File manager - Edit - /var/www/payraty/helpdesk/public/storage/branding_media/images/.github.tar
Back
FUNDING.yml 0000775 00000001215 00000000000 0006326 0 ustar 00 # These are supported funding model platforms github: # Replace with up to 4 GitHub Sponsors-enabled usernames e.g., [user1, user2] patreon: # Replace with a single Patreon username open_collective: # Replace with a single Open Collective username ko_fi: # Replace with a single Ko-fi username tidelift: npm/vm-browserify community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry liberapay: # Replace with a single Liberapay username issuehunt: # Replace with a single IssueHunt username otechie: # Replace with a single Otechie username custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2'] workflows/main.yaml 0000775 00000007730 00000000000 0010366 0 ustar 00 name: main on: [ push, pull_request ] jobs: test: runs-on: ubuntu-latest strategy: matrix: php-version: - '7.1' - '7.2' - '7.3' - '7.4' - '8.0' - '8.1' - '8.2' include: - php-version: 'nightly' experimental: true name: PHP ${{ matrix.php-version }} steps: - name: Checkout uses: actions/checkout@v3 - name: Setup PHP, with composer and extensions uses: shivammathur/setup-php@v2 with: php-version: ${{ matrix.php-version }} extensions: ctype, dom, gd, iconv, fileinfo, libxml, mbstring, simplexml, xml, xmlreader, xmlwriter, zip, zlib coverage: none - name: Get composer cache directory id: composer-cache run: echo "::set-output name=dir::$(composer config cache-files-dir)" - name: Cache composer dependencies uses: actions/cache@v3 with: path: ${{ steps.composer-cache.outputs.dir }} key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }} restore-keys: ${{ runner.os }}-composer- - name: Delete composer lock file id: composer-lock if: ${{ matrix.php-version == '8.0' || matrix.php-version == '8.1' || matrix.php-version == '8.2' || matrix.php-version == 'nightly' }} run: | rm composer.lock echo "::set-output name=flags::--ignore-platform-reqs" - name: Install dependencies run: composer update --no-progress --prefer-dist --optimize-autoloader ${{ steps.composer-lock.outputs.flags }} - name: Setup problem matchers for PHP run: echo "::add-matcher::${{ runner.tool_cache }}/php.json" - name: Setup problem matchers for PHPUnit run: echo "::add-matcher::${{ runner.tool_cache }}/phpunit.json" - name: Test with PHPUnit run: ./vendor/bin/phpunit phpcs: runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v3 - name: Setup PHP, with composer and extensions uses: shivammathur/setup-php@v2 with: php-version: 7.4 extensions: ctype, dom, gd, iconv, fileinfo, libxml, mbstring, simplexml, xml, xmlreader, xmlwriter, zip, zlib coverage: none tools: cs2pr - name: Get composer cache directory id: composer-cache run: echo "::set-output name=dir::$(composer config cache-files-dir)" - name: Cache composer dependencies uses: actions/cache@v3 with: path: ${{ steps.composer-cache.outputs.dir }} key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }} restore-keys: ${{ runner.os }}-composer- - name: Install dependencies run: composer install --no-progress --prefer-dist --optimize-autoloader - name: Code style with PHP_CodeSniffer run: ./vendor/bin/phpcs -q --report=checkstyle | cs2pr --graceful-warnings --colorize coverage: runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v3 - name: Setup PHP, with composer and extensions uses: shivammathur/setup-php@v2 with: php-version: 7.4 extensions: ctype, dom, gd, iconv, fileinfo, libxml, mbstring, simplexml, xml, xmlreader, xmlwriter, zip, zlib coverage: pcov - name: Get composer cache directory id: composer-cache run: echo "::set-output name=dir::$(composer config cache-files-dir)" - name: Cache composer dependencies uses: actions/cache@v3 with: path: ${{ steps.composer-cache.outputs.dir }} key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }} restore-keys: ${{ runner.os }}-composer- - name: Install dependencies run: composer install --no-progress --prefer-dist --optimize-autoloader - name: Coverage run: | ./vendor/bin/phpunit --coverage-text workflows/main.yml 0000644 00000011437 00000000000 0010217 0 ustar 00 name: main on: [ push, pull_request ] jobs: test: runs-on: ubuntu-latest strategy: matrix: experimental: - false php-version: - '7.2' - '7.3' - '7.4' - '8.0' - '8.1' - '8.2' include: - php-version: 'nightly' experimental: true name: PHP ${{ matrix.php-version }} steps: - name: Checkout uses: actions/checkout@v3 - name: Setup PHP, with composer and extensions uses: shivammathur/setup-php@v2 with: php-version: ${{ matrix.php-version }} coverage: none - name: Get composer cache directory id: composer-cache run: echo "::set-output name=dir::$(composer config cache-files-dir)" - name: Cache composer dependencies uses: actions/cache@v3 with: path: ${{ steps.composer-cache.outputs.dir }} key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }} restore-keys: ${{ runner.os }}-composer- - name: Delete composer lock file id: composer-lock if: ${{ matrix.php-version == '8.0' || matrix.php-version == '8.1' || matrix.php-version == '8.2' || matrix.php-version == 'nightly' }} run: | rm composer.lock echo "::set-output name=flags::--ignore-platform-reqs" - name: Install dependencies run: composer update --no-progress --prefer-dist --optimize-autoloader ${{ steps.composer-lock.outputs.flags }} - name: Setup problem matchers for PHP run: echo "::add-matcher::${{ runner.tool_cache }}/php.json" - name: Setup problem matchers for PHPUnit run: echo "::add-matcher::${{ runner.tool_cache }}/phpunit.json" - name: "Run PHPUnit tests (Experimental: ${{ matrix.experimental }})" env: FAILURE_ACTION: "${{ matrix.experimental == true }}" run: vendor/bin/phpunit --verbose || $FAILURE_ACTION phpcs: runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v3 - name: Setup PHP, with composer