nodiscc
3b5923b7e1
tools/CI: scan repository with trivy security scanner (yarn.lock, composer.lock)
...
- run scan on each push/pull request update
- can be run locally using make test_trivy_repo
- exit with error code 0/success when vulnerabilities are found, as not to make the workflow fail, a separate periodic run that exits with code 1 should be added in parallel
- update trivy to v0.43.0
- https://github.com/aquasecurity/trivy/releases/tag/v0.43.0
- also consider TRIVY_EXIT_CODE when running trivy on the latest docker image
- ref. https://github.com/shaarli/Shaarli/issues/1531
2023-06-30 23:56:09 +02:00
nodiscc
467b28c237
Merge pull request #1989 from nodiscc/trivy-fix-target-docker-image
...
gihub actions: fix value of TRIVY_TARGET_DOCKER_IMAGE
2023-05-21 19:10:36 +00:00
nodiscc
0eee6a2ba1
gihub actions: fix value of TRIVY_TARGET_DOCKER_IMAGE
...
- fixes Error response from daemon: no such image: ghcr.io/***:trivy: No such image: ghcr.io/***:trivy
- introduced in https://github.com/shaarli/Shaarli/pull/1980 but the test target branch/tag was never reverted to 'latest'
2023-05-21 21:08:36 +02:00
nodiscc
27db81ab07
Merge pull request #1987 from nodiscc/doc-or-operator
...
doc: improve docs on usage of OR operator in tags search
2023-05-21 18:30:57 +00:00
nodiscc
f64b4666ea
Merge pull request #1980 from nodiscc/trivy
...
tools: run trivy vulnerability scanner on the 'latest' docker image
2023-05-21 18:29:11 +00:00
nodiscc
a1c6460077
doc: improve docs on usage of OR operator in tags search
...
- fixes https://github.com/shaarli/Shaarli/issues/1982
2023-05-21 20:27:12 +02:00
nodiscc
a8c7c5c4bf
Merge pull request #1984 from nlegaillart/patch-1
...
Update Community-and-related-software.md
2023-05-21 18:24:44 +00:00
Nicolas Le Gaillart
eb340c7eb6
Update Community-and-related-software.md
...
Hi, here are my two little plugins for Shaarli.
2023-05-17 22:33:36 +02:00
nodiscc
22b4044986
tools/github actions: revert temporary changes used for trivy tests on fork/branch
2023-05-02 12:27:49 +02:00
nodiscc
d48e06f438
run trivy vulnerability scanner on the 'latest' docker image
...
- run trivy from makefile so that it can be run both locally and through github actions
- usage: make test_trivy TRIVY_TARGET_DOCKER_IMAGE=regist.ry/user/image:tag
- tested by downgrading the base image to alpine 3.15.7 and verifying that vulnerabilities are reported (https://github.com/nodiscc/Shaarli/actions/runs/4860040980/jobs/8663400103 )
- TEMP/TESTING only push image to ghcr.io, run trivy on trivy branch/docker tag as well as master
- ref. https://github.com/shaarli/Shaarli/issues/1531
2023-05-02 12:24:50 +02:00
ArthurHoaro
88b76c44f7
Fix autofocus: load bulk action input on linklist only ( #1976 )
2023-04-15 12:46:09 -04:00
ArthurHoaro
1cd642619f
Documentation: fix broken link to 3rd party plugins ( #1975 )
2023-04-15 12:01:50 -04:00
Gregory
5f69e17310
Update Server-configuration.md ( #1973 )
2023-04-15 09:02:48 -04:00
ArthurHoaro
e0a8f961ba
Support: ignore disk_free_space if the function is unavailable ( #1970 )
2023-04-08 10:10:29 -04:00
bschwede
739776a754
Update german translation ( #1969 )
2023-04-08 15:26:27 +02:00
nodiscc
08d9347e9a
Merge pull request #1958 from ArthurHoaro/php-drop-7.3-and-less
...
