Commit Graph

141 Commits (configcache-clean-rebased)

Author SHA1 Message Date
Shlee 217920dd3b
Update php-laravel-tests.yml 5 days ago
Shlee 7a94f2e7e6
Update php-larastan.yml 5 days ago
Shlee 1791682cc5
Potential fix for code scanning alert no. 5003: Workflow does not contain permissions
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
5 days ago
Your Name ddc617a8d2 Install libvips on CI runners and test on the vips driver
The vips driver uses jcupitt/vips (FFI binding), which needs ext-ffi
plus the libvips shared library at runtime - not the PECL vips
extension. Add a libvips apt install step and enable ffi in both test
workflows, then switch .env.testing to vips so CI exercises the new
default driver.

Guard ImageThumbnailSupersedeTest to skip when the configured driver's
runtime is unavailable, so contributors without libvips are not blocked.
1 week ago
Shlee b1f35c6a12
Delete .github/workflows/crowdin.yml 1 week ago
Shlee ef13a14b45
Update crowdin.yml 1 week ago
Shlee 7a59b80cf1
Enable auto approval for imported translations 1 week ago
Shlee 711389a99c
Update crowdin.yml 1 week ago
Shlee f49e66033e
Update crowdin.yml 1 week ago
Your Name 777980c5f4 Revert "Replace blocked crowdin/github-action with Crowdin CLI"
This reverts commit a3931bb071.
1 week ago
Your Name a3931bb071 Replace blocked crowdin/github-action with Crowdin CLI
The org's allowed-actions policy blocks crowdin/github-action@v3
(third-party, not verified/allowlisted). Reimplement the same flow
using the official @crowdin/cli npm package plus the GitHub-native gh
CLI, both of which satisfy the policy:

- upload sources: crowdin upload sources
- download translations: crowdin download
- open/update PR: gh pr create against staging, only when translations
  changed

Credentials continue to come from crowdin.yml (project_id_env /
api_token_env), so no config change is needed.
1 week ago
Your Name 8eda1d039f Make DB matrix workflow manual-only (workflow_dispatch)
An empty 'branches: []' under push/pull_request does not disable a
trigger; GitHub treats it as no branch filter and runs on every ref.
Expose only workflow_dispatch so the experimental suite runs solely on
manual trigger.
1 week ago
Your Name 5bdc18e479 Bump DB matrix to PHP 8.5 and mysql 8.5 1 week ago
Your Name fe289c3126 Isolate Redis keys per DB matrix entry; use mariadb connection
- Set a unique REDIS_PREFIX per matrix entry so cache/queue keys never
  collide (the config default derives the prefix from APP_NAME, which is
  identical across entries).
- Point the MariaDB entry at the 'mariadb' connection instead of 'mysql'
  so the MariaDB driver is actually exercised (Laravel 11 treats them as
  distinct drivers).
1 week ago
Shlee acc8273811
Update php-laravel-tests-db-matrix.yml 1 week ago
Shlee 6c0ce5469c
Merge pull request #7267 from pixelfed/db-matrix-testing
Add experimental DB-matrix test workflow (mysql/mariadb/postgres)
1 week ago
Shlee dfb81a6967
Update docker-tag.yml 1 week ago
Your Name 19e4620deb Disable buildx provenance/SBOM attestations for GHCR images
docker/build-push-action attaches provenance (and SBOM) attestations as
extra manifests with an 'unknown/unknown' platform. These render as noisy
'unknown' entries in the GHCR package UI next to the real amd64/arm64
platforms. Set provenance: false and sbom: false so only the runnable
architecture manifests are pushed.

Applied to both the branch-image (docker-push) and release-tag
(docker-tag) workflows.
1 week ago
Shlee d574ddf1f4
Modify workflow triggers for staging and unstable branches
Updated trigger branches for push and pull_request events.
1 week ago
Your Name 983e512409 Add experimental DB-matrix test workflow (mysql/mariadb/postgres)
Runs the Pest suite against real MySQL 8.4, MariaDB 11.4, and PostgreSQL 16
services instead of the default in-memory SQLite, to surface DB-specific
behavior (strict mode, ONLY_FULL_GROUP_BY, unsigned underflow).