and extensions uses: shivammathur/setup-php@v2 with: php-version: 7.4 coverage: none tools: cs2pr - name: Get composer cache directory id: composer-cache run: echo "::set-output name=dir::$(composer config cache-files-dir)" - name: Cache composer dependencies uses: actions/cache@v3 with: path: ${{ steps.composer-cache.outputs.dir }} key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }} restore-keys: ${{ runner.os }}-composer- - name: Install dependencies run: composer install --no-progress --prefer-dist --optimize-autoloader - name: Code style with PHP_CodeSniffer run: ./vendor/bin/phpcs -q --report=checkstyle classes/src/ | cs2pr versions: runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v3 - name: Setup PHP, with composer and extensions uses: shivammathur/setup-php@v2 with: php-version: 7.4 coverage: none tools: cs2pr - name: Get composer cache directory id: composer-cache run: echo "::set-output name=dir::$(composer config cache-files-dir)" - name: Cache composer dependencies uses: actions/cache@v3 with: path: ${{ steps.composer-cache.outputs.dir }} key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }} restore-keys: ${{ runner.os }}-composer- - name: Install dependencies run: composer install --no-progress --prefer-dist --optimize-autoloader - name: Code Version Compatibility check with PHP_CodeSniffer run: ./vendor/bin/phpcs -q --report-width=200 --report=summary,full classes/src/ --standard=PHPCompatibility --runtime-set testVersion 7.2- coverage: runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v3 - name: Setup PHP, with composer and extensions uses: shivammathur/setup-php@v2 with: php-version: 7.4 coverage: pcov - name: Get composer cache directory id: composer-cache run: echo "::set-output name=dir::$(composer config cache-files-dir)" - name: Cache composer dependencies uses: actions/cache@v3 with: path: ${{ steps.composer-cache.outputs.dir }} key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }} restore-keys: ${{ runner.os }}-composer- - name: Install dependencies run: composer install --no-progress --prefer-dist --optimize-autoloader - name: Test Coverage run: ./vendor/bin/phpunit --verbose --coverage-text workflows/ci.yml 0000777 00000002270 00000000000 0007670 0 ustar 00 name: CI on: [push] jobs: coding-style: name: Coding Style runs-on: ubuntu-latest steps: - name: Setup PHP uses: shivammathur/setup-php@v2 with: php-version: 8.0 tools: composer, cs2pr coverage: none - name: Checkout uses: actions/checkout@v2 - name: Install the dependencies run: composer install --no-interaction --no-suggest - name: Check the coding style run: vendor/bin/phpcs --standard=PSR12 --report=checkstyle lib | cs2pr --graceful-warnings - name: Analyze the code run: vendor/bin/phpstan analyse lib --level=7 --no-progress tests: name: PHP ${{ matrix.php }} runs-on: ubuntu-latest strategy: fail-fast: false matrix: php: [7.4, 8.1] steps: - name: Setup PHP uses: shivammathur/setup-php@v2 with: php-version: ${{ matrix.php }} coverage: none - name: Checkout uses: actions/checkout@v2 - name: Install the dependencies run: composer install --no-interaction --no-suggest - name: Run the unit tests run: vendor/bin/phpunit --colors=always tests dependabot.yml 0000664 00000000344 00000000000 0007340 0 ustar 00 version: 2 updates: - package-ecosystem: "composer" directory: "/" schedule: interval: "daily" - package-ecosystem: "github-actions" directory: "/" schedule: interval: "daily" workflows/php.yml 0000644 00000002520 00000000000 0010053 0 ustar 00 name: PHP Composer on: push: branches: [ master-v2 ] pull_request: branches: [ master-v2 ] jobs: build: runs-on: ubuntu-latest strategy: matrix: php-version: ['7.1', '7.2', '7.3', '7.4', '8.0'] steps: - name: Checkout uses: actions/checkout@v2 - name: Setup PHP ${{ matrix.php-version }} uses: shivammathur/setup-php@v2 with: php-version: ${{ matrix.php-version }} extensions: mbstring, intl ini-values: post_max_size=256M, short_open_tag=On coverage: xdebug tools: php-cs-fixer, phpunit - name: Validate composer.json and composer.lock run: composer validate - name: Cache Composer packages id: composer-cache uses: actions/cache@v2 with: path: vendor key: ${{ runner.os }}-php-${{ hashFiles('**/composer.lock') }} restore-keys: | ${{ runner.os }}-php- - name: Install dependencies if: steps.composer-cache.outputs.cache-hit != 'false' run: composer install --prefer-dist --no-progress - name: Run test suite run: composer run-script test env: ACCESS_TOKEN: ${{ secrets.ACCESS_TOKEN }} USER_EMAIL: ${{ secrets.USER_EMAIL }} CLIENT_ID: ${{ secrets.CLIENT_ID }} CLIENT_SECRET: ${{ secrets.CLIENT_SECRET }} workflows/test-and-deploy.yml 0000777 00000010207 00000000000 0012305 0 ustar 00 name: Test and Deploy on: push: branches: [ '*' ] tags: [ '*' ] pull_request: branches: [ main ] schedule: # Run automatically at 8AM PST Monday-Friday - cron: '0 15 * * 1-5' workflow_dispatch: jobs: test: name: Test runs-on: ubuntu-latest timeout-minutes: 20 strategy: matrix: php: [ 7.2, 7.3, 7.4, 8.0, 8.1, 8.2, 8.3 ] dependencies: - "lowest" - "highest" steps: - name: Checkout twilio-php uses: actions/checkout@v3 with: fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis - name: Setup PHP Action uses: shivammathur/setup-php@2.15.0 with: php-version: ${{ matrix.php }} coverage: xdebug id: php - name: Composer webhook config run: composer config -g github-oauth.github.com ${{ secrets.GITHUB_TOKEN }} - name: Update Dependencies if: matrix.dependencies == 'lowest' run: composer update --prefer-lowest --prefer-stable -n - name: Run Tests run: make install test - name: Fix code coverage paths run: | if [ -f "coverage.xml" ]; then sed -i 's@'$GITHUB_WORKSPACE'@/github/workspace/@g' coverage.xml fi - name: Run Cluster Test if: (!github.event.pull_request.head.repo.fork) env: TWILIO_ACCOUNT_SID: ${{ secrets.TWILIO_ACCOUNT_SID }} TWILIO_API_KEY: ${{ secrets.TWILIO_CLUSTER_TEST_API_KEY}} TWILIO_API_SECRET: ${{ secrets.TWILIO_CLUSTER_TEST_API_KEY_SECRET }} TWILIO_FROM_NUMBER: ${{ secrets.TWILIO_FROM_NUMBER }} TWILIO_TO_NUMBER: ${{ secrets.TWILIO_TO_NUMBER }} run: make cluster-test - name: Install SonarCloud scanner and run analysis uses: SonarSource/sonarcloud-github-action@master if: (github.event_name == 'pull_request' || github.ref_type == 'branch') && !github.event.pull_request.head.repo.fork && matrix.php == '8.1' && matrix.dependencies == 'highest' env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} deploy: name: Deploy if: success() && github.ref_type == 'tag' needs: [ test ] runs-on: ubuntu-latest steps: - name: Checkout twilio-php uses: actions/checkout@v3 with: fetch-depth: 0 - name: Install dependencies run: composer install - name: Login to Docker Hub uses: docker/login-action@v2 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_AUTH_TOKEN }} # The expression strips off the shortest match from the front of the string to yield just the tag name as the output - name: Get tagged version run: echo "GITHUB_TAG=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV - name: Create GitHub Release uses: sendgrid/dx-automator/actions/release@main env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Build & Push docker image run: make docker-build docker-push - name: Submit metric to Datadog uses: sendgrid/dx-automator/actions/datadog-release-metric@main env: DD_API_KEY: ${{ secrets.DATADOG_API_KEY }} notify-on-failure: name: Slack notify on failure if: failure() && github.event_name != 'pull_request' && (github.ref == 'refs/heads/main' || github.ref_type == 'tag') needs: [ test, deploy ] runs-on: ubuntu-latest steps: - uses: rtCamp/action-slack-notify@v2 env: SLACK_COLOR: failure SLACK_ICON_EMOJI: ':github:' SLACK_MESSAGE: ${{ format('Test *{0}*, Deploy *{1}*, {2}/{3}/actions/runs/{4}', needs.test.result, needs.deploy.result, github.server_url, github.repository, github.run_id) }} SLACK_TITLE: Action Failure - ${{ github.repository }} SLACK_USERNAME: GitHub Actions SLACK_MSG_AUTHOR: twilio-dx SLACK_FOOTER: Posted automatically using GitHub Actions SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} MSG_MINIMAL: true workflows/pr-lint.yml 0000777 00000000655 00000000000 0010667 0 ustar 00 name: Lint PR on: pull_request_target: types: [ opened, edited, synchronize, reopened ] jobs: validate: name: Validate title runs-on: ubuntu-latest steps: - uses: amannn/action-semantic-pull-request@v5 with: types: | chore docs fix feat misc test env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} ISSUE_TEMPLATE/config.yml 0000755 00000000501 00000000000 0010657 0 ustar 00 blank_issues_enabled: true contact_links: - name: Ask a Question url: https://github.com/spatie/ray/discussions/new?category=q-a about: Ask the community for help - name: Feature Request url: https://github.com/spatie/ray/discussions/new?category=ideas about: Share ideas for new features workflows/test.yml 0000775 00000002110 00000000000 0010243 0 ustar 00 name: "Run unit tests" on: - push - pull_request env: COMPOSER_MEMORY_LIMIT: -1 jobs: test: name: "Build" runs-on: ubuntu-latest strategy: max-parallel: 12 matrix: php: ['7.1', '7.2', '7.3', '7.4', '8.0', '8.1'] package-release: [dist] steps: - name: Checkout repository uses: actions/checkout@v2 - name: Setup PHP ${{ matrix.php }} uses: shivammathur/setup-php@v2 with: php-version: ${{ matrix.php }} extensions: exif,json,mbstring,dom - name: Install composer dependencies uses: ramsey/composer-install@v2 with: dependency-versions: ${{ matrix.package-release }} - name: Run unit tests run: vendor/bin/phpunit - name: Run code sniffer run: vendor/bin/phpcs --standard=phpcs.xml src tests # - name: Upload to Scrutinizer # continue-on-error: true # run: | # wget https://scrutinizer-ci.com/ocular.phar # php ocular.phar code-coverage:upload --format=php-clover coverage.clover workflows/php-cs-fixer.yml 0000775 00000001116 00000000000 0011576 0 ustar 00 name: Check & fix styling on: [push] jobs: php-cs-fixer: runs-on: ubuntu-latest steps: - name: Checkout code uses: actions/checkout@v2 with: ref: ${{ github.head_ref }} - name: Run PHP CS Fixer uses: docker://oskarstark/php-cs-fixer-ga with: args: --config=.php_cs.dist --allow-risky=yes - name: Commit changes uses: stefanzweifel/git-auto-commit-action@v4 with: commit_message: Fix styling INCIDENT_RESPONSE_PROCESS.md 0000664 00000007270 00000000000 0010750 0 ustar 00 # Incident Response Process for **resolve** ## Reporting a Vulnerability We take the security of **resolve** very seriously. If you believe you’ve found a security vulnerability, please inform us responsibly through coordinated disclosure. ### How to Report > **Do not** report security vulnerabilities through public GitHub issues, discussions, or social media. Instead, please use one of these secure channels: 1. **GitHub Security Advisories** Use the **Report a vulnerability** button in the Security tab of the [browserify/resolve repository](https://github.com/browserify/resolve). 