Repository navigation
Conversation
…he original repo
There was a problem hiding this comment.
🔵 Needs a closer look
The expanded external security backports across eight legacy PHP branches require human validation of patch dependencies and builds across supported image variants.
No open issues 🎉
What changed in this PR
This PR expands Debian PHP team security and bug-fix backports for the repository’s end-of-life PHP images and updates how those patches are maintained.
Changes:
- Fetch pinned patch archives, validate per-version allow-lists, and download helper scripts from pinned upstream commits.
- Add automated patch-update tracking and integrate compatibility images into the shared build workflow.
- Refresh documentation for patch maintenance, image tags, build badges, and MySQL compatibility.
| File | Description |
|---|---|
xhprof/README.md |
Refreshes heading, build badges, and license links. |
README.md |
Documents backport sources, Alpine tags, and compatibility guidance. |
pcov/README.md |
Refreshes heading, build badges, and license links. |
otel/README.md |
Refreshes heading, build badges, and license links. |
Makefile |
Removes the local scripts build context. |
eol/scripts/docker-php-source |
Removes the locally maintained source helper. |
eol/scripts/docker-php-ext-install/8.1 |
Removes the local extension installer. |
eol/scripts/docker-php-ext-install/7.4 |
Removes the local extension installer. |
eol/scripts/docker-php-ext-install/7.3 |
Removes the local extension installer. |
eol/scripts/docker-php-ext-install/7.2 |
Removes the local extension installer. |
eol/scripts/docker-php-ext-install/7.1 |
Removes the local extension installer. |
eol/scripts/docker-php-ext-install/5.6 |
Removes the local extension installer. |
eol/scripts/docker-php-ext-enable/7.3 |
Removes the local extension-enabling helper. |
eol/scripts/docker-php-ext-enable/7.2 |
Removes the local extension-enabling helper. |
eol/scripts/docker-php-ext-enable/7.1 |
Removes the local extension-enabling helper. |
eol/scripts/docker-php-ext-enable/5.6 |
Removes the local extension-enabling helper. |
eol/scripts/docker-php-ext-configure/7.2 |
Removes the local extension configuration helper. |
eol/scripts/docker-php-ext-configure/5.6 |
Removes the local extension configuration helper. |
eol/scripts/docker-php-entrypoint/fpm |
Removes the local FPM entrypoint. |
eol/scripts/docker-php-entrypoint/cli |
Removes the local CLI entrypoint. |
eol/scripts/docker-php-entrypoint/apache |
Removes the local Apache entrypoint. |
eol/scripts/apache2-foreground |
Removes the local Apache startup script. |
eol/README.md |
Explains pinned downloads and patch-update procedures. |
eol/patches/series.8.1 |
Adds the PHP 8.1 patch allow-list. |
eol/patches/series.8.0 |
Adds the PHP 8.0 patch allow-list. |
eol/patches/series.7.3 |
Adds the PHP 7.3 patch allow-list. |
eol/patches/series.7.2 |
Adds the PHP 7.2 patch allow-list. |
eol/patches/docker-php-source-patch |
Validates allow-lists and applies downloaded patches. |
eol/patches/8.1/series |
Removes the old local patch list. |
eol/patches/8.0/series |
Removes the old local patch list. |
eol/patches/7.4/series |
Removes the old local patch list. |
eol/patches/7.3/series |
Removes the old local patch list. |
eol/patches/7.3/0107-backport-ZSTR_MAX_LEN.patch |
Removes the vendored patch in favor of downloading it. |
eol/patches/7.2/series |
Removes the old local patch list. |
eol/patches/7.2/0135-backport-ZSTR_MAX_LEN.patch |
Removes the vendored patch in favor of downloading it. |
eol/patches/7.1/series |
Removes the old local patch list. |
eol/patches/7.1/0167-backport-ZSTR_MAX_LEN.patch |
Removes the vendored patch in favor of downloading it. |
eol/patches/7.0/series |
Removes the old local patch list. |
eol/patches/7.0/0211-backport-ZSTR_MAX_LEN.patch |
Removes the vendored patch in favor of downloading it. |
eol/patches/5.6/series |
Removes the old local patch list. |
eol/8.1/fpm/Dockerfile |
Uses pinned patches and upstream helpers for PHP 8.1 FPM. |
eol/8.1/fpm-alpine/Dockerfile |
