Tags: php/pie
Tags
1.5.0 ===== - Total issues resolved: **24** - Total pull requests resolved: **47** - Total contributors: **18** enhancement ----------- - [710: 707: add --no-dev flag for pie install for PHP projects](#710) thanks to @asgrim and @geangontijo - [705: 701: add `--suppress-download-url-method` for end users](#705) thanks to @asgrim and @thomas-0816 - [704: Fix build provider detection for Remi](#704) thanks to @remicollet - [703: 692: suppress warning about INI setup if --skip-enable-extension was supplied](#703) thanks to @asgrim and @spk - [691: Add lib-pam as a supported system library](#691) thanks to @fpoirotte - [685: 525: add SBOM attestation](#685) thanks to @asgrim - [683: Add lib-gpgme as a supported system library](#683) thanks to @vencakrecl - [674: 591: add pie search command](#674) thanks to @asgrim and @remicollet - [673: 604: added tool to check build tools](#673) thanks to @asgrim and @theofidry - [671: 650: support gmake on freebsd](#671) thanks to @asgrim and @matuscak - [670: 631: remove abandoned packages from bySearching/byProvider](#670) thanks to @asgrim - [669: 643: RPM package manager updates](#669) thanks to @asgrim and @remicollet - [668: 585: improve messaging when no auth available during verify](#668) thanks to @asgrim - [666: 561: `pie upgrade` feature](#666) thanks to @asgrim - [652: 587: add `pie install --from-lock`](#652) thanks to @asgrim - [651: refactor: enhance UX for missing build tools prompt](#651) thanks to @yilanboy - [642: 466: allow multiple exts install at once](#642) thanks to @asgrim and @1ma - [639: more rpm providers (for dnf tips)](#639) thanks to @remicollet - [634: 615 add zizmor](#634) thanks to @asgrim - [633: 624: select packages for php project install](#633) thanks to @asgrim - [623: 622: use providers API to find matching exts in pie install for PHP projects](#623) thanks to @asgrim - [621: 586: make re-installing a verified extension a no-op](#621) thanks to @asgrim and @shivammathur - [620: Fix: Skip semver tag patterns for pre-releases](#620) thanks to @glensc and @jnoordsij - [619: Add unzip to required build tools](#619) thanks to @iliaal - [617: Various Hardening Updates](#617) thanks to @iliaal - [614: Add granular publish tags for "-bin" docker image](#614) thanks to @glensc - [584: 532: enable Safe functions and phpstan rule](#584) thanks to @asgrim - [580: 541: replace some common placeholders before build](#580) thanks to @asgrim and @remicollet documentation ------------- - [706: Improve doc recommendations around php-windows-builder action](#706) thanks to @asgrim - [659: (maitainer) Add https://php.github.io/pie as repository website](#659) thanks to @homersimpsons - [656: Docs update for 1.5.x so far](#656) thanks to @asgrim - [648: Update README.md](#648) thanks to @kramred - [641: Support operator](#641) thanks to @jb-lopez - [616: Add security policy](#616) thanks to @asgrim dependencies,github_actions,php ------------------------------- - [702: Action and dep updates](#702) thanks to @asgrim - [657: Deps update 1.5.x](#657) thanks to @asgrim - [613: [1.5.x] Update Composer to 2.9.8](#613) thanks to @asgrim bug --- - [690: Fix help message when no packages are found](#690) thanks to @fpoirotte - [681: 554: do not attempt to use sudo on Windows](#681) thanks to @asgrim - [680: 1.4.9 merge up to 1.5.x](#680) thanks to @asgrim - [675: Fix freebsd tests for build tool checks](#675) thanks to @asgrim - [664: 1.4.8 merge up to 1.5.x - output newline, and Windows exe build fixes](#664) thanks to @asgrim - [645: 640: merge up fix to 1.5.x](#645) thanks to @asgrim - [638: 579: merge up brew self update](#638) thanks to @asgrim - [594: Merge up binary pkg configure options fix](#594) thanks to @asgrim enhancement,maintainer investigating ------------------------------------ - [667: 658: PHP 8.6 (pre-release) support](#667) thanks to @asgrim - [588: Improve PIE install & update process](#588) thanks to @asgrim - [563: Improve functionality to enable mlocati/docker-php-extension-installer to use PIE](#563) thanks to @asgrim - [610: Merge up fixes for #596 and #597 to 1.5.x](#610) thanks to @asgrim dependencies,php ---------------- - [583: [1.5.x] Update Composer to 2.9.7](#583) thanks to @asgrim
1.5.0 ===== - Total issues resolved: **20** - Total pull requests resolved: **38** - Total contributors: **14** enhancement ----------- - [685: 525: add SBOM attestation](#685) thanks to @asgrim - [683: Add lib-gpgme as a supported system library](#683) thanks to @vencakrecl - [674: 591: add pie search command](#674) thanks to @asgrim and @remicollet - [673: 604: added tool to check build tools](#673) thanks to @asgrim and @theofidry - [671: 650: support gmake on freebsd](#671) thanks to @asgrim and @matuscak - [670: 631: remove abandoned packages from bySearching/byProvider](#670) thanks to @asgrim - [669: 643: RPM package manager updates](#669) thanks to @asgrim and @remicollet - [668: 585: improve messaging when no auth available during verify](#668) thanks to @asgrim - [666: 561: `pie upgrade` feature](#666) thanks to @asgrim - [652: 587: add `pie install --from-lock`](#652) thanks to @asgrim - [651: refactor: enhance UX for missing build tools prompt](#651) thanks to @yilanboy - [642: 466: allow multiple exts install at once](#642) thanks to @asgrim and @1ma - [639: more rpm providers (for dnf tips)](#639) thanks to @remicollet - [634: 615 add zizmor](#634) thanks to @asgrim - [633: 624: select packages for php project install](#633) thanks to @asgrim - [623: 622: use providers API to find matching exts in pie install for PHP projects](#623) thanks to @asgrim - [621: 586: make re-installing a verified extension a no-op](#621) thanks to @asgrim and @shivammathur - [620: Fix: Skip semver tag patterns for pre-releases](#620) thanks to @glensc and @jnoordsij - [619: Add unzip to required build tools](#619) thanks to @iliaal - [617: Various Hardening Updates](#617) thanks to @iliaal - [614: Add granular publish tags for "-bin" docker image](#614) thanks to @glensc - [584: 532: enable Safe functions and phpstan rule](#584) thanks to @asgrim - [580: 541: replace some common placeholders before build](#580) thanks to @asgrim and @remicollet bug --- - [681: 554: do not attempt to use sudo on Windows](#681) thanks to @asgrim - [680: 1.4.9 merge up to 1.5.x](#680) thanks to @asgrim - [675: Fix freebsd tests for build tool checks](#675) thanks to @asgrim - [664: 1.4.8 merge up to 1.5.x - output newline, and Windows exe build fixes](#664) thanks to @asgrim - [645: 640: merge up fix to 1.5.x](#645) thanks to @asgrim - [638: 579: merge up brew self update](#638) thanks to @asgrim - [594: Merge up binary pkg configure options fix](#594) thanks to @asgrim documentation ------------- - [659: (maitainer) Add https://php.github.io/pie as repository website](#659) thanks to @homersimpsons - [656: Docs update for 1.5.x so far](#656) thanks to @asgrim - [648: Update README.md](#648) thanks to @kramred - [641: Support operator](#641) thanks to @jb-lopez - [616: Add security policy](#616) thanks to @asgrim dependencies,github_actions,php ------------------------------- - [657: Deps update 1.5.x](#657) thanks to @asgrim - [613: [1.5.x] Update Composer to 2.9.8](#613) thanks to @asgrim - [610: Merge up fixes for #596 and #597 to 1.5.x](#610) thanks to @asgrim enhancement,maintainer investigating ------------------------------------ - [588: Improve PIE install & update process](#588) thanks to @asgrim - [563: Improve functionality to enable mlocati/docker-php-extension-installer to use PIE](#563) thanks to @asgrim dependencies,php ---------------- - [583: [1.5.x] Update Composer to 2.9.7](#583) thanks to @asgrim
1.5.0 ===== - Total issues resolved: **16** - Total pull requests resolved: **30** - Total contributors: **11** enhancement ----------- - [670: 631: remove abandoned packages from bySearching/byProvider](#670) thanks to @asgrim - [669: 643: RPM package manager updates](#669) thanks to @asgrim and @remicollet - [668: 585: improve messaging when no auth available during verify](#668) thanks to @asgrim - [666: 561: `pie upgrade` feature](#666) thanks to @asgrim - [652: 587: add `pie install --from-lock`](#652) thanks to @asgrim - [651: refactor: enhance UX for missing build tools prompt](#651) thanks to @yilanboy - [642: 466: allow multiple exts install at once](#642) thanks to @asgrim and @1ma - [639: more rpm providers (for dnf tips)](#639) thanks to @remicollet - [634: 615 