Shivam Mathur
8e6e5267e7
Harden tool checksum verification ( #1099 )
Main workflow / Run (windows-2022, 5.3) (push) Has been cancelled
Main workflow / Run (windows-2022, 5.4) (push) Has been cancelled
Main workflow / Run (windows-2022, 5.5) (push) Has been cancelled
Main workflow / Run (windows-2022, 5.6) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.0) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.1) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 5.6) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.0) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.1) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.2) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.3) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.4) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.0) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.1) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.2) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.3) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.4) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.5) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.6) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, php-version-file, ) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.2) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.3) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.4) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.0) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.1) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.2) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.3) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.4) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.5) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.6) (push) Has been cancelled
2026-07-23 19:24:32 +05:30
Keisuke Maeda
8ca9579834
Add support for pinning tools to a checksum ( #1098 )
...
Tools in the tools input can now be pinned to a checksum using the
tool:version@sha256:<hash> or tool:version@sha512:<hash> syntax.
The downloaded tool is verified against the checksum on all platforms,
including when it is served from the tools cache, and it is removed
along with its cache entry if the verification fails.
Checksum verification is supported for tools downloaded as phar
archives. Specifying a checksum for tools set up using composer
packages or custom package scripts results in an error.
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-23 18:15:59 +05:30
Shivam Mathur
b9ef68088b
Bump Node.js packages
...
Main workflow / Run (ubuntu-24.04, 5.6) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.0) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.1) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.2) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.3) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.4) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.0) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.1) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.2) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.3) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.4) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.5) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.6) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, php-version-file, ) (push) Has been cancelled
Main workflow / Run (windows-2022, 5.3) (push) Has been cancelled
Main workflow / Run (windows-2022, 5.4) (push) Has been cancelled
Main workflow / Run (windows-2022, 5.5) (push) Has been cancelled
Main workflow / Run (windows-2022, 5.6) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.0) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.1) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.2) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.3) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.4) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.0) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.1) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.2) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.3) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.4) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.5) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.6) (push) Has been cancelled
Add allowScripts for 3 packages
2026-07-21 18:21:48 +05:30
Shivam Mathur
5825be4b77
Harden environment lookup
2026-05-18 00:56:40 +05:30
Shivam Mathur
eeef37e059
GHSA-pqwm-q9pv-ph8r - Fix CWE-78 [skip ci]
2026-05-14 08:58:36 +05:30
Shivam Mathur
7748c24380
GHSA-f9f8-rm49-7jv2: Fix GitHub auth handling for composer in affected versions
2026-05-13 16:19:11 +05:30
Shivam Mathur
106fd0866c
Strip backslash line continuation from extension inputs
2026-03-29 20:46:19 +05:30
Shivam Mathur
00c8f84a71
Add support for ionCube for PHP 8.5 [skip ci]
2026-03-13 22:21:20 +05:30
Shivam Mathur
c033e31e7c
Add support for zephir parser for PHP 8.5 [skip ci]
2026-03-13 22:10:53 +05:30
Shivam Mathur
fe26b509d7
Fix support for pecl_http on Windows [skip ci]
2026-03-13 20:50:10 +05:30
theluckystrike
746e1a46d1
fix: use latest in URL when version is empty
...
When version is not specified (empty string), the getUrl function
was generating invalid URLs like /releases/download/cs2pr without
any version, which returned 404.
This fix ensures that when version is empty or 'latest', the URL
includes '/latest/' which GitHub handles correctly with a redirect
to the actual latest release.
Fixes #1063
2026-03-04 22:03:38 +07:00
Shivam Mathur
5e98c022f7
Update dependencies
2026-02-08 09:13:03 +05:30
Shivam Mathur
f0b3fd9afe
Update brew extensions
2026-02-08 07:56:22 +05:30
Shivam Mathur
46cb5030ab
Replace generic record interfaces with specific ones
2026-01-21 02:46:20 +05:30
Shivam Mathur
109ae4d1c0
Reduce bundle size
...
Replace @actions/core with local functions
@actions/core is unmaintained and poorly designed for projects that just need basic functions
2026-01-20 07:47:23 +05:30
Shivam Mathur
871ff01b2b
Refactor to use ES2024+ features for Node 24
...
Use Set for O(1) redirect status code lookup in fetch.ts
Use at(-1) and Object.hasOwn() in tools.ts
Use for...of with entries() in utils.ts
2026-01-20 06:46:28 +05:30
Shivam Mathur
46ae35f333
Update to Node 24
...
