8bd2bae841
Bump dependabot/fetch-metadata from 1.3.5 to 1.3.6
...
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata ) from 1.3.5 to 1.3.6.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases )
- [Commits](https://github.com/dependabot/fetch-metadata/compare/v1.3.5...v1.3.6 )
---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-01-30 03:07:21 +00:00
c19a0c6fe5
Ignore lcobucci/jwt > 4.2.0
2022-12-16 13:40:12 +01:00
b3099f68c5
Update all Doctrine deps
...
Also update these deps to be compatible with latest Doctrine version:
- `friendsofsymfony/oauth-server-bundle`
- `lexik/form-filter-bundle`
- `dama/doctrine-test-bundle`
2022-12-16 10:29:42 +01:00
5e2ad5f8db
Move translations files to `/translations`
...
This is a recommendation for Symfony 5
2022-12-15 21:19:41 +01:00
33267f0736
Update to FOSUserBundle 3.1
...
Also remove some deprecation from Symfony.
Use `LegacyEventDispatcherProxy` to handle Symfony 4 dispatch from FOSUser
2022-12-14 09:42:17 +01:00
14cbe0975d
Upgrade PHPStan
2022-11-23 15:22:00 +01:00
b5809669d4
Bump dependabot/fetch-metadata from 1.3.4 to 1.3.5
...
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata ) from 1.3.4 to 1.3.5.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases )
- [Commits](https://github.com/dependabot/fetch-metadata/compare/v1.3.4...v1.3.5 )
---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-11-07 03:06:00 +00:00
8d3fcd4635
Merge remote-tracking branch 'origin/master' into 2.6.0
2022-11-03 10:30:17 +01:00
641aeb1f4b
Remove `weblate` PR from the automated changelog
...
Instead of having each PR from @weblate we just put a link to all PRs for the closed milestone.
2022-10-21 14:12:45 +02:00
c372d68cc1
Merge remote-tracking branch 'origin/master' into 2.6.0
2022-10-18 11:11:02 +02:00
a34750b5ee
Bump dependabot/fetch-metadata from 1.3.1 to 1.3.4
...
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata ) from 1.3.1 to 1.3.4.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases )
- [Commits](https://github.com/dependabot/fetch-metadata/compare/v1.3.1...v1.3.4 )
---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-10-10 02:16:51 +00:00
f2f542d093
Allow auto merging of Dependabot JS minor or patch
...
Reducing the time consuming of merging deps which shouldn't break the project
2022-10-03 09:39:31 +02:00
fc85cfd52e
Fix TwigCS issues
2022-08-24 23:13:18 +02:00
4742b890da
Add TwigCS to the CI
2022-08-24 23:12:42 +02:00
2984c0dfcc
Merge remote-tracking branch 'origin/master' into 2.6.0
2022-06-15 16:17:50 +02:00
40595af2cf
Merge remote-tracking branch 'origin/master' into 2.6.0
2022-06-09 11:33:05 +02:00
aa029ea73e
Automatically create the package after a release
...
And then upload it to the created release.
One less step during the release process 💪
We are using that GitHub Actions: https://github.com/shogo82148/actions-upload-release-asset
I've also:
- updated the release script to clone the repo using `https` instead of `git` (otherwise it failed during the build)
- use `md5sum` instead of `md5` because the latest isn't available in GitHub Actions
2022-06-09 11:30:14 +02:00
ce8369ce2d
Jump to Node 16 to build assets
2022-05-23 08:04:16 +02:00
819487721a
Back to latest composer version
2022-05-21 23:46:49 +02:00
1bd86e156e
Drop PHP prior to 7.4
2022-05-13 07:29:23 +02:00
a5d883a55d
Bump actions/setup-node from 2 to 3
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 2 to 3.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-04-19 19:05:39 +00:00
d52f00132a
Included githubactions in the dependabot config
...
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.
Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot
GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-04-19 13:55:41 -05:00
8446cda519
Set permissions for GitHub actions
...
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-04-16 01:58:38 +00:00
0ac8089eee
CI workaround for PHP < 7.4 & MySQL 8
...
The error on PHP 7.2 & 7.3 is:
> PDO::__construct(): The server requested authentication method unknown to the client [caching_sha2_password]
See:
- https://stackoverflow.com/q/53066962/569101
- https://stackoverflow.com/q/52364415/569101
- https://stackoverflow.com/q/51489616/569101
- https://stackoverflow.com/q/50026939/569101
Also upgrade `actions/checkout` v3
2022-04-11 22:11:22 +02:00
f51008aef0
Update docker-compose and Dockerfile for dev env
...
