mirror of
https://github.com/shivammathur/setup-php.git
synced 2026-07-24 18:10:52 -03:00
d64d1a1275bbfc1971370a3f04198b4ed7170e04
16 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
dependabot[bot]
|
d64d1a1275 |
Bump the github-actions group with 3 updates (#1094)
Some checks failed
Main workflow / Run (ubuntu-24.04, 5.6) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.0) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.1) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.2) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.3) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 7.4) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.0) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.1) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.2) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.3) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.4) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.5) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, 8.6) (push) Has been cancelled
Main workflow / Run (ubuntu-24.04, php-version-file, ) (push) Has been cancelled
Main workflow / Run (windows-2022, 5.3) (push) Has been cancelled
Main workflow / Run (windows-2022, 5.4) (push) Has been cancelled
Main workflow / Run (windows-2022, 5.5) (push) Has been cancelled
Main workflow / Run (windows-2022, 5.6) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.1) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.2) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.3) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.4) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.5) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.6) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.0) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.1) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.2) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.3) (push) Has been cancelled
Main workflow / Run (windows-2022, 7.4) (push) Has been cancelled
Main workflow / Run (windows-2022, 8.0) (push) Has been cancelled
Bumps the github-actions group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.36.3 to 4.37.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits]( |
||
|
dependabot[bot]
|
add91f08e1 |
Bump the github-actions group with 3 updates (#1092)
Some checks failed
Docs workflow / Create (ubuntu-24.04, 7.0) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.1) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.2) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.3) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.4) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.0) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.1) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.2) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.3) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.4) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.5) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.6) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.3) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.1) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.2) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.3) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.4) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.5) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.6) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.4) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.5) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.6) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.0) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.1) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.2) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.3) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.4) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.0) (push) Has been cancelled
Docs workflow / Update (push) Has been cancelled
CodeQL Workflow / CodeQL Analysis (push) Failing after 28m19s
Bumps the github-actions group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.36.2 to 4.36.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits]( |
||
|
dependabot[bot]
|
529ee057c4 |
Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group (#1090)
Some checks failed
Docs workflow / Create (ubuntu-24.04, 8.2) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.4) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.0) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.1) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.4) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.5) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.6) (push) Has been cancelled
Docs workflow / Update (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.0) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.1) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.2) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.3) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.4) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.0) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.1) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.3) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.4) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.5) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.6) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.3) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.4) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.5) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.6) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.0) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.1) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.2) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.3) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.2) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.3) (push) Has been cancelled
CodeQL Workflow / CodeQL Analysis (push) Failing after 1h11m33s
Bumps the github-actions group with 1 update: [actions/checkout](https://github.com/actions/checkout).
Updates `actions/checkout` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](
|
||
|
dependabot[bot]
|
95edd72557 |
Bump the github-actions group with 3 updates (#1087)
Some checks failed
Docs workflow / Create (ubuntu-24.04, 5.6) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.0) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.1) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.2) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.3) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.4) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.0) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.1) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.2) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.3) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.4) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.5) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.6) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.3) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.4) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.5) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.6) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.0) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.1) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.2) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.3) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.4) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.0) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.1) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.2) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.3) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.4) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.5) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.6) (push) Has been cancelled
Docs workflow / Update (push) Has been cancelled
Bumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [github/codeql-action](https://github.com/github/codeql-action) and [codecov/codecov-action](https://github.com/codecov/codecov-action). Updates `actions/checkout` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits]( |
||
|
dependabot[bot]
|
083d5237d9 |
Bump the github-actions group with 2 updates (#1085)
Some checks failed
Docs workflow / Create (ubuntu-24.04, 7.0) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.1) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.2) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.3) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 7.4) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.0) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.1) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.2) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.3) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.4) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.5) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.4) (push) Has been cancelled
Docs workflow / Create (ubuntu-24.04, 8.6) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.3) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.4) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.5) (push) Has been cancelled
Docs workflow / Create (windows-2022, 5.6) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.0) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.1) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.2) (push) Has been cancelled
Docs workflow / Create (windows-2022, 7.3) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.0) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.1) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.2) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.3) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.4) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.5) (push) Has been cancelled
Docs workflow / Create (windows-2022, 8.6) (push) Has been cancelled
Docs workflow / Update (push) Has been cancelled
CodeQL Workflow / CodeQL Analysis (push) Failing after 8m31s
Bumps the github-actions group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [codecov/codecov-action](https://github.com/codecov/codecov-action). Updates `github/codeql-action` from 4.35.5 to 4.36.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits]( |
||
Shivam Mathur
|
deb2299a77 | Harden GitHub Actions workflows | ||
|
dependabot[bot]
|
aaed46225e |
Bump actions/checkout from 5 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v5...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> |
||
|
dependabot[bot]
|
ab68d9f583 |
Bump github/codeql-action from 3 to 4
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v3...v4) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> |
||
|
dependabot[bot]
|
629475b7b3 |
Bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> |
||
jrfnl
|
c9735bcc02 |
GH Actions: don't run cron jobs on forks
While workflows are disabled by default in forks, it is quite common for contributors to enable them to verify CI will pass before submitting a pull request.
When enabling workflow runs in forks, it's "all or nothing".
This means that:
* All workflows which are only intended to be run on the canonical repo will also be enabled.
These workflows will also often need access to repo-specific secrets and will typically fail when run from a fork.
* Workflows which contain cron jobs will also be enabled.
Depending on the type of account the contributor has, this can burn through their "CI minutes".
This commit is based on a review of workflows containing cron jobs and disables running the jobs when a cron job is triggered in a fork.
|
||
|
dependabot[bot]
|
5b709ff10e |
Bump github/codeql-action from 2 to 3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v2...v3) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> |
||
|
Shivam Mathur
|
6207829361 | Update use of actions/checkout to v4 | ||
|
dependabot[bot]
|
68ba5ba947 |
Bump github/codeql-action from 1 to 2
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 to 2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v1...v2) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> |
||
nathannaveen
|
787285e08a |
chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs [Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/) Signed-off-by: nathannaveen <42319948+nathannaveen@users.noreply.github.com> |
||
|
Shivam Mathur
|
4678e809c3 | Bump actions/checkout to v3 | ||
|
Shivam Mathur
|
44ff4ed92d | Refactor workflows and templates |