Uses pinned patches and helpers for PHP 8.1 Alpine FPM. |
eol/8.1/cli/Dockerfile |
Uses pinned patches and upstream helpers for PHP 8.1 CLI. |
eol/8.1/apache/Dockerfile |
Uses pinned patches and upstream helpers for PHP 8.1 Apache. |
eol/8.1/alpine/Dockerfile |
Uses pinned patches and helpers for PHP 8.1 Alpine CLI. |
eol/8.0/fpm/Dockerfile |
Uses pinned patches and upstream helpers for PHP 8.0 FPM. |
eol/8.0/fpm-alpine/Dockerfile |
Uses pinned patches and helpers for PHP 8.0 Alpine FPM. |
eol/8.0/cli/Dockerfile |
Uses pinned patches and upstream helpers for PHP 8.0 CLI. |
eol/8.0/apache/Dockerfile |
Uses pinned patches and upstream helpers for PHP 8.0 Apache. |
eol/8.0/alpine/Dockerfile |
Uses pinned patches and helpers for PHP 8.0 Alpine CLI. |
eol/7.4/fpm/Dockerfile |
Uses pinned patches and upstream helpers for PHP 7.4 FPM. |
eol/7.4/fpm-alpine/Dockerfile |
Uses pinned patches and helpers for PHP 7.4 Alpine FPM. |
eol/7.4/cli/Dockerfile |
Uses pinned patches and upstream helpers for PHP 7.4 CLI. |
eol/7.4/apache/Dockerfile |
Uses pinned patches and upstream helpers for PHP 7.4 Apache. |
eol/7.4/alpine/Dockerfile |
Uses pinned patches and helpers for PHP 7.4 Alpine CLI. |
eol/7.3/fpm/Dockerfile |
Uses pinned patches and upstream helpers for PHP 7.3 FPM. |
eol/7.3/fpm-alpine/Dockerfile |
Uses pinned patches and helpers for PHP 7.3 Alpine FPM. |
eol/7.3/cli/Dockerfile |
Uses pinned patches and upstream helpers for PHP 7.3 CLI. |
eol/7.3/apache/Dockerfile |
Uses pinned patches and upstream helpers for PHP 7.3 Apache. |
eol/7.3/alpine/Dockerfile |
Uses pinned patches and helpers for PHP 7.3 Alpine CLI. |
eol/7.2/fpm/Dockerfile |
Uses pinned patches and upstream helpers for PHP 7.2 FPM. |
eol/7.2/fpm-alpine/Dockerfile |
Uses pinned patches and helpers for PHP 7.2 Alpine FPM. |
eol/7.2/cli/Dockerfile |
Uses pinned patches and upstream helpers for PHP 7.2 CLI. |
eol/7.2/apache/Dockerfile |
Uses pinned patches and upstream helpers for PHP 7.2 Apache. |
eol/7.2/alpine/Dockerfile |
Uses pinned patches and helpers for PHP 7.2 Alpine CLI. |
eol/7.1/fpm/Dockerfile |
Uses pinned patches and upstream helpers for PHP 7.1 FPM. |
eol/7.1/fpm-alpine/Dockerfile |
Uses pinned patches and helpers for PHP 7.1 Alpine FPM. |
eol/7.1/cli/Dockerfile |
Uses pinned patches and upstream helpers for PHP 7.1 CLI. |
eol/7.1/apache/Dockerfile |
Uses pinned patches and upstream helpers for PHP 7.1 Apache. |
eol/7.1/alpine/Dockerfile |
Uses pinned patches and helpers for PHP 7.1 Alpine CLI. |
eol/7.0/fpm/Dockerfile |
Uses pinned patches and upstream helpers for PHP 7.0 FPM. |
eol/7.0/cli/Dockerfile |
Uses pinned patches and upstream helpers for PHP 7.0 CLI. |
eol/7.0/apache/Dockerfile |
Uses pinned patches and upstream helpers for PHP 7.0 Apache. |
eol/5.6/fpm/Dockerfile |
Uses pinned patches and upstream helpers for PHP 5.6 FPM. |
eol/5.6/cli/Dockerfile |
Uses pinned patches and upstream helpers for PHP 5.6 CLI. |
eol/5.6/apache/Dockerfile |
Uses pinned patches and upstream helpers for PHP 5.6 Apache. |
dev/README.md |
Refreshes heading, build badges, and license links. |
compat/README.md |
Clarifies the base image and MySQL authentication limitations. |
compat/Makefile |
Builds from the matching chialab/php parent image. |
compat/Dockerfile.5.6 |
Removes the standalone PHP compatibility build. |
compat/Dockerfile |
Rebuilds MySQL extensions against MariaDB’s client library. |
.github/workflows/track-patches.yml |
Schedules patch-update checks and permits manual runs. |
.github/workflows/test.compat.yml |
Removes the separate compatibility test workflow. |
.github/workflows/publish.compat.yml |
Removes the separate compatibility publish workflow. |
.github/workflows/build-images.yml |
Caches patch downloads and integrates compatibility builds. |
.github/actions/track-patches/index.mjs |
Compares pinned commits with published builds and manages issues. |
.github/actions/track-patches/action.yml |
Defines the patch tracker’s inputs and runtime. |
Review effort: Balanced
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR adds more backported patches from the Debian PHP team.