mirror of
https://github.com/linuxserver/Heimdall.git
synced 2026-08-07 07:16:13 +00:00
f69cbba6cd
Bumps the packages reported by CVE/GHSA scans in #1564 to their patched releases (with transitive dependencies): - symfony/http-foundation 7.3.1 -> 7.4.14 (CVE-2025-64500 / GHSA-3rg7-wf37-54rm) - phpunit/phpunit 10.5.47 -> 10.5.64 (CVE-2026-24765 / GHSA-vvj3-c3rp-c85p) - aws/aws-sdk-php 3.349.3 -> 3.388.0 (GHSA-27qh-8cxx-2cr5) - enshrined/svg-sanitize 0.21.0 -> 0.22.0 (GHSA-22wq-q86m-83fh) Some transitive dependencies now require PHP 8.4, which matches the runtime shipped in the official LinuxServer image, so the composer requirement is raised to ^8.4, CI is pinned to PHP 8.4, and the readme is updated to match. The remaining advisories in the report (php84, curl, libpq, git, sqlite, busybox, coreutils) come from the LinuxServer base image, not this repository, and are addressed by rebuilding the image on an updated base. Refs #1564
60 lines
1.5 KiB
YAML
60 lines
1.5 KiB
YAML
name: Tests (PHP)
|
|
|
|
on: [pull_request]
|
|
|
|
jobs:
|
|
tests:
|
|
name: Run tests
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v1
|
|
|
|
- name: Setup PHP, with composer and extensions
|
|
uses: shivammathur/setup-php@v2 #https://github.com/shivammathur/setup-php
|
|
with:
|
|
php-version: '8.4'
|
|
extensions: mbstring, dom, fileinfo, mysql, libxml, xml, xmlwriter, dom, tokenizer, filter, json, phar, pcre, openssl, pdo, intl, curl
|
|
|
|
- name: Cache composer dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
path: vendor
|
|
key: composer-${{ hashFiles('composer.lock') }}
|
|
|
|
#- name: Run composer install
|
|
# run: composer install -n --prefer-dist
|
|
# env:
|
|
# APP_ENV: testing
|
|
|
|
- name: Prepare Laravel Application
|
|
run: |
|
|
cp .env.example .env
|
|
php artisan key:generate
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: '24'
|
|
cache: 'npm'
|
|
|
|
- name: Install node modules and build assets
|
|
run: npm ci && npm run dev
|
|
|
|
- name: Run ESLint
|
|
run: npm run lint
|
|
|
|
- name: Run tests
|
|
run: php artisan test
|
|
env:
|
|
APP_ENV: testing
|
|
|
|
- name: Php code sniffer
|
|
run: ./vendor/bin/phpcs --config-set ignore_warnings_on_exit 1
|
|
|
|
- name: Upload artifacts
|
|
uses: actions/upload-artifact@master
|
|
if: failure()
|
|
with:
|
|
name: Logs
|
|
path: ./storage/logs
|