chore: phase 1 cleanup — legacy versions, dead files, CI modernisation

.dockerignore

@@ -0,0 +1,8 @@
+.git
+.github
+.gitignore
+legacy/
+doc/
+test/
+*.md
+makefile

.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/pr.yaml

@@ -10,31 +10,28 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        version: [ "8.0", "8.1", "8.2", "8.3" ]
+        version: [ "8.1", "8.2", "8.3" ]
 
     name: ${{ matrix.version }}
     runs-on: ubuntu-latest
     env:
       VERSION: ${{ matrix.version }}
     steps:
-    - uses: actions/checkout@v1
+    - uses: actions/checkout@v4
     - name: Set up QEMU
-      uses: docker/setup-qemu-action@master
+      uses: docker/setup-qemu-action@v3
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@master
-    - uses: azure/docker-login@v1
+      uses: docker/setup-buildx-action@v3
+    - name: Login to Docker Hub
+      # Optional: avoids pull rate limits. Not available on fork PRs — that's fine.
+      uses: docker/login-action@v3
+      continue-on-error: true
       with:
         username: ${{ secrets.REGISTRY_USERNAME }}
         password: ${{ secrets.REGISTRY_PASSWORD }}
     - name: Build
-      run: |
-         docker buildx create --name alpine-php
-         docker buildx use alpine-php
-         docker buildx inspect --bootstrap
-         ARCHS="linux/arm64" make build
-    - name: Run
-      run: |
-        make run-detached
+      run: ARCHS="linux/amd64" make build
     - name: Test Main
-      run: |
-        make test-main
+      run: make test-main
+    - name: Test Dev
+      run: make test-dev

.github/workflows/release.yaml

@@ -4,36 +4,36 @@ on:
   push:
     branches:
       - master
+  schedule:
+    # Weekly builds to pick up Alpine security patches
+    - cron: '0 4 * * 1'
+
 jobs:
   push-to-registry:
     strategy:
-      fail-fast: true
+      fail-fast: false
       matrix:
-        version: [ "8.0", "8.1", "8.2", "8.3" ]
+        version: [ "8.1", "8.2", "8.3" ]
         arch: [
           "linux/amd64,linux/arm64,linux/arm/v8,linux/arm/v7",
         ]
     env:
       VERSION: ${{ matrix.version }}
       ARCHS: ${{ matrix.arch }}
-    name: release-${{ matrix.version }}-${{ matrix.arch }}
+    name: release-${{ matrix.version }}
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v1
+    - uses: actions/checkout@v4
     - name: Set up QEMU
-      uses: docker/setup-qemu-action@master
+      uses: docker/setup-qemu-action@v3
       with:
         platforms: "all"
     - name: Set up Docker Buildx
       id: buildx
-      uses: docker/setup-buildx-action@master
-      with:
-        install: true
-    - uses: azure/docker-login@v1
+      uses: docker/setup-buildx-action@v3
+    - name: Login to Docker Hub
+      uses: docker/login-action@v3
       with:
         username: ${{ secrets.REGISTRY_USERNAME }}
         password: ${{ secrets.REGISTRY_PASSWORD }}
-    - run: |
-         docker buildx create --name alpine-php
-         docker buildx use alpine-php
-         make release
+    - run: make release

8.1/Dockerfile

@@ -4,6 +4,7 @@ LABEL maintainer="Jorge Arco <jorge.arcoma@gmail.com>"
 
 RUN apk --no-cache --repository https://dl-cdn.alpinelinux.org/alpine/edge/main add \
     icu-libs \
+    libsodium \
     &&apk --no-cache --repository https://dl-cdn.alpinelinux.org/alpine/edge/community add \
     # Current packages don't exist in other repositories
     libavif \

8.2/Dockerfile

@@ -1,10 +1,10 @@
-FROM --platform=$BUILDPLATFORM alpine:edge as main
+FROM --platform=$BUILDPLATFORM alpine:3.21 as main
 
 LABEL maintainer="Jorge Arco <jorge.arcoma@gmail.com>"
 
-RUN apk --no-cache --repository https://dl-cdn.alpinelinux.org/alpine/edge/main add \
+RUN apk --no-cache --repository https://dl-cdn.alpinelinux.org/alpine/v3.21/main add \
     icu-libs \
-    && apk --no-cache --repository https://dl-cdn.alpinelinux.org/alpine/edge/community add \
+    && apk --no-cache --repository https://dl-cdn.alpinelinux.org/alpine/v3.21/community add \
     # Current packages don't exist in other repositories
     libavif \
     gnu-libiconv \
@@ -56,7 +56,7 @@ ARG PASSWORD=root
 
 ARG COMPOSER_VERSION=2.5.1
 
-RUN apk add -U --no-cache --repository http://dl-cdn.alpinelinux.org/alpine/edge/testing/   \
+RUN apk add -U --no-cache --repository https://dl-cdn.alpinelinux.org/alpine/v3.21/community/ \
         php82-pear \
         openssh \
         supervisor \

legacy/README.md

@@ -0,0 +1,16 @@
+# Legacy PHP versions
+
+These versions are **end-of-life** and no longer receive security updates from PHP.net.
+
+They are kept here for users who cannot upgrade, but are **not actively maintained** in this repository.
+
+| Version | PHP EOL | Alpine |
+|---------|---------|--------|
+| 7.1 | Dec 2019 | 3.7 |
+| 7.2 | Nov 2020 | 3.9 |
+| 7.3 | Dec 2021 | 3.12 |
+| 7.4 | Nov 2022 | 3.14 |
+| 8.0 | Nov 2023 | 3.14 |
+
+> ⚠️ **Use at your own risk.** These images may contain unpatched security vulnerabilities.
+> If you're able to upgrade, please do so. See the [main README](../README.md) for supported versions.

makefile

@@ -35,13 +35,13 @@ release: build
 	docker buildx build --platform $(ARCHS) --push -t $(REPO):${SEMVER} --target main -f ${VERSION}/Dockerfile ${VERSION}/
 	docker buildx build --platform $(ARCHS) --push -t $(REPO):${SEMVER}-dev --target dev -f ${VERSION}/Dockerfile ${VERSION}/
 
-test-all: test-all
-	VERSION=8.2 make build
-	VERSION=8.1 make build
-	VERSION=8.0 make build
-	VERSION=8.2 make test-main
-	VERSION=8.1 make test-main
-	VERSION=8.0 make test-main
-	VERSION=8.2 make test-dev
-	VERSION=8.1 make test-dev
-	VERSION=8.0 make test-dev
+test-all:
+	VERSION=8.3 $(MAKE) build
+	VERSION=8.2 $(MAKE) build
+	VERSION=8.1 $(MAKE) build
+	VERSION=8.3 $(MAKE) test-main
+	VERSION=8.2 $(MAKE) test-main
+	VERSION=8.1 $(MAKE) test-main
+	VERSION=8.3 $(MAKE) test-dev
+	VERSION=8.2 $(MAKE) test-dev
+	VERSION=8.1 $(MAKE) test-dev