add zizmor](#634) thanks to @asgrim - [633: 624: select packages for php project install](#633) thanks to @asgrim - [623: 622: use providers API to find matching exts in pie install for PHP projects](#623) thanks to @asgrim - [621: 586: make re-installing a verified extension a no-op](#621) thanks to @asgrim and @shivammathur - [620: Fix: Skip semver tag patterns for pre-releases](#620) thanks to @glensc and @jnoordsij - [619: Add unzip to required build tools](#619) thanks to @iliaal - [617: Various Hardening Updates](#617) thanks to @iliaal - [614: Add granular publish tags for "-bin" docker image](#614) thanks to @glensc - [584: 532: enable Safe functions and phpstan rule](#584) thanks to @asgrim - [580: 541: replace some common placeholders before build](#580) thanks to @asgrim and @remicollet bug --- - [664: 1.4.8 merge up to 1.5.x - output newline, and Windows exe build fixes](#664) thanks to @asgrim - [645: 640: merge up fix to 1.5.x](#645) thanks to @asgrim - [638: 579: merge up brew self update](#638) thanks to @asgrim - [594: Merge up binary pkg configure options fix](#594) thanks to @asgrim documentation ------------- - [659: (maitainer) Add https://php.github.io/pie as repository website](#659) thanks to @homersimpsons - [656: Docs update for 1.5.x so far](#656) thanks to @asgrim - [648: Update README.md](#648) thanks to @kramred - [641: Support operator](#641) thanks to @jb-lopez - [616: Add security policy](#616) thanks to @asgrim dependencies,github_actions,php ------------------------------- - [657: Deps update 1.5.x](#657) thanks to @asgrim - [613: [1.5.x] Update Composer to 2.9.8](#613) thanks to @asgrim - [610: Merge up fixes for #596 and #597 to 1.5.x](#610) thanks to @asgrim enhancement,maintainer investigating ------------------------------------ - [588: Improve PIE install & update process](#588) thanks to @asgrim - [563: Improve functionality to enable mlocati/docker-php-extension-installer to use PIE](#563) thanks to @asgrim dependencies,php ---------------- - [583: [1.5.x] Update Composer to 2.9.7](#583) thanks to @asgrim
1.4.8 ===== - Total issues resolved: **0** - Total pull requests resolved: **3** - Total contributors: **1** dependencies,php ---------------- - [663: Dependency bump for 1.4.x series](#663) thanks to @asgrim bug --- - [662: 646: remove additional newline from subprocess callback](#662) thanks to @asgrim - [661: 609: Re-enable windows pie.exe builds with VS22](#661) thanks to @asgrim
This release contains vulnerability fixes for the following security … …advisories: - [GHSA-h842-vjwg-pxxx](GHSA-h842-vjwg-pxxx) - Sudo-elevated arbitrary file deletion via `extra.pie-installed-binary` metadata in `UninstallUsingUnlink` - [GHSA-pm6p-666q-hvj5](GHSA-pm6p-666q-hvj5) - Sudo-elevated root code execution via TOCTOU between `self-update` verify and write - [GHSA-f67f-c344-cqqr](GHSA-f67f-c344-cqqr) - PIE self-update accepts any historically-attested `pie.phar` (rollback gap) - [GHSA-vcv4-gmjc-mxvq](GHSA-vcv4-gmjc-mxvq) - php-ext.build-path traversal escapes PIE's vendor extract directory - [GHSA-8xmh-xrvp-hwrf](GHSA-8xmh-xrvp-hwrf) - WindowsInstall::copyExtraFile lacks destination containment check (Windows-only path traversal) - [GHSA-p4j8-36rr-gjfq](GHSA-p4j8-36rr-gjfq) - Self-update attestation verification is scoped to `--owner=php`, not `--repo=php/pie`
This release contains vulnerability fixes for the following security … …advisories: - [GHSA-h842-vjwg-pxxx](GHSA-h842-vjwg-pxxx) - Sudo-elevated arbitrary file deletion via `extra.pie-installed-binary` metadata in `UninstallUsingUnlink` - [GHSA-pm6p-666q-hvj5](GHSA-pm6p-666q-hvj5) - Sudo-elevated root code execution via TOCTOU between `self-update` verify and write - [GHSA-f67f-c344-cqqr](GHSA-f67f-c344-cqqr) - PIE self-update accepts any historically-attested `pie.phar` (rollback gap) - [GHSA-vcv4-gmjc-mxvq](GHSA-vcv4-gmjc-mxvq) - php-ext.build-path traversal escapes PIE's vendor extract directory - [GHSA-8xmh-xrvp-hwrf](GHSA-8xmh-xrvp-hwrf) - WindowsInstall::copyExtraFile lacks destination containment check (Windows-only path traversal) - [GHSA-p4j8-36rr-gjfq](GHSA-p4j8-36rr-gjfq) - Self-update attestation verification is scoped to `--owner=php`, not `--repo=php/pie`
PreviousNext
