130d8a0fd3
Harden tool checksum verification
2026-07-23 18:22:38 +05:30
8ca9579834
Add support for pinning tools to a checksum ( #1098 )
...
Tools in the tools input can now be pinned to a checksum using the
tool:version@sha256:<hash> or tool:version@sha512:<hash> syntax.
The downloaded tool is verified against the checksum on all platforms,
including when it is served from the tools cache, and it is removed
along with its cache entry if the verification fails.
Checksum verification is supported for tools downloaded as phar
archives. Specifying a checksum for tools set up using composer
packages or custom package scripts results in an error.
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-23 18:15:59 +05:30
b9ef68088b
Bump Node.js packages
...
Add allowScripts for 3 packages
2026-07-21 18:21:48 +05:30
5825be4b77
Harden environment lookup
2026-05-18 00:56:40 +05:30
eeef37e059
GHSA-pqwm-q9pv-ph8r - Fix CWE-78 [skip ci]
2026-05-14 08:58:36 +05:30
7748c24380
GHSA-f9f8-rm49-7jv2: Fix GitHub auth handling for composer in affected versions
2026-05-13 16:19:11 +05:30
106fd0866c
Strip backslash line continuation from extension inputs
2026-03-29 20:46:19 +05:30
00c8f84a71
Add support for ionCube for PHP 8.5 [skip ci]
2026-03-13 22:21:20 +05:30
c033e31e7c
Add support for zephir parser for PHP 8.5 [skip ci]
2026-03-13 22:10:53 +05:30
fe26b509d7
Fix support for pecl_http on Windows [skip ci]
2026-03-13 20:50:10 +05:30
746e1a46d1
fix: use latest in URL when version is empty
...
When version is not specified (empty string), the getUrl function
was generating invalid URLs like /releases/download/cs2pr without
any version, which returned 404.
This fix ensures that when version is empty or 'latest', the URL
includes '/latest/' which GitHub handles correctly with a redirect
to the actual latest release.
Fixes #1063
2026-03-04 22:03:38 +07:00
5e98c022f7
Update dependencies
2026-02-08 09:13:03 +05:30
f0b3fd9afe
Update brew extensions
2026-02-08 07:56:22 +05:30
46cb5030ab
Replace generic record interfaces with specific ones
2026-01-21 02:46:20 +05:30
109ae4d1c0
Reduce bundle size
...
Replace @actions/core with local functions
@actions/core is unmaintained and poorly designed for projects that just need basic functions
2026-01-20 07:47:23 +05:30
871ff01b2b
Refactor to use ES2024+ features for Node 24
...
Use Set for O(1) redirect status code lookup in fetch.ts
Use at(-1) and Object.hasOwn() in tools.ts
Use for...of with entries() in utils.ts
2026-01-20 06:46:28 +05:30
46ae35f333
Update to Node 24
...
Update fetch.ts to use native fetch() API
Use immutable sort in tools.ts
2026-01-20 06:29:00 +05:30
f89a301251
Override undici version
2026-01-17 03:15:23 +05:30
5efa2a774e
Fix support to parse master in php-version input
2025-12-18 21:36:10 +05:30
be556f8879
Add 8.5 for backfire in extensions.ts
2025-11-26 06:25:09 +05:30
91d37511e3
Fix fallback to latest version in tools.ts
2025-11-26 06:25:09 +05:30
43e4e008cc
Add support for ibm extensions [skip ci]
2025-11-25 16:23:49 +05:30
2c40db3599
Fix getcomposer fallback url for specific versions
2025-11-21 01:02:19 +05:30
4eb1b49da1
Bump dependencies
2025-11-18 01:36:59 +05:30
47ac2e221b
Add support for relay-nightly in extensions.ts
2025-10-19 00:27:14 +05:30
bf6b4fbd49
Improve sorting in tools.getSemverVersion
2025-09-18 16:30:57 +05:30
8f8196743c
Fix sorting in tools.getSemverVersion
2025-09-17 19:06:59 +05:30
dfcda83968
Add fallback url for composer
2025-09-04 20:26:04 +05:30
1398cb4c9f
Fix using new github-input for tools.ts
2025-08-27 17:12:07 +05:30
55463ffe4f
Add support for github-token input
2025-07-17 07:32:24 +05:30
c954e9c756
Lock Phive version for PHP 7.3/7.4
...
Latest Phive (0.16.0) claims to require PHP 8.0 or later[1]. While I
have not found any issues running it under PHP 7.4, it might be better
to stick with Phive 0.15.3 for PHP 7.3/7.4.
[1] <https://github.com/phar-io/phive/releases/tag/0.16.0 >
2025-06-03 14:35:02 +02:00
b595b415e2
Add fallback for the manifest URL
2025-05-19 08:09:13 +05:30
b7bd9e4655
Bump version to 2.33.0
2025-04-13 00:13:54 +05:30
310e481b83
feat: allow tools path directory to be set
...
also add a .node-version file
2025-04-07 12:28:57 +05:30
f5d98d1683
Improve support for phalcon5 and zephir_parser
2025-03-14 21:26:51 +05:30
1a94db50cb
Update dependencies
2025-03-14 20:36:54 +05:30
3bfebc13bc
Add fallback url for phpunit tools
2025-02-07 05:40:29 +05:30
260b35cca0
Add support for blackfire on PHP 8.4
2025-02-01 21:27:42 +05:30
f902cc7bd9
Update ioncube support till PHP 8.4
2025-02-01 20:59:07 +05:30
34b79cab10
Improve docs for php-version-file input
2024-12-30 21:47:27 +05:30
b6d8115f12
Add support for .tool-versions format in php-version-file
2024-12-23 15:27:22 +05:30
84f76b1fc9
Add support for composer files in sub-directory
2024-12-23 14:36:14 +05:30
85a8dfd0c7
Rebuild release file
2024-12-14 03:27:47 +05:30
ae95648cfc
Bump Node.js dependencies
2024-11-18 19:32:14 +05:30
7f1cfc01ec
Bump version to 2.32.0
...
Update Node.js dependencies
Migrate eslint config to a mjs file
Fix imports in tests
Bump to Node.js 20.x in workflows
2024-11-04 08:55:26 +05:30
2e947f1f69
Bump version to 2.31.0
...
Update Node.js dependencies
2024-06-24 03:19:18 +05:30
fdb0d9d1a7
Add PHP 8.3 support for zephir parser
2024-06-02 07:32:16 +05:30
376a964e21
Implement ioncube support on unix correctly
...
I think I jumped the shark with this one for this project
2024-05-22 06:54:49 +05:30
116fe4df69
Add vld for macOS
2024-03-26 17:29:27 +05:30
31bfabaf56
Bump Node.js dependencies
2024-03-25 01:05:36 +05:30
Shivam Mathur