130d8a0fd3
Harden tool checksum verification
2026-07-23 18:22:38 +05:30
8ca9579834
Add support for pinning tools to a checksum ( #1098 )
...
Tools in the tools input can now be pinned to a checksum using the
tool:version@sha256:<hash> or tool:version@sha512:<hash> syntax.
The downloaded tool is verified against the checksum on all platforms,
including when it is served from the tools cache, and it is removed
along with its cache entry if the verification fails.
Checksum verification is supported for tools downloaded as phar
archives. Specifying a checksum for tools set up using composer
packages or custom package scripts results in an error.
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-23 18:15:59 +05:30
eeef37e059
GHSA-pqwm-q9pv-ph8r - Fix CWE-78 [skip ci]
2026-05-14 08:58:36 +05:30
7748c24380
GHSA-f9f8-rm49-7jv2: Fix GitHub auth handling for composer in affected versions
2026-05-13 16:19:11 +05:30
746e1a46d1
fix: use latest in URL when version is empty
...
When version is not specified (empty string), the getUrl function
was generating invalid URLs like /releases/download/cs2pr without
any version, which returned 404.
This fix ensures that when version is empty or 'latest', the URL
includes '/latest/' which GitHub handles correctly with a redirect
to the actual latest release.
Fixes #1063
2026-03-04 22:03:38 +07:00
46cb5030ab
Replace generic record interfaces with specific ones
2026-01-21 02:46:20 +05:30
91d37511e3
Fix fallback to latest version in tools.ts
2025-11-26 06:25:09 +05:30
2c40db3599
Fix getcomposer fallback url for specific versions
2025-11-21 01:02:19 +05:30
bf6b4fbd49
Improve sorting in tools.getSemverVersion
2025-09-18 16:30:57 +05:30
8f8196743c
Fix sorting in tools.getSemverVersion
2025-09-17 19:06:59 +05:30
dfcda83968
Add fallback url for composer
2025-09-04 20:26:04 +05:30
5581e61575
Update test and README for mago tool - remove 'latest' from test and add to README
...
Co-authored-by: shivammathur <1571086+shivammathur@users.noreply.github.com >
2025-07-17 11:27:31 +00:00
de4f59c442
Address PR review feedback - simplify validation and remove license display
...
Co-authored-by: shivammathur <1571086+shivammathur@users.noreply.github.com >
2025-07-17 11:16:20 +00:00
26dc9b4fed
Add mago tool support as custom package
...
Co-authored-by: shivammathur <1571086+shivammathur@users.noreply.github.com >
2025-07-17 10:57:30 +00:00
b8f4bf011c
Merge branch 'develop' into copilot/fix-d6851e4e-e860-4989-8c53-4391e7116ea7
2025-07-17 14:58:44 +05:30
f9fbb516a6
Address review feedback: revert src/tools.ts, remove run.sh, rename tool to backward-compatibility-check
...
Co-authored-by: shivammathur <1571086+shivammathur@users.noreply.github.com >
2025-07-17 08:54:16 +00:00
9dffd40113
Add roave/backward-compatibility-check tool support
...
Co-authored-by: shivammathur <1571086+shivammathur@users.noreply.github.com >
2025-07-17 08:34:50 +00:00
24d382d1f8
Add support for shipmonk/name-collision-detector tool
...
Co-authored-by: shivammathur <1571086+shivammathur@users.noreply.github.com >
2025-07-17 07:25:13 +00:00
c954e9c756
Lock Phive version for PHP 7.3/7.4
...
Latest Phive (0.16.0) claims to require PHP 8.0 or later[1]. While I
have not found any issues running it under PHP 7.4, it might be better
to stick with Phive 0.15.3 for PHP 7.3/7.4.
[1] <https://github.com/phar-io/phive/releases/tag/0.16.0 >
2025-06-03 14:35:02 +02:00
dd942787eb
Add support for pie in tools
2025-05-08 09:46:50 +02:00
3bfebc13bc
Add fallback url for phpunit tools
2025-02-07 05:40:29 +05:30
fd913ba092
Fix composer normalize version [skip ci]
2025-01-22 04:56:05 +05:30
64652c947d
Update php-cs-fixer repository organisation
2025-01-08 11:13:54 +01:00
9e72090525
Fix composer-dependency-analyser packagist repository
2024-12-30 21:54:47 +05:30
7f1cfc01ec
Bump version to 2.32.0
...
Update Node.js dependencies
Migrate eslint config to a mjs file
Fix imports in tests
Bump to Node.js 20.x in workflows
2024-11-04 08:55:26 +05:30
24eff50574
Support composer-dependency-analyser
2024-07-15 15:14:10 +02:00
18975ec414
Fix ecs config
2024-04-26 02:16:03 +05:30
806c3cc058
Add support for ecs
2024-04-25 21:59:57 +02:00
a4e22b60bb
Bump version to 2.30.0
2024-03-01 12:06:41 +05:30
e8cd65f444
Switch to PHPCSStandards/PHP_CodeSniffer for phpcs and phpcbf
2023-12-04 08:00:30 +05:30
b5efb21934
Add tests for box and php-scoper
2023-11-01 09:29:02 +05:30
7fdd3ece87
Fix blackfire-player on Linux and macOS
...
Drop support for blackfire-player on Windows
2023-09-14 02:51:49 +05:30
9d529a72e0
Only check castor version if castor.php is present
2023-06-24 02:25:43 +05:30
c63f07d82e
Fix version prefix for castor
2023-06-23 23:28:05 +05:30
7ce22e0264
Add support for jolicode/castor
2023-06-23 16:13:17 +02:00
6cc8b47c6f
Add support to fetch tool versions from packagist
2023-06-12 15:27:46 +05:30
4630172078
Added what should be compensation for phpunit versions
2023-06-12 15:27:20 +05:30
bbc65d999a
Fix extension logs
...
Refactor utils.addCommand
2023-01-18 09:00:28 +05:30
6db1a06425
Improve support for blackfire-player
2023-01-17 05:11:26 +05:30
51f83e019c
Switch composer-unused back to phar
2022-12-01 04:45:59 +05:30
52685a348b
Add support to install rector in tools input
2022-08-17 16:48:27 +05:30
0f688a10cb
Add support for tool Laravel Pint
2022-07-11 12:13:41 +02:00
cf5cd90b4c
Improve support for composer authenticating private respositories
2022-07-06 12:19:55 +05:30
74d43be8a3
Fix support for deployer
2022-05-31 10:12:38 +05:30
32d20248ae
Improve support for composer fallback URLs
2022-04-23 11:57:06 +05:30
94c859a50e
Add GitHub releases fallback URL for phing
2022-03-01 20:44:20 +05:30
4dc94c27cf
Refactor utils.fetch to a module and mock it with nock
...
Add redirect support in utils.fetch
2022-02-06 10:53:40 +05:30
71d07ee7f4
Update symfony-cli support to use new symfony-cli/symfony-cli
2022-01-29 11:27:44 +05:30
cad2a1bda3
Rename os_version => os
2022-01-29 05:29:58 +05:30
495989aff1
Merge pull request #561 from villfa/feat/churn
...
Tools: add support for Churn-PHP
2022-01-29 03:49:42 +05:30
Shivam Mathur