Drop support for PHP 7.1, 7.2 and 7.3
2023-04-03 15:43:07 +00:00
ArthurHoaro
050bb50cdf
Update compatibility matrix
2023-03-25 09:42:42 -04:00
ArthurHoaro
ef9d019ccd
Docker build: add ARM64 platform and bump Github action version ( #1965 )
2023-03-25 09:35:58 -04:00
nodiscc
a7e361e22a
Merge pull request #1962 from nodiscc/docker-armv7
...
github actions: build OCI images that contain both amd64 and armv7
2023-03-21 17:22:24 +00:00
nodiscc
9a1ad45e90
remove ununsed Dockerfile.armhf
2023-03-21 18:18:12 +01:00
nodiscc
fd4379992d
github actions: build OCI images that contin both amd64 and armv7
...
- ref. https://docs.docker.com/engine/reference/commandline/buildx_build/#platform
- ref. https://docs.docker.com/build/ci/github-actions/multi-platform/
- replaces https://github.com/shaarli/Shaarli/pull/1496
- make docker image name configurable through CI variables for easier testing
2023-03-21 18:10:37 +01:00
nodiscc
9c9d6298bf
Merge pull request #1960 from nodiscc/doc-updte-release-branch
...
doc: update release procedure (merge the latest release to the release branch) + use the release branch for latest release version detection
2023-03-20 17:23:34 +00:00
nodiscc
625235787e
admin/server: use the 'release' branch as reference for latest release version number detection
...
- ref. https://github.com/shaarli/Shaarli/issues/1961
2023-03-20 18:17:13 +01:00
nodiscc
062698c123
doc: update release procedure (merge the latest release to the release branch)
...
- ref. https://github.com/shaarli/Shaarli/pull/1959
2023-03-20 18:08:02 +01:00
ArthurHoaro
0a47d89193
Drop support for PHP 7.1, 7.2 and 7.3
...
This commit doesn't yet enforce the new requirement since previous version will continue to work for a short while.
2023-03-18 14:27:41 -04:00
ArthurHoaro
6624f00c05
Makefile: Use GNU tar if available ( #1957 )
2023-03-18 14:03:34 -04:00
ArthurHoaro
c0c743f9c6
Bump badge version
2023-03-18 13:41:03 -04:00
ArthurHoaro
9e24bb317c
Changelog v0.12.2 ( #1956 )
2023-03-18 13:24:16 -04:00
ArthurHoaro
ebe9417981
Rename authors makefile target to avoid conflicts with filename ( #1955 )
2023-03-18 13:19:37 -04:00
ArthurHoaro
8cd369aee7
Fix Logger exception: gracefully handle permission issue ( #1954 )
2023-03-18 12:13:48 -04:00
ArthurHoaro
b858332f9f
Fix a bug when using '/' as a tag separator ( #1953 )
2023-03-18 11:59:00 -04:00
ArthurHoaro
8457001294
Do not display deprecated warnings by default ( #1952 )
2023-03-18 11:01:33 -04:00
nodiscc
f15ac5957a
Merge pull request #1951 from nodiscc/doc-ghcrio
...
doc: move OCI images hosting to ghcr.io
2023-03-18 14:10:28 +00:00
nodiscc
721c090198
doc: move OCI images hosting to ghcr.io
...
- dockerhub free team accounts will be deleted in < 30 days (https://www.docker.com/blog/we-apologize-we-did-a-terrible-job-announcing-the-end-of-docker-free-teams/ ), this affects the Shaarli team account
- automated builds will keep pushing latest builds to dockerhub in addition to gchr.io, until the account is deleted
- **users relying on `shaarli/shaarli` OCI images are advised to migrate to `ghcr.io/shaarli/shaarli` as soon as possible**
- existing tagged images have been copied from https://hub.docker.com/r/shaarli/shaarli/ to https://github.com/shaarli/Shaarli/pkgs/container/shaarli/versions?filters%5Bversion_type%5D=tagged
- prepend `ghcr.io/` to all references to OCI images
- update all references to dockerhub -> github packages registry, update developer documentation, cleanup dead links
- ref. https://github.com/shaarli/Shaarli/issues/1948
2023-03-17 16:17:37 +01:00
nodiscc
9195ce0378
Merge pull request #1950 from nodiscc/tests-php-8.2
...
github actions: add tests for PHP 8.2
2023-03-17 14:37:26 +00:00
nodiscc
4b88cbb56c
Merge pull request #1945 from nodiscc/docker-latest-replace-dev-with-hash
...
docker: latest: replace dev in shaarli_version.php with the latest commit hash
2023-03-17 14:20:58 +00:00
nodiscc
e4ee672404
github actions: add tests for PHP 8.2
...
- ref. https://github.com/shaarli/Shaarli/pull/1928
2023-03-17 15:11:08 +01:00
nodiscc
169755c6a9
docker: latest: replace dev in shaarli_version.php with the latest commit hash
...
- fixes https://github.com/shaarli/Shaarli/issues/1676
- testing was successful using docker run --entrypoint /bin/cat nodiscc/shaarli:latest shaarli/shaarli_version.php (returns <?php /* c4a5ef5 */ ?>)
2023-03-17 15:04:38 +01:00
Denis Renning
4c76d4eea9
Github actions: update node ( #1928 )
...
* update Node dependent actions
* doc: update compatibility table
Co-authored-by: William Desportes <williamdes@wdes.fr>
Co-authored-by: nodiscc <nodiscc@gmail.com>
2023-03-17 01:22:20 +00:00
nodiscc
99485504d0
Merge pull request #1949 from hydrargyrum/master
...
ci: push container images to github registry in addition to dockerhub
2023-03-17 01:15:26 +00:00
Hg
cc2ea94d06
ci: push container images to github registry in addition to dockerhub
...
it's good to have multiple container registries, in case one decides to not
be welcoming anymore to open-source projects
2023-03-16 21:30:43 +01:00
nodiscc
1222aa62c5
Merge pull request #1947 from shaarli/fix-vintage-visibility-link
...
template/vintage: fix typo in visibility selection link
2023-03-15 01:31:30 +00:00
nodiscc
50c27108c7
template/vintage: fix typo in visibility selection link
...
- fixes https://github.com/shaarli/Shaarli/issues/1946
2023-03-15 01:29:23 +00:00
nodiscc
0d70e5e44f
Merge pull request #1938 from nodiscc/doc-proxy-timeout
...
doc: troubleshooting: add note to adjust proxy timeouts or PHP max execution time if encountering timeouts
2023-03-01 14:15:41 +00:00
nodiscc
a9acad9e1a
doc: troubleshooting: add note to adjust proxy timeouts or PHP max execution time if encountering timeouts
...
- fixes https://github.com/shaarli/Shaarli/issues/1910
- fixes https://github.com/shaarli/Shaarli/issues/1854
2023-02-19 15:29:56 +01:00
nodiscc
f3316d707a
Merge pull request #1939 from nodiscc/fix-php8-tests
...
tools: github actions: fix PHP 8.0 tests
2023-02-19 15:28:51 +01:00
nodiscc
b9938cf084
tools: github actions: fix PHP 8.0 tests
...
- `--ignore-platform-req=php` is no longer needed
- fixes https://github.com/shaarli/Shaarli/issues/1933
2023-01-31 14:39:30 +01:00
nodiscc
8226308d67
Merge pull request #1936 from kcaran/upstream
...
1932: Fixed Roboto-Regular and Roboto-Bold font declarations
2023-01-29 23:26:22 +00:00
nodiscc
1ba35135a1
Merge pull request #1937 from shaarli/doc-file-uris
...
doc: shaarli configuration: mention file:/// URIs
2023-01-29 23:26:04 +00:00
nodiscc
de895c73b7
doc: shaarli configuration: mention file:/// URIs
...
fixes https://github.com/shaarli/Shaarli/issues/1906
2023-01-29 23:17:48 +00:00