fix: Renovate monolog-bundle rule (#39) and PHP 8.4 security base image #40

Merged
haylan merged 3 commits from fix/renovate-monolog-bundle into main 2026-10-22 22:07:34 +00:00
3 Commits
Author SHA1 Message Date
haylan bb23ae8819 chore(deps): fixed changelog text
Tests / build-dev (push) Skipped
Tests / build-prod (push) Skipped
Tests / build-dev (pull_request) Successful in 7m47s
Tests / build-prod (pull_request) Successful in 8m51s
2026-10-23 00:06:17 +02:00
haylanandClaude Bot 0b10cd6a04 fix(docker): always pull the latest PHP 8.4 base image on release builds
Tests / build-dev (push) Skipped
Tests / build-prod (push) Skipped
Tests / build-dev (pull_request) Successful in 10m39s
Tests / build-prod (pull_request) Successful in 10m17s
Picks up PHP 8.4.27 for CVE-2026-109618 and CVE-2026-109619 (critical RCE)
via the floating 1-php8.4-alpine tag.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-22 23:59:23 +02:00
haylanandClaude Bot 0707e913bd fix(renovate): exclude symfony/monolog-bundle from the ~7.4 Symfony rule
monolog-bundle is versioned independently (4.x) and has no 7.4 releases,
so the allowedVersions constraint blocked all its updates.

Closes #39

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-22 23:59:23 +02:00