Skip to content

Maintenance: PHP 8.2 floor, current actions, PHPStan 2.2.16, weekly image rebuild - #1

Merged
TheJakeBraun merged 3 commits into
masterfrom
chore/2026-09-maintenance
Sep 29, 2026
Merged

TheJakeBraun merged 3 commits into
masterfrom
chore/2026-09-maintenance

Conversation

@TheJakeBraun

Copy link
Copy Markdown

Quarterly maintenance pass. There are no library, CLI or image behaviour changes.

Changes

  • actions/checkout v5 → v7. The docker actions move to their current majors: setup-qemu, setup-buildx and login-action to v4, metadata-action to v6, build-push-action to v7. According to the release notes, these majors switch to Node 24 and drop deprecated inputs. None of the dropped inputs are used here.
  • PHPStan 2.2.2 → 2.2.16. Level 5 still reports no errors.
  • Weekly image rebuild. docker.yml now runs every Monday at 09:17 UTC, so :latest picks up PHP and Alpine security releases between commits. The current image dates from June, which predates PHP 8.5.11 (2026-09-24). The scheduled run re-enables its own workflow, so GitHub's 60-day inactivity rule can't switch the schedule off.
  • Dependabot. Weekly update PRs for GitHub Actions.

Verification (local, PHP 8.5 + bcmath)

  • verify.php, wallet.php and websocket.php all pass.
  • PHPStan 2.2.16 reports no errors.

Not changed (flagged)

PHP 8.1 has been past end of life since 2025-12-31, but it is still the composer.json floor and in the CI matrix. Raising the floor would drop support for existing 8.1 users, so that decision is left out of this PR.

🤖 Generated with Claude Code

TheJakeBraun and others added 3 commits September 28, 2026 20:25
…ndabot

- actions/checkout v5 -> v7; docker/* actions to their current majors
  (qemu/buildx/login v4, metadata v6, build-push v7). None of the removed
  inputs are used here; all run natively on Node 24.
- PHPStan 2.2.2 -> 2.2.16 (still no errors at level 5).
- docker.yml: weekly scheduled rebuild so :latest picks up PHP/Alpine
  security releases between commits, plus a self-re-enable step so GitHub's
  60-day inactivity rule can't silently switch the schedule off.
- Dependabot: weekly GitHub Actions update PRs.

No library, CLI or image behaviour changes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
PHP 8.1 stopped receiving security fixes on 2025-12-31. composer.json now
requires 64-bit PHP ^8.2; CI's oldest matrix entry moves 8.1 -> 8.2; docs
updated. No code changes: nothing in the library depended on 8.1 support.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@TheJakeBraun TheJakeBraun changed the title CI maintenance: current actions, PHPStan 2.2.16, weekly image rebuild Maintenance: PHP 8.2 floor, current actions, PHPStan 2.2.16, weekly image rebuild Sep 29, 2026
@TheJakeBraun
TheJakeBraun merged commit 528b3e9 into master Sep 29, 2026
4 checks passed
@TheJakeBraun
TheJakeBraun deleted the chore/2026-09-maintenance branch September 29, 2026 03:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant