:23 +05:30
Shivam Mathur
46ae35f333
Update to Node 24
...
Update fetch.ts to use native fetch() API
Use immutable sort in tools.ts
2026-01-20 06:29:00 +05:30
Shivam Mathur
91d37511e3
Fix fallback to latest version in tools.ts
2025-11-26 06:25:09 +05:30
Shivam Mathur
43e4e008cc
Add support for ibm extensions [skip ci]
2025-11-25 16:23:49 +05:30
Shivam Mathur
2c40db3599
Fix getcomposer fallback url for specific versions
2025-11-21 01:02:19 +05:30
Shivam Mathur
bf6b4fbd49
Improve sorting in tools.getSemverVersion
2025-09-18 16:30:57 +05:30
Shivam Mathur
8f8196743c
Fix sorting in tools.getSemverVersion
2025-09-17 19:06:59 +05:30
Shivam Mathur
dfcda83968
Add fallback url for composer
2025-09-04 20:26:04 +05:30
copilot-swe-agent[bot]
5581e61575
Update test and README for mago tool - remove 'latest' from test and add to README
...
Co-authored-by: shivammathur <1571086+shivammathur@users.noreply.github.com >
2025-07-17 11:27:31 +00:00
copilot-swe-agent[bot]
de4f59c442
Address PR review feedback - simplify validation and remove license display
...
Co-authored-by: shivammathur <1571086+shivammathur@users.noreply.github.com >
2025-07-17 11:16:20 +00:00
copilot-swe-agent[bot]
26dc9b4fed
Add mago tool support as custom package
...
Co-authored-by: shivammathur <1571086+shivammathur@users.noreply.github.com >
2025-07-17 10:57:30 +00:00
Shivam Mathur
b8f4bf011c
Merge branch 'develop' into copilot/fix-d6851e4e-e860-4989-8c53-4391e7116ea7
2025-07-17 14:58:44 +05:30
copilot-swe-agent[bot]
f9fbb516a6
Address review feedback: revert src/tools.ts, remove run.sh, rename tool to backward-compatibility-check
...
Co-authored-by: shivammathur <1571086+shivammathur@users.noreply.github.com >
2025-07-17 08:54:16 +00:00
copilot-swe-agent[bot]
9dffd40113
Add roave/backward-compatibility-check tool support
...
Co-authored-by: shivammathur <1571086+shivammathur@users.noreply.github.com >
2025-07-17 08:34:50 +00:00
copilot-swe-agent[bot]
24d382d1f8
Add support for shipmonk/name-collision-detector tool
...
Co-authored-by: shivammathur <1571086+shivammathur@users.noreply.github.com >
2025-07-17 07:25:13 +00:00
Christoph M. Becker
c954e9c756
Lock Phive version for PHP 7.3/7.4
...
Latest Phive (0.16.0) claims to require PHP 8.0 or later[1]. While I
have not found any issues running it under PHP 7.4, it might be better
to stick with Phive 0.15.3 for PHP 7.3/7.4.
[1] <https://github.com/phar-io/phive/releases/tag/0.16.0 >
2025-06-03 14:35:02 +02:00
Shivam Mathur
b595b415e2
Add fallback for the manifest URL
2025-05-19 08:09:13 +05:30
Andreas Braun
dd942787eb
Add support for pie in tools
2025-05-08 09:46:50 +02:00
Shivam Mathur
3bfebc13bc
Add fallback url for phpunit tools
2025-02-07 05:40:29 +05:30
Shivam Mathur
fd913ba092
Fix composer normalize version [skip ci]
2025-01-22 04:56:05 +05:30
François-Xavier de Guillebon
64652c947d
Update php-cs-fixer repository organisation
2025-01-08 11:13:54 +01:00
Shivam Mathur
9e72090525
Fix composer-dependency-analyser packagist repository
2024-12-30 21:54:47 +05:30
Shivam Mathur
b6d8115f12
Add support for .tool-versions format in php-version-file
2024-12-23 15:27:22 +05:30
Shivam Mathur
7f1cfc01ec
Bump version to 2.32.0
...
Update Node.js dependencies
Migrate eslint config to a mjs file
Fix imports in tests
Bump to Node.js 20.x in workflows
2024-11-04 08:55:26 +05:30
Jan Nedbal
24eff50574
Support composer-dependency-analyser
2024-07-15 15:14:10 +02:00
Shivam Mathur
18975ec414
Fix ecs config
2024-04-26 02:16:03 +05:30
em411
806c3cc058
Add support for ecs
2024-04-25 21:59:57 +02:00
Shivam Mathur
a4e22b60bb
Bump version to 2.30.0
2024-03-01 12:06:41 +05:30
Shivam Mathur
35557a3770
Update coverage in install.test.ts
2024-01-01 01:31:20 +05:30
Shivam Mathur
e8cd65f444
Switch to PHPCSStandards/PHP_CodeSniffer for phpcs and phpcbf
2023-12-04 08:00:30 +05:30
Shivam Mathur
b5efb21934
Add tests for box and php-scoper
2023-11-01 09:29:02 +05:30
Shivam Mathur
7fdd3ece87
Fix blackfire-player on Linux and macOS
...
Drop support for blackfire-player on Windows
2023-09-14 02:51:49 +05:30
Shivam Mathur
319feb83c2
Add support to install sqlsrv and pdo_sqlsrv from GitHub releases
2023-09-14 02:51:41 +05:30
Jason Gill
95916a72b1
Only use config.platform.php, as it's guaranteed to be the required version of PHP
2023-07-29 19:48:28 -04:00
Jason Gill
a5fb328c6a
Add support for reading PHP version from composer.lock or composer.json
2023-07-29 19:46:06 -04:00
Shivam Mathur
9d529a72e0
Only check castor version if castor.php is present
2023-06-24 02:25:43 +05:30
Shivam Mathur
c63f07d82e
Fix version prefix for castor
2023-06-23 23:28:05 +05:30
Loïck Piera
7ce22e0264
Add support for jolicode/castor
2023-06-23 16:13:17 +02:00
Shivam Mathur
948bd8df3c
Fix fs import in utlts.test.ts
2023-06-12 17:14:07 +05:30
Shivam Mathur
6cc8b47c6f
Add support to fetch tool versions from packagist
2023-06-12 15:27:46 +05:30