2. **Email** Follow the posted [Security Policy](https://github.com/browserify/resolve/security/policy). ### What to Include **Required Information:** - Brief description of the vulnerability type - Affected version(s) and components - Steps to reproduce the issue - Impact assessment (what an attacker could achieve) - Confirm the issue is not present in test files (in other words, only via the official entry points in `exports`) **Helpful Additional Details:** - Full paths of affected source files - Specific commit or branch where the issue exists - Required configuration to reproduce - Proof-of-concept code (if available) - Suggested mitigation or fix ## Our Response Process **Timeline Commitments:** - **Initial acknowledgment**: Within 24 hours - **Detailed response**: Within 3 business days - **Status updates**: Every 7 days until resolved - **Resolution target**: 90 days for most issues **What We’ll Do:** 1. Acknowledge your report and assign a tracking ID 2. Assess the vulnerability and determine severity 3. Develop and test a fix 4. Coordinate disclosure timeline with you 5. Release a security update and publish an advisory and CVE 6. Credit you in our security advisory (if desired) ## Disclosure Policy - **Coordinated disclosure**: We’ll work with you on timing - **Typical timeline**: 90 days from report to public disclosure - **Early disclosure**: If actively exploited - **Delayed disclosure**: For complex issues ## Scope **In Scope:** - **resolve** package (all supported versions) - Official examples and documentation - Core resolution APIs - Dependencies with direct security implications **Out of Scope:** - Third-party wrappers or extensions - Bundler-specific integrations - Social engineering or physical attacks - Theoretical vulnerabilities without practical exploitation - Issues in non-production files ## Security Measures **Our Commitments:** - Regular vulnerability scanning via `npm audit` - Automated security checks in CI/CD (GitHub Actions) - Secure coding practices and mandatory code review - Prompt patch releases for critical issues **User Responsibilities:** - Keep **resolve** updated - Monitor dependency vulnerabilities - Follow secure configuration guidelines for module resolution ## Legal Safe Harbor **We will NOT:** - Initiate legal action - Contact law enforcement - Suspend or terminate your access **You must:** - Only test against your own installations - Not access, modify, or delete user data - Not degrade service availability - Not publicly disclose before coordinated disclosure - Act in good faith ## Recognition - **Advisory Credits**: Credit in GitHub Security Advisories (unless anonymous) ## Security Updates **Stay Informed:** - Subscribe to npm updates for **resolve** - Enable GitHub Security Advisory notifications **Update Process:** - Patch releases (e.g., 1.22.10 → 1.22.11) - Out-of-band releases for critical issues - Advisories via GitHub Security Advisories ## Contact Information - **Security reports**: Security tab of [browserify/resolve](https://github.com/browserify/resolve/security) - **General inquiries**: GitHub Discussions or Issues THREAT_MODEL.md 0000664 00000010224 00000000000 0006737 0 ustar 00 ## Threat Model for resolve (module path resolution library) ### 1. Library Overview - **Library Name:** resolve - **Brief Description:** Implements Node.js `require.resolve()` algorithm for synchronous and asynchronous file path resolution. Used to locate modules and files in Node.js projects. - **Key Public APIs/Functions:** `resolve.sync()` / `resolve/sync`, `resolve()` / `resolve/async` ### 2. Define Scope This threat model focuses on the core path resolution algorithm, including filesystem interaction, option handling, and cache management. ### 3. Conceptual System Diagram ``` Caller Application → resolve(id, options) → Resolution Algorithm → File System │ └→ Options Handling └→ Cache System ``` **Trust Boundaries:** - **Input module IDs:** May come from untrusted sources (user input, configuration) - **Filesystem access:** The library interacts with the filesystem to resolve paths - **Options:** Provided by the caller - **Cache:** Used to improve performance, but could be a vector for tampering or information disclosure if not handled securely ### 4. Identify Assets - **Integrity of resolution output:** Ensure correct and safe file path matching. - **Confidentiality of configuration:** Prevent sensitive path information from being leaked. - **Availability/performance for host application:** Prevent crashes or resource exhaustion. - **Security of host application:** Prevent path traversal or unintended filesystem access. - **Reputation of library:** Maintain trust by avoiding supply chain attacks and vulnerabilities[1][3][4]. ### 5. Identify Threats | Component / API / Interaction | S | T | R | I | D | E | |-----------------------------------------------------|----|----|----|----|----|----| | Public API Call (`resolve/async`, `resolve/sync`) | ✓ | ✓ | – | ✓ | – | – | | Filesystem Access | – | ✓ | – | ✓ | ✓ | – | | Options Handling | ✓ | ✓ | – | ✓ | – | – | | Cache System | – | ✓ | – | ✓ | – | – | **Key Threats:** - **Spoofing:** Malicious module IDs mimicking legitimate packages, or spoofing configuration options[1]. - **Tampering:** Caller-provided paths altering resolution order, or cache tampering leading to incorrect results[1][4]. - **Information Disclosure:** Error messages revealing filesystem structure or sensitive paths[1]. - **Denial of Service:** Recursive or excessive resolution exhausting filesystem handles or causing application crashes[1]. - **Path Traversal:** Malicious input allowing access to files outside the intended directory[4]. ### 6. Mitigation/Countermeasures | Threat Identified | Proposed Mitigation | |--------------------------------------------|---------------------| | Spoofing (malicious module IDs/config) | Sanitize input IDs; validate against known patterns; restrict `basedir` to app-controlled paths[1][4]. | | Tampering (path traversal, cache) | Validate input IDs for directory escapes; secure cache reads/writes; restrict cache to trusted sources[1][4]. | | Information Disclosure (error messages) | Generic "not found" errors without internal paths; avoid exposing sensitive configuration in errors[1]. | | Denial of Service (resource exhaustion) | Limit recursive resolution depth; implement timeout; monitor for excessive filesystem operations[1]. | ### 7. Risk Ranking - **High:** Path traversal via malicious IDs (if not properly mitigated) - **Medium:** Cache tampering or spoofing (if cache is not secured) - **Low:** Information disclosure in errors (if error handling is generic) ### 8. Next Steps & Review 1. **Implement input sanitization for module IDs and configuration.