Commit Graph

1030 Commits

Author SHA1 Message Date
Shivam Mathur 8e6e5267e7 Harden tool checksum verification (#1099) 2026-07-23 19:24:32 +05:30
Keisuke Maeda 8ca9579834 Add support for pinning tools to a checksum (#1098)
Tools in the tools input can now be pinned to a checksum using the
tool:version@sha256:<hash> or tool:version@sha512:<hash> syntax.
The downloaded tool is verified against the checksum on all platforms,
including when it is served from the tools cache, and it is removed
along with its cache entry if the verification fails.

Checksum verification is supported for tools downloaded as phar
archives. Specifying a checksum for tools set up using composer
packages or custom package scripts results in an error.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-07-23 18:15:59 +05:30
Shivam Mathur fffd6b1db6 Fix support for install krb5 on linux using PECL 2026-07-21 01:50:08 +05:30
Shivam Mathur 1b1cce8c66 Add initial support for Ubuntu 26.04 [skip ci] 2026-06-18 04:28:47 +05:30
Shivam Mathur 8be473cdc3 Trust brew taps 2026-06-08 20:54:32 +05:30
Shivam Mathur 5825be4b77 Harden environment lookup 2026-05-18 00:56:40 +05:30
Shivam Mathur eeef37e059 GHSA-pqwm-q9pv-ph8r - Fix CWE-78 [skip ci] 2026-05-14 08:58:36 +05:30
Shivam Mathur 0dc33069a3 Fix phalcon5 support on Windows 2026-05-14 03:00:30 +05:30
Shivam Mathur 680a983990 Fix phalcon version for PHP 8.0 [skip ci] 2026-05-14 03:00:29 +05:30
Shivam Mathur 694649a4a3 Fix mutable tool cache restore 2026-05-13 19:43:21 +05:30
Shivam Mathur 7748c24380 GHSA-f9f8-rm49-7jv2: Fix GitHub auth handling for composer in affected versions 2026-05-13 16:19:11 +05:30
Shivam Mathur 7729e411ec Improve enabling gearman [skip ci] 2026-04-29 01:00:16 +05:30
Shivam Mathur af2322b95c Fix fallback in Install-PSPackage on Windows 2026-04-26 23:49:26 +05:30
Shivam Mathur 45e37a5311 Update os_releases.csv [skip ci] 2026-04-26 15:12:30 +05:30
Shivam Mathur 106fd0866c Strip backslash line continuation from extension inputs 2026-03-29 20:46:19 +05:30
Shivam Mathur a5c2146f3f Improve tool cache to not cache persistent urls 2026-03-15 11:36:39 +05:30
Shivam Mathur 6a1d559c57 Fix regression in pecl_http support [skip ci] 2026-03-15 11:18:29 +05:30
Shivam Mathur 00c8f84a71 Add support for ionCube for PHP 8.5 [skip ci] 2026-03-13 22:21:20 +05:30
Shivam Mathur c033e31e7c Add support for zephir parser for PHP 8.5 [skip ci] 2026-03-13 22:10:53 +05:30
Shivam Mathur bc6f40a11a Switch to downloads.php.net in Get-ICUUrl [skip ci] 2026-03-13 21:33:26 +05:30
Shivam Mathur fe26b509d7 Fix support for pecl_http on Windows [skip ci] 2026-03-13 20:50:10 +05:30
Shivam Mathur e67ff94e49 Fix caching couchbase on macOS [skip ci] 2026-03-13 20:15:35 +05:30
Shivam Mathur 4e89813b4b Improve switch_version on Linux 2026-03-12 19:35:06 +05:30
Shivam Mathur a1e0f566a8 Revert to old brew linking behaviour 2026-03-08 17:23:40 +05:30
theluckystrike 746e1a46d1 fix: use latest in URL when version is empty
When version is not specified (empty string), the getUrl function
was generating invalid URLs like /releases/download/cs2pr without
any version, which returned 404.