This is expected to fail currently, so every step uses continue-on-error
and the test command is suffixed with '|| true' to always report success.
Testing/investigation only; not a required check.
1 week ago
Your Name 9002d6ea24 Automate Crowdin sync via GitHub Action
- Add Crowdin GitHub Action workflow (upload sources, download translations, open PR)
- Sync all lang/en/*.php source files instead of only web.php
- Map zh-CN/zh-TW to existing zh-cn/zh-tw folders
- Remove dead lang/zh (legacy) and lang/me (stale English) locales
1 week ago
Shlee 5b566752e8
Update dependabot.yml 2 weeks ago
Shlee 6fcc518720
Update docker-push.yml 2 weeks ago
Shlee fdcdc62291
Update Ubuntu version in Docker workflow 2 weeks ago
Shlee 503c86e147
Update docker-tag.yml 2 weeks ago
Shlee 9357c1117f
Update docker-push.yml 2 weeks ago
Shlee 5d542d209c
Update dependabot.yml 3 weeks ago
Shlee 93e8c7d868
Update dependabot.yml 3 weeks ago
Shlee 07b5c1fd34
Update dependabot.yml 3 weeks ago
Shlee 0e77345930
Merge pull request #6951 from pixelfed/shleeable-patch-1
Shleeable patch 1
4 weeks ago
Shlee 765e10ea66
Update php-pint.yml 4 weeks ago
Shlee 338d4da427
Update php-laravel-tests.yml 4 weeks ago
Shlee 9dfb5c062e
Update php-larastan.yml 4 weeks ago
Shlee 27f7127ccd
Update php-psalm.yml 4 weeks ago
Shlee 3058d3f816
Update php-psalm.yml
Comment out the SARIF report check and upload steps in the workflow.
4 weeks ago
Your Name 25494c4911 ci(psalm): run analyzer on PHP 8.4 to avoid 8.5 crash
Psalm 6.5.0 fatally crashes on PHP 8.5 (deprecated SplObjectStorage::attach
escalated by its error handler) before analyzing anything. Pin the Psalm
job to 8.4 so it runs and produces SARIF; revert to 8.5 once Psalm supports
it.
4 weeks ago
Your Name aed7936e4e ci(psalm): skip SARIF upload when report is missing
Replace the blank-SARIF fallback with an existence check; uploading an
empty SARIF would clear existing Code Scanning alerts. Now the upload is
skipped (with a warning) when Psalm produced no report.
4 weeks ago
Your Name 5cecde6708 ci(psalm): guarantee SARIF file exists and upgrade upload-sarif to v4
Add a fallback step that writes a minimal valid SARIF report when Psalm
exits before producing one, so the Code Scanning upload never hard-fails
the job. Bump github/codeql-action/upload-sarif v3 -> v4.
4 weeks ago
Your Name 6945277e2c ci(psalm): align workflow with php-* conventions, test on PHP 8.5
Rename psalm.yml to php-psalm.yml to match sibling workflows, bump PHP
8.4 -> 8.5, use the shared checkout/setup-php/cache/composer steps and
staging/dev/unstable triggers. Keeps report-only behavior and SARIF
Code Scanning upload.
4 weeks ago
Your Name 2617211c1f ci(psalm): report findings but never fail the job 4 weeks ago
Your Name 1a234c3920 chore: add Psalm static analysis (plugin-laravel, baseline, CI)
Port PR #6646 onto staging: add psalm/plugin-laravel with psalm.xml,
a staging-generated baseline, and a CI workflow that emits GitHub
annotations and uploads SARIF to Code Scanning. Fix the psalm.xml schema
for Psalm 6.5 (drop unsupported ClassMustBeFinal handler) and ignore
generated report artifacts in git/docker.
4 weeks ago
Shlee 0f6ed0d918
Rename workflow to PHP - Pint 4 weeks ago
Shlee 2adbb65079
Update php-laravel-tests.yml 4 weeks ago
Shlee b2af987888
Update php-larastan.yml 4 weeks ago
Your Name 0ed3e6192a ci: fix action versions (checkout@v7, cache@v6) and add unstable branch 4 weeks ago
Your Name c7473cd1a8 ci: refactor GitHub Actions with Redis service and best practices
- Tests workflow: add Redis service, cache composer deps, test PHP 8.4+8.5,
  generate Passport keys, use vendor/bin/pest directly
- Larastan workflow: cache deps, consistent checkout@v4, memory limit
- Pint workflow: use project's installed Pint (not global), cache deps
- Standardize Redis port to 6379 across CI and local docker-compose
- Remove 'unstable' branch from triggers (unused)
- Remove 'main' branch from static analysis (doesn't exist)
4 weeks ago
Shlee 28a56d047e
Update docker-push.yml 4 weeks ago
Shlee de656d12dc
Update docker-tag.yml 4 weeks ago
Shlee 580042f36d
Update and rename laravel.yml to php-laravel-tests.yml 4 weeks ago
Shlee 3bb77bae53
Merge pull request #6793 from pixelfed/shleeable-patch-8
Cleanup Old Container Images
4 weeks ago