Skip to content

Sync fork with upstream shivammathur/setup-php#1

Merged
jmendes-alto merged 259 commits into
mainfrom
jmendes/sync-upstream
Jun 8, 2026
Merged

Sync fork with upstream shivammathur/setup-php#1
jmendes-alto merged 259 commits into
mainfrom
jmendes/sync-upstream

Conversation

@jmendes-alto

Copy link
Copy Markdown

Summary

  • Fast-forwards main to the latest from upstream shivammathur/setup-php@083d5237 (Bump the github-actions group with 2 updates (#1085)).
  • Brings in 259 upstream commits; the fork had no fork-specific commits to preserve (0 ahead of upstream before this sync).
  • Includes upstream security hardening (GHSA-pqwm-q9pv-ph8r, GHSA-f9f8-rm49-7jv2), new tool/extension support (mago, ibm, yii3 examples), and dependency bumps.

🤖 Generated with Claude Code

shivammathur and others added 30 commits February 1, 2025 08:55
PHP 8.2 is no longer in active support and only receives security fixes, see
announcement at <https://news-web.php.net/php.internals/126138>.
…or-openswoole-ext

Change openswoole priority
also add a .node-version file
Change TOOLS_DIR to SETUP_PHP_TOOLS_DIR to prevent regression
shivammathur and others added 24 commits March 23, 2026 14:33
Bumps the npm_and_yarn group with 1 update in the / directory: [picomatch](https://github.com/micromatch/picomatch).


Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
…_and_yarn/npm_and_yarn-66413a1f6e

Bump picomatch from 2.3.1 to 2.3.2 in the npm_and_yarn group across 1 directory
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5 to 6.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v5...v6)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
…hub_actions/develop/codecov/codecov-action-6

Bump codecov/codecov-action from 5 to 6
Fix composer v2 version in README
Update Node.js dependencies
Bumps the github-actions group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [codecov/codecov-action](https://github.com/codecov/codecov-action).


Updates `github/codeql-action` from 4.35.5 to 4.36.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@9e0d7b8...7211b7c)

Updates `codecov/codecov-action` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@57e3a13...e79a696)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

@kabobbob-alto kabobbob-alto left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🌶️

@jmendes-alto
jmendes-alto merged commit 582af64 into main Jun 8, 2026
3 checks passed
@jmendes-alto
jmendes-alto deleted the jmendes/sync-upstream branch June 8, 2026 13:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.