chore: phase 1 cleanup — legacy versions, dead files, CI modernisation#105
Merged
Merged
Conversation
- Move EOL versions (7.1, 7.2, 7.3, 7.4, 8.0) to legacy/ with README - Remove somefile.tar (37MB mystery artifact) - Add .dockerignore - Fix infinite recursion in makefile test-all target - Update CI matrix to active versions only (8.1, 8.2, 8.3) - Modernise GitHub Actions: checkout@v4, docker/login-action@v3, setup-qemu@v3, setup-buildx@v3 - Add weekly scheduled builds for security patches - Add Dependabot for GitHub Actions updates - Set fail-fast: false on release matrix
jorge07
approved these changes
Feb 20, 2026
docker/login-action@v3 fails hard when secrets are missing, which breaks PRs from forks (forks don't receive secrets for security). PR builds only build+test, never push, so login is not required. Added continue-on-error: true so login succeeds when credentials are available (higher rate limits) and gracefully skips otherwise.
…e:edge 8.1: php81-sodium (edge/testing) requires libsodium.so.26 from edge libsodium 1.0.20, but alpine:3.17 ships libsodium 1.0.18 (.so.23). Fix: pull libsodium explicitly from edge/main alongside icu-libs. 8.2: php82 was removed from alpine:edge (superseded by php84). Fix: pin base to alpine:3.21 and swap all repo refs from edge/ → v3.21/. php82 packages remain available in v3.21/community.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
First phase of the modernisation plan discussed in issues #100–#104.
Changes
Legacy versions
legacy/folder with a README warningDead weight
somefile.tar(37MB mystery artifact).dockerignoreMakefile
test-all: test-alltest-allto 8.1/8.2/8.3GitHub Actions
actions/checkout@v1→@v4azure/docker-login@v1→docker/login-action@v3docker/setup-qemu-action@master→@v3(pinned)docker/setup-buildx-action@master→@v3(pinned)fail-fast: true→falseon release (one version failing shouldn't block others)Next
Phase 2 will add PHP 8.4 and fix Alpine base images (edge → pinned stable).