Update fetch.ts to use native fetch() API
Use immutable sort in tools.ts
2026-01-20 06:29:00 +05:30
Shivam Mathur
f89a301251
Override undici version
2026-01-17 03:15:23 +05:30
Shivam Mathur
5efa2a774e
Fix support to parse master in php-version input
2025-12-18 21:36:10 +05:30
Shivam Mathur
be556f8879
Add 8.5 for backfire in extensions.ts
2025-11-26 06:25:09 +05:30
Shivam Mathur
91d37511e3
Fix fallback to latest version in tools.ts
2025-11-26 06:25:09 +05:30
Shivam Mathur
43e4e008cc
Add support for ibm extensions [skip ci]
2025-11-25 16:23:49 +05:30
Shivam Mathur
2c40db3599
Fix getcomposer fallback url for specific versions
2025-11-21 01:02:19 +05:30
Shivam Mathur
4eb1b49da1
Bump dependencies
2025-11-18 01:36:59 +05:30
Shivam Mathur
47ac2e221b
Add support for relay-nightly in extensions.ts
2025-10-19 00:27:14 +05:30
Shivam Mathur
bf6b4fbd49
Improve sorting in tools.getSemverVersion
2025-09-18 16:30:57 +05:30
Shivam Mathur
8f8196743c
Fix sorting in tools.getSemverVersion
2025-09-17 19:06:59 +05:30
Shivam Mathur
dfcda83968
Add fallback url for composer
2025-09-04 20:26:04 +05:30
Shivam Mathur
1398cb4c9f
Fix using new github-input for tools.ts
2025-08-27 17:12:07 +05:30
Shivam Mathur
55463ffe4f
Add support for github-token input
2025-07-17 07:32:24 +05:30
Christoph M. Becker
c954e9c756
Lock Phive version for PHP 7.3/7.4
...
Latest Phive (0.16.0) claims to require PHP 8.0 or later[1]. While I
have not found any issues running it under PHP 7.4, it might be better
to stick with Phive 0.15.3 for PHP 7.3/7.4.
[1] <https://github.com/phar-io/phive/releases/tag/0.16.0 >
2025-06-03 14:35:02 +02:00
Shivam Mathur
b595b415e2
Add fallback for the manifest URL
2025-05-19 08:09:13 +05:30
Shivam Mathur
b7bd9e4655
Bump version to 2.33.0
2025-04-13 00:13:54 +05:30
Sn0wCrack
310e481b83
feat: allow tools path directory to be set
...
also add a .node-version file
2025-04-07 12:28:57 +05:30
Shivam Mathur
f5d98d1683
Improve support for phalcon5 and zephir_parser
2025-03-14 21:26:51 +05:30
Shivam Mathur
1a94db50cb
Update dependencies
2025-03-14 20:36:54 +05:30
Shivam Mathur
3bfebc13bc
Add fallback url for phpunit tools
2025-02-07 05:40:29 +05:30
Shivam Mathur
260b35cca0
Add support for blackfire on PHP 8.4
2025-02-01 21:27:42 +05:30
Shivam Mathur
f902cc7bd9
Update ioncube support till PHP 8.4
2025-02-01 20:59:07 +05:30
Shivam Mathur
34b79cab10
Improve docs for php-version-file input
2024-12-30 21:47:27 +05:30
Shivam Mathur
b6d8115f12
Add support for .tool-versions format in php-version-file
2024-12-23 15:27:22 +05:30
Shivam Mathur
84f76b1fc9
Add support for composer files in sub-directory
2024-12-23 14:36:14 +05:30
Shivam Mathur
85a8dfd0c7
Rebuild release file
2024-12-14 03:27:47 +05:30
Shivam Mathur
ae95648cfc
Bump Node.js dependencies
2024-11-18 19:32:14 +05:30
Shivam Mathur
7f1cfc01ec
Bump version to 2.32.0
...
Update Node.js dependencies
Migrate eslint config to a mjs file
Fix imports in tests
Bump to Node.js 20.x in workflows
2024-11-04 08:55:26 +05:30
Shivam Mathur
2e947f1f69
Bump version to 2.31.0
...
Update Node.js dependencies
2024-06-24 03:19:18 +05:30
Shivam Mathur
fdb0d9d1a7
Add PHP 8.3 support for zephir parser
2024-06-02 07:32:16 +05:30
Shivam Mathur
376a964e21
Implement ioncube support on unix correctly
...
I think I jumped the shark with this one for this project
2024-05-22 06:54:49 +05:30
Shivam Mathur
116fe4df69
Add vld for macOS
2024-03-26 17:29:27 +05:30
Shivam Mathur
31bfabaf56
Bump Node.js dependencies
2024-03-25 01:05:36 +05:30