This change should ease the spawn of a development environment.
It can be used as a vscode devcontainer.
Signed-off-by: Kevin Decherf <kevin@kdecherf.com>
2022-04-04 10:10:55 +02:00
71ffcdc710
Update README
...
Signed-off-by: Kevin Decherf <kevin@kdecherf.com>
2022-04-04 10:10:55 +02:00
fea2b46496
Composer 2.3 isn't compatible with wallabag
2022-04-01 16:09:59 +02:00
9e5a7db740
2.4.3
...
Also exclude @dependabot from automated GitHub release
2022-02-14 16:25:16 +01:00
3c507d676f
Add build test on PHP 8.0 & 8.1
...
Add `isTransactional` to `WallabagMigration` because PHP 8 behave differently with PDO transaction.
This is a workaround because we can't upgrade Doctrine Migration for now (upper versions have the fix).
- Build is now using Composer v2 (instead of v1)
- All actions have been updated to latest version
- Fix bug in PHP 8 were `$entry->getTags()` can't be properly used as a _traversable_ by `assertContains` during tests. Added a custom method `Entry::getTagsLabel()` which return a flatted tag array with only label
- Replace `assertNotRegExp` by `assertDoesNotMatchRegularExpression` because it was deprecated
2022-01-31 12:59:39 +01:00
96e2e8eeeb
Rebuild assets
...
Also update GitHub Actions to latest versions
2022-01-05 14:26:10 +01:00
0afd91a160
Remove dead test
...
The URL seems to be down now.
Move to a more frequent deps update
2022-01-05 13:25:50 +01:00
4d43f79b34
dependabot: change schedule to check updates once a month
...
Signed-off-by: Kevin Decherf <kevin@kdecherf.com>
2021-05-03 13:30:34 +02:00
6004de48ff
Allow GitHub Actions to run on 2.* branches
...
Since I created the 2.5.0 branch, GA on PR targeting that branch aren't triggered. This should fix this.
2020-12-31 14:18:49 +01:00
ab6f22a1f6
Fix issue template related to parameters
...
The way the template was used generated a badly rendered code.
2020-12-15 13:54:08 +01:00
415da16e77
Enhancement and config
2020-12-14 11:43:27 +01:00
03b531c360
Delete fetching-issue.md
2020-12-14 11:22:22 +01:00
5e5cb502f4
Remove old template
2020-12-14 11:20:33 +01:00
2249f40aa2
Update issue templates
...
Define new issue templates following new structure for them.
Also add a new template related to site config.
2020-12-14 11:19:43 +01:00
98b834d836
Remove community.wallabag.org from the issue template
2020-12-11 09:32:26 +01:00
93e7c57101
Update dependabot.yml
...
Remove old lock in NPM after WebPack 5 update.
Add `materialize-css` because the update looks like to complex.
Remove `symfony/phpunit-bridge` lock
2020-12-07 09:30:25 +01:00
189a9ef033
Use `ramsey/composer-install` to handle composer install & cache
2020-12-03 10:16:03 +01:00
cab3eb4005
Update deps (PHP & JS)
...
Also re-enable assets diff in GitHub Actions.
2020-11-30 11:52:44 +01:00
c09b4bbea5
Disable assets check
2020-11-27 14:15:10 +01:00
d9bc425e1a
Better diff display
2020-11-27 14:14:45 +01:00
a03a49294a
Make assets build fail if changes are detected
2020-11-27 14:14:45 +01:00
c29ad30b56
Jump to 18.04 as it offers Tidy extension by default too
2020-11-27 14:14:44 +01:00
40c01ad1d4
Ditch Travis to use GitHub Actions
2020-11-27 14:14:44 +01:00
4ea7290441
Create Dependabot config file
2020-10-16 10:44:49 +00:00
2a61e13fae
Improve CONTRIBUTING guide
...
Also:
- update the docker-compose to use Alpine image (lighter)
- update the PHP Dockerfile to use Imagick instead of GD (for GIF support when downloading images) and add support for SQLite
2019-06-19 14:54:38 +02:00
76cc8ca26f
Update FUNDING.yml
...
"Some users provided are not enrolled in GitHub Sponsors."
2019-06-12 17:43:15 +02:00
dependabot[bot]
Jérémy Benoist
Jeremy Benoist
Yassine Guedidi
naveensrinivasan
Kevin Decherf
Thomas Citharel
dependabot-preview[bot]