haylan/git-contribution-graph
1
0 Fork 0
Code Issues 2 Pull Requests 2 Actions Packages Projects Releases 5 Wiki Activity

fix: Renovate monolog-bundle rule (#39) and PHP 8.4 security base image #40

Merged
haylan merged 3 commits from fix/renovate-monolog-bundle into main 2026-10-22 22:07:34 +00:00
Conversation 3 Commits 3 Files Changed 3
+9
2 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 0b10cd6a04 - Show all commits

No files matched your search

.gitea/workflows/docker-publish.yml
+1
View File
@@ -77,6 +77,7 @@ jobs:
target: final target: final
platforms: linux/amd64,linux/arm64 platforms: linux/amd64,linux/arm64
push: true push: true
pull: true
tags: ${{ steps.meta.outputs.tags }} tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }} labels: ${{ steps.meta.outputs.labels }}
# Registry-based layer cache — survives between runs without a separate cache store. # Registry-based layer cache — survives between runs without a separate cache store.
CHANGELOG.md
+8
View File
@@ -19,6 +19,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
- `phpstan/phpstan` 2.2.5 → 2.2.16 - `phpstan/phpstan` 2.2.5 → 2.2.16
- Docker builds copy `symfony.lock` so Flex doesn't re-apply recipes during `composer install` - Docker builds copy `symfony.lock` so Flex doesn't re-apply recipes during `composer install`
### Fixed
- Renovate no longer pins `symfony/monolog-bundle` to `~7.4` — it is versioned independently (4.x) and was blocked from updates (#39)
### Security
- Release images are built against the latest picks up PHP 8.4.27 for CVE-2026-109618 and CVE-2026-109619 (critical RCE)
## [0.2.1] - 2026-07-31 ## [0.2.1] - 2026-07-31
### Added ### Added