This fix ensures that when version is empty or 'latest', the URL
includes '/latest/' which GitHub handles correctly with a redirect
to the actual latest release.

Fixes #1063
2026-03-04 22:03:38 +07:00
Shivam Mathur 769a4a81fd Update sqlsrv and pdo_sqlsrv versions [skip ci] 2026-02-28 02:22:42 +05:30
Shivam Mathur d042aafd13 Add retry and timeout for stuck brew calls 2026-02-23 15:42:41 +05:30
Shivam Mathur 57e8183dae Switch to brew formula for pdo_firebird on macos [skip ci] 2026-02-08 11:29:04 +05:30
Shivam Mathur f0b3fd9afe Update brew extensions 2026-02-08 07:56:22 +05:30
Shivam Mathur 1eee54fe48 Fix paths for bin tools and scoped tools [skip ci] 2026-01-23 01:04:38 +05:30
Shivam Mathur 341bc9e176 Improve cache for tools 2026-01-21 17:02:28 +05:30
Shivam Mathur 185f9de395 Fix linking tools 2026-01-21 15:54:25 +05:30
Shivam Mathur 46cb5030ab Replace generic record interfaces with specific ones 2026-01-21 02:46:20 +05:30
Shivam Mathur 109ae4d1c0 Reduce bundle size
Replace @actions/core with local functions

@actions/core is unmaintained and poorly designed for projects that just need basic functions
2026-01-20 07:47:23 +05:30
Shivam Mathur 871ff01b2b Refactor to use ES2024+ features for Node 24
Use Set for O(1) redirect status code lookup in fetch.ts

Use at(-1) and Object.hasOwn() in tools.ts

Use for...of with entries() in utils.ts
2026-01-20 06:46:28 +05:30
Shivam Mathur 46ae35f333 Update to Node 24
Update fetch.ts to use native fetch() API

Use immutable sort in tools.ts
2026-01-20 06:29:00 +05:30
Shivam Mathur 5efa2a774e Fix support to parse master in php-version input 2025-12-18 21:36:10 +05:30
Shivam Mathur 3dfaca4ee1 Rename nightly_versions -> php_builder_versions 2025-11-26 22:22:06 +05:30
Shivam Mathur 44454db4f0 Fix check_lists in ppa.sh 2025-11-26 20:43:34 +05:30
Shivam Mathur 9d7558f1af Revert to using php-builder for PHP 8.3 and above for self-hosted 2025-11-26 20:05:44 +05:30
Shivam Mathur 5daa53ffa1 Fix shellcheck in darwin.sh 2025-11-26 11:29:16 +05:30
Shivam Mathur e8f032a051 Fix linking 2025-11-26 11:29:07 +05:30
Shivam Mathur 4abbbd6075 Fix build pdo_oci on macos for PHP 7.0
Minor shellcheck fix
2025-11-26 09:36:49 +05:30
Shivam Mathur 8dcd37f7d4 Improve macos php setup
Run dependency install as a seperate command.

Remove chown command as it is not required anymore it seems

Fix add_brew_tap call
2025-11-26 07:42:08 +05:30
Shivam Mathur a909b43232 Fix gearman versions 2025-11-26 06:25:09 +05:30
Shivam Mathur be556f8879 Add 8.5 for backfire in extensions.ts 2025-11-26 06:25:09 +05:30
Shivam Mathur 91d37511e3 Fix fallback to latest version in tools.ts 2025-11-26 06:25:09 +05:30
Shivam Mathur 3961404d06 Fix phpize patch on arm64 macos [skip ci] 2025-11-25 16:35:22 +05:30
Shivam Mathur 43e4e008cc Add support for ibm extensions [skip ci] 2025-11-25 16:23:49 +05:30
Shivam Mathur b010fa7c8f Fix typo in geos patch [skip ci] 2025-11-25 15:46:15 +05:30