** 2. **Add resolution depth limiting and timeout.** 3. **Audit cache handling for race conditions and tampering.** 4. **Regularly review dependencies for vulnerabilities.** 5. **Keep documentation and threat model up to date.** 6. **Monitor for new threats as the ecosystem and library evolve[1][3].** workflows/tests.yml 0000644 00000002471 00000000000 0010433 0 ustar 00 name: tests on: [push] jobs: build: runs-on: ubuntu-latest timeout-minutes: 10 strategy: matrix: php: ['8.1', '8.2', '8.3'] laravel: ['10.0', '10.48', '11.0'] exclude: - php: '8.1' laravel: '11.0' name: PHP ${{ matrix.php }} Laravel ${{ matrix.laravel }} steps: - name: Checkout uses: actions/checkout@master - name: Installing PHP uses: shivammathur/setup-php@master with: php-version: ${{ matrix.php }} extensions: mbstring, json tools: composer:v2 - name: Lock Package Versions run: | composer require "illuminate/http:${{ matrix.laravel }}.*" --no-update -v composer require "illuminate/routing:${{ matrix.laravel }}.*" --no-update -v composer require "illuminate/session:${{ matrix.laravel }}.*" --no-update -v composer require "illuminate/support:${{ matrix.laravel }}.*" --no-update -v composer require "illuminate/view:${{ matrix.laravel }}.*" --no-update -v composer require "illuminate/database:${{ matrix.laravel }}.*" --no-update -v - name: Composer Install run: composer install --prefer-dist --no-progress --no-interaction - name: Run Tests run: php vendor/bin/phpunit --testdox release-please.yml 0000755 00000000076 00000000000 0010125 0 ustar 00 releaseType: simple handleGHRelease: true primaryBranch: main workflows/psalm.yml 0000775 00000001607 00000000000 0010412 0 ustar 00 name: Psalm on: push: paths: - '**.php' - 'psalm.xml' jobs: psalm: name: psalm runs-on: ubuntu-latest steps: - uses: actions/checkout@v2 - name: Setup PHP uses: shivammathur/setup-php@v2 with: php-version: '7.4' extensions: dom, curl, libxml, mbstring, zip, pcntl, pdo, sqlite, pdo_sqlite, bcmath, soap, intl, gd, exif, iconv, imagick coverage: none - name: Cache composer dependencies uses: actions/cache@v1 with: path: vendor key: composer-${{ hashFiles('composer.lock') }} - name: Run composer require run: composer require -n --prefer-dist - name: Run psalm run: ./vendor/bin/psalm -c psalm.xml workflows/run-tests.yml 0000775 00000003047 00000000000 0011242 0 ustar 00 name: run-tests on: push: pull_request: schedule: - cron: '0 0 * * *' jobs: test: runs-on: ${{ matrix.os }} strategy: fail-fast: true matrix: php: [8.0, 7.4, 7.3, 7.2] laravel: [8.*, 7.*, 6.*] dependency-version: [prefer-lowest, prefer-stable] os: [ubuntu-latest] name: P${{ matrix.php }} - ${{ matrix.os }} steps: - name: Checkout code uses: actions/checkout@v2 - name: Install sqlite3 run: sudo apt-get install sqlite3 libsqlite3-dev - name: Setup PHP uses: shivammathur/setup-php@v2 with: php-version: ${{ matrix.php }} extensions: dom, curl, libxml, mbstring, zip, pcntl, pdo, sqlite, pdo_sqlite, mysql, mysqli, pdo_mysql, bcmath, soap, intl, gd, exif, iconv, imagick coverage: none - name: Install dependencies run: composer update --${{ matrix.dependency-version }} --prefer-dist --no-interaction - name: Execute tests run: vendor/bin/phpunit - name: Send Slack notification uses: 8398a7/action-slack@v2 if: failure() with: status: ${{ job.status }} author_name: ${{ github.actor }} env: SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} workflows/security.yml 0000775 00000004236 00000000000 0011146 0 ustar 00 name: SecurityChecks on: pull_request: {} push: branches: ["master"] schedule: - cron: '30 20 * * *' jobs: semgrep: name: Semgrep runs-on: [ubuntu-latest] container: image: returntocorp/semgrep steps: - uses: actions/checkout@v4.0.0 - name: Run semgrep run: semgrep ci env: SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} workflow_status: runs-on: [ ubuntu-latest ] # nosemgrep : semgrep.dev/s/swati31196:github_provided_runner name: Update Status Check needs: [ semgrep ] if: always() env: githubCommit: ${{ github.event.pull_request.head.sha }} steps: - name: Set github commit id run: | if [ "${{ github.event_name }}" = "push" ] || [ "${{ github.event_name }}" = "schedule" ]; then echo "githubCommit=${{ github.sha }}" >> $GITHUB_ENV fi exit 0 - name: Failed id: failed if: (contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled')) && github.ref != 'refs/heads/master' run: | echo 'Failing the workflow for github security status check.' curl -X POST -H "Content-Type: application/json" -H "Authorization: token ${{ github.token }}" \ -d '{ "state" : "failure" , "context" : "github/security-status-check" , "description" : "github/security-status-check", "target_url" : "https://github.com/${{ github.repository }}" }' \ https://api.github.com/repos/${{ github.repository }}/statuses/${{ env.githubCommit }} exit 1 - name: Success if: steps.failed.conclusion == 'skipped' || github.ref != 'refs/heads/master' run: | echo 'Status check has passed!' curl -X POST -H "Content-Type: application/json" -H "Authorization: token ${{ github.token }}" \ -d '{ "state" : "success" , "context" : "github/security-status-check" , "description" : "github/security-status-check", "target_url" : "https://github.com/${{ github.repository }}" }' \ https://api.github.com/repos/${{ github.repository }}/statuses/${{ env.githubCommit }} exit 0 pull_request_template.md 0000775 00000000757 00000000000 0011464 0 ustar 00 ## Note :- Please follow the below points while attaching test cases document link below: ### - If label `Tested` is added then test cases document URL is mandatory. ### - Link added should be a valid URL and accessible throughout the org. ### - If the branch name contains hotfix / revert by default the BVT workflow check will pass. | Test Case Document URL | |-----------------------------------------------| | Please paste test case document link here.... | ISSUE_TEMPLATE/issue_report.yml 0000775 00000003122 00000000000 0012141 0 ustar 00 name: issue.md description: Create a report to help us improve labels: ["issue"] body: - type: markdown attributes: value: | Thanks for taking the time to fill out this issue report! - type: textarea id: repro-steps attributes: label: Steps to reproduce the behavior description: placeholder: | 1. Fetch a '...' 2. Update the '....' 3. See error validations: required: true - type: textarea id: expected-behavior attributes: label: Expected behavior description: A clear and concise description of what you expected to happen. validations: required: true - type: textarea id: actual-behavior attributes: label: Actual behavior description: A clear and concise description of what actually happen. validations: required: true - type: textarea id: code-snippets attributes: label: Code snippets description: If applicable, add code snippets to help explain your problem. render: Php validations: required: false - type: input id: language-version attributes: label: Php version placeholder: Php v7.4 validations: required: true - type: input id: lib-version attributes: label: Library version placeholder: razorpay-php v2.8.4 validations: required: true - type: textarea id: additional-context attributes: label: Additional Information description: Add any other information about the problem here. validations: required: false ISSUE_TEMPLATE/feature.yml 0000775 00000002047 00000000000 0011056 0 ustar 00 name: feature.md description: Submit a proposal for a new feature title: '[Feature]: ' labels: [':rocket: Feature Request'] body: - type: markdown attributes: value: | ### Thank you for taking the time to suggest a new feature! We kindly ask that you search to see if an issue [already exists](https://github.com/razorpay/razorpay-php/issues?q=is%3Aissue+sort%3Acreated-desc+) for your feature. We are also happy to accept contributions from our users. - type: textarea id: description attributes: label: '🚀 Feature Proposal' description: validations: required: true - type: textarea id: solution attributes: label: Suggested Solution description: validations: required: true - type: textarea id: alternatives attributes: label: Alternatives description: validations: required: false - type: textarea id: extra attributes: label: Additional Information description: validations: required: true workflows/release.yml 0000664 00000001566 00000000000 0010717 0 ustar 00 name: Release on: release: types: [published] permissions: contents: read id-token: write jobs: build: runs-on: ubuntu-latest strategy: matrix: node-version: [22] steps: - uses: actions/checkout@v4 - name: Use Node.js ${{ matrix.node-version }} uses: actions/setup-node@v4 with: node-version: ${{ matrix.node-version }} registry-url: 'https://registry.npmjs.org' cache: 'npm' - name: Install dependencies run: npm install - name: Test run: npm test - name: Calculate environment variables run: | echo "RELEASE_CHANNEL=$(npm run release-channel --silent)" >> $GITHUB_ENV - name: Publish run: npm publish --provenance --tag ${{ env.RELEASE_CHANNEL }} env: NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} workflows/release-insiders.yml 0000664 00000001761 00000000000 0012532 0 ustar 00 name: Release Insiders on: push: branches: [main] permissions: contents: read id-token: write jobs: build: runs-on: ubuntu-latest strategy: matrix: node-version: [22] steps: - uses: actions/checkout@v4 - name: Use Node.js ${{ matrix.node-version }} uses: actions/setup-node@v4 with: node-version: ${{ matrix.node-version }} registry-url: 'https://registry.npmjs.org' cache: 'npm' - name: Install dependencies run: npm install - name: Resolve version id: vars run: echo "::set-output name=sha_short::$(git rev-parse --short HEAD)" - name: 'Version based on commit: 0.0.0-insiders.${{ steps.vars.outputs.sha_short }}' run: npm version 0.0.0-insiders.${{ steps.vars.outputs.sha_short }} --force --no-git-tag-version - name: Publish run: npm publish --provenance --tag insiders env: NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} workflows/prepare-release.yml 0000664 00000002345 00000000000 0012347 0 ustar 00 name: Prepare Release on: workflow_dispatch: push: tags: - 'v*' permissions: contents: read jobs: prepare: permissions: contents: write # for softprops/action-gh-release to create GitHub release runs-on: ubuntu-latest strategy: matrix: node-version: [22] steps: - uses: actions/checkout@v4 - name: Use Node.js ${{ matrix.node-version }} uses: actions/setup-node@v4 with: node-version: ${{ matrix.node-version }} registry-url: 'https://registry.npmjs.org' cache: 'npm' - name: Install dependencies run: npm install - name: Test run: npm test - name: Resolve version id: vars run: | echo "TAG_NAME=$(git describe --tags --abbrev=0)" >> $GITHUB_ENV - name: Get release notes run: | RELEASE_NOTES=$(npm run release-notes --silent) echo "RELEASE_NOTES<<EOF" >> $GITHUB_ENV echo "$RELEASE_NOTES" >> $GITHUB_ENV echo "EOF" >> $GITHUB_ENV - name: Release uses: softprops/action-gh-release@v1 with: draft: true tag_name: ${{ env.TAG_NAME }} body: ${{ env.RELEASE_NOTES }} ISSUE_TEMPLATE/1.bug_report.yml 0000664 00000002424 00000000000 0011726 0 ustar 00 name: Bug Report description: Create a bug report for @tailwindcss/forms. labels: [] body: - type: input attributes: label: What version of @tailwindcss/forms are you using? description: 'For example: v0.1.4' validations: required: true - type: input attributes: label: What version of Node.js are you using? description: 'For example: v12.0.0' validations: required: true - type: input attributes: label: What browser are you using? description: 'For example: Chrome, Safari, or N/A' validations: required: true - type: input attributes: label: What operating system are you using? description: 'For example: macOS, Windows' validations: required: true - type: input attributes: label: Reproduction repository description: A public GitHub repo that includes a minimal reproduction of the bug. Unfortunately we can't provide support without a reproduction, and your issue will be closed and locked with no comment if this is not provided. validations: required: true - type: textarea attributes: label: Describe your issue description: Describe the problem you're seeing, any important steps to reproduce and what behavior you expect instead ISSUE_TEMPLATE.md 0000775 00000000753 00000000000 0007224 0 ustar 00 <!-- Please fill in this template according to your issue. --> | Q | A | ------------------- | ----- | Bug report? | yes/no | Feature request? | yes/no | RFC? | yes/no | How used? | Standalone/Symfony/3party | Swiftmailer version | x.y.z | PHP version | x.y.z ### Observed behaviour <!-- What does the code do? --> ### Expected behaviour <!-- What should the code do? --> ### Example <!-- Example to reproduce the issue. --> PULL_REQUEST_TEMPLATE.md 0000775 00000000625 00000000000 0010316 0 ustar 00 <!-- Please fill in this template according to the PR you're about to submit. --> | Q | A | ------------- | --- | Bug fix? | yes/no | New feature? | yes/no | Doc update? | yes/no | BC breaks? | yes/no | Deprecations? | yes/no | Fixed tickets | #... <!-- #-prefixed issue number(s), if any --> | License | MIT <!-- Replace this comment by the description of your issue. --> workflows/branch_main.yml 0000664 00000000465 00000000000 0011535 0 ustar 00 on: push: branches: - "main" name: "Main Branch" permissions: contents: read jobs: test: name: "Test" permissions: contents: read security-events: write uses: ./.github/workflows/part_test.yml docs: name: "Docs" uses: ./.github/workflows/part_docs.yml workflows/tag-beta.yml 0000664 00000000662 00000000000 0010757 0 ustar 00 on: push: tags: - "[0-9]+.[0-9]+.[0-9]+-beta.[0-9]+" name: "Beta Tag" permissions: contents: read jobs: docs: name: "Docs" uses: ./.github/workflows/part_docs.yml release: name: "Release" needs: ["docs"] permissions: id-token: write contents: write attestations: write uses: ./.github/workflows/part_release.yml with: releaseName: "${{ github.ref_name }}" workflows/part_dependabot.yml 0000664 00000001253 00000000000 0012423 0 ustar 00 on: workflow_call: {} name: "Dependabot" permissions: contents: read jobs: automerge_dependabot: name: "Automerge PRs" runs-on: ubuntu-latest permissions: pull-requests: write contents: write steps: - name: Harden Runner uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 with: egress-policy: audit - uses: fastify/github-action-merge-dependabot@c3bde0759d4f24db16f7b250b2122bc2df57e817 # v3.11.0 with: github-token: ${{ github.token }} use-github-auto-merge: true # Major Updates need to be merged manually target: minor workflows/pr.yml 0000664 00000002027 00000000000 0007711 0 ustar 00 on: pull_request: branches: - "*" workflow_dispatch: {} name: "Pull Request" permissions: contents: read jobs: test: name: "Test" permissions: contents: read security-events: write uses: ./.github/workflows/part_test.yml docs: name: "Docs" uses: ./.github/workflows/part_docs.yml dependabot: name: "Dependabot" if: ${{ github.actor == 'dependabot[bot]'}} permissions: pull-requests: write contents: write uses: ./.github/workflows/part_dependabot.yml dependency-review: name: Dependency Review runs-on: ubuntu-latest steps: - name: Harden Runner uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 with: egress-policy: audit - name: 'Checkout Repository' uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: 'Dependency Review' uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0 workflows/part_test.yml 0000664 00000014432 00000000000 0011300 0 ustar 00 on: workflow_call: name: "Test" permissions: contents: read jobs: phpunit: name: PHPUnit (PHP ${{ matrix.php }} on ${{ matrix.os }}) runs-on: ${{ matrix.os }} continue-on-error: ${{ matrix.experimental }} strategy: fail-fast: false matrix: php: ["8.2", "8.3", "8.4"] os: [ubuntu-latest] experimental: [false] include: - php: nightly os: ubuntu-latest experimental: true - php: "8.4" os: windows-latest experimental: false - php: "8.4" os: macos-latest experimental: false steps: - name: Harden Runner uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 with: egress-policy: audit - name: Checkout Code uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: SetUp PHP id: setup-php uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # v2 with: php-version: "${{ matrix.php }}" tools: phpunit coverage: xdebug extensions: xdebug,zip - name: Get composer cache directory id: composer-cache-common if: "${{ runner.os != 'Windows' }}" run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT - name: Get composer cache directory id: composer-cache-windows if: "${{ runner.os == 'Windows' }}" run: echo "dir=$(composer config cache-files-dir)" >> $env:GITHUB_OUTPUT - name: Cache Deps uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 id: cache with: path: ${{ steps.composer-cache-common.outputs.dir }}${{ steps.composer-cache-windows.outputs.dir }} key: deps-${{ runner.os }}-${{ steps.setup-php.outputs.php-version }}-composer-${{ hashFiles('**/composer.lock') }} restore-keys: | deps-${{ runner.os }}-${{ steps.setup-php.outputs.php-version }}-composer- deps-${{ runner.os }}-${{ steps.setup-php.outputs.php-version }}- deps-${{ steps.setup-php.outputs.php-version }}- deps- - name: Install Deps if: matrix.php != 'nightly' run: composer install --prefer-dist - name: Install Deps (ignore PHP requirement) if: matrix.php == 'nightly' run: composer install --prefer-dist --ignore-platform-req=php+ - name: Run PHPUnit run: composer run test:unit:cov - name: Upload coverage results to Coveralls env: COVERALLS_REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }} COVERALLS_PARALLEL: true COVERALLS_FLAG_NAME: ${{ runner.os }}-${{ steps.setup-php.outputs.php-version }} run: composer run coverage:report continue-on-error: ${{ matrix.experimental }} mark_coverage_done: needs: ["phpunit"] runs-on: ubuntu-latest steps: - name: Harden Runner uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 with: egress-policy: audit - name: Coveralls Finished uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b # v2.3.6 with: github-token: ${{ secrets.github_token }} parallel-finished: true psalm: name: Run Psalm runs-on: "ubuntu-latest" permissions: security-events: write steps: - name: Harden Runner uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 with: egress-policy: audit - name: Checkout Code uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: SetUp PHP id: setup-php uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # v2 with: php-version: "8.3" - name: Get composer cache directory id: composer-cache run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT - name: Cache Deps uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 id: cache with: path: ${{ steps.composer-cache.outputs.dir }} key: deps-${{ runner.os }}-${{ steps.setup-php.outputs.php-version }}-composer-${{ hashFiles('**/composer.lock') }} restore-keys: | deps-${{ runner.os }}-${{ steps.setup-php.outputs.php-version }}-composer- deps-${{ runner.os }}-${{ steps.setup-php.outputs.php-version }}- deps-${{ steps.setup-php.outputs.php-version }}- deps- - name: Install Deps run: composer install --prefer-dist - name: Run Psalm run: composer run test:lint -- --report=results.sarif - name: "Upload SARIF" uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3 with: sarif_file: results.sarif php-cs: name: Run PHP-CS runs-on: "ubuntu-latest" steps: - name: Harden Runner uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 with: egress-policy: audit - name: Checkout Code uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: SetUp PHP id: setup-php uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # v2 with: php-version: "8.3" - name: Get composer cache directory id: composer-cache run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT - name: Cache Deps uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 id: cache with: path: ${{ steps.composer-cache.outputs.dir }} key: deps-${{ runner.os }}-${{ steps.setup-php.outputs.php-version }}-composer-${{ hashFiles('**/composer.lock') }} restore-keys: | deps-${{ runner.os }}-${{ steps.setup-php.outputs.php-version }}-composer- deps-${{ runner.os }}-${{ steps.setup-php.outputs.php-version }}- deps-${{ steps.setup-php.outputs.php-version }}- deps- - name: Install Deps run: composer install --prefer-dist - name: Run PHP-CS run: composer run test:formatted workflows/tag-stable.yml 0000664 00000002011 00000000000 0011304 0 ustar 00 on: push: tags: - "[0-9]+.[0-9]+.[0-9]+" name: "Stable Tag" permissions: contents: read jobs: docs: name: "Docs" uses: ./.github/workflows/part_docs.yml release: name: "Release" needs: ["docs"] permissions: id-token: write contents: write attestations: write uses: ./.github/workflows/part_release.yml with: releaseName: "${{ github.ref_name }}" stable: true deploy_pages: name: "Deploy to GitHub Pages" needs: ["release", "docs"] runs-on: ubuntu-latest permissions: pages: write id-token: write environment: name: github-pages url: ${{ steps.deployment.outputs.page_url }} steps: - name: Harden Runner uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 with: egress-policy: audit - name: Deploy to GitHub Pages id: deployment uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5 workflows/part_docs.yml 0000664 00000003003 00000000000 0011241 0 ustar 00 on: workflow_call: {} name: "Documentation" permissions: contents: read jobs: generate: name: "Generate" runs-on: ubuntu-latest steps: - name: Harden Runner uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 with: egress-policy: audit - name: Checkout Code uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: SetUp PHP id: setup-php uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # v2 with: php-version: "8.3" tools: phive - name: Cache Tools uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 id: cache with: path: ~/.phive key: tools-${{ runner.os }}-${{ steps.setup-php.outputs.php-version }}-${{ hashFiles('**/phars.xml') }} restore-keys: | tools-${{ runner.os }}-${{ steps.setup-php.outputs.php-version }}- tools-${{ steps.setup-php.outputs.php-version }}- tools- - name: Install Tools run: composer run install:tools - name: Generate Docs run: composer run docs:generate - uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 with: name: docs path: docs - name: Package for GitHub Pages uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3.0.1 with: path: docs workflows/scorecard.yml 0000664 00000006333 00000000000 0011241 0 ustar 00 # This workflow uses actions that are not certified by GitHub. They are provided # by a third-party and are governed by separate terms of service, privacy # policy, and support documentation. name: Scorecard supply-chain security on: # For Branch-Protection check. Only the default branch is supported. See # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection branch_protection_rule: # To guarantee Maintained check is occasionally updated. See # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained schedule: - cron: '28 11 * * 3' push: branches: [ "main" ] # Declare default permissions as read only. permissions: read-all jobs: analysis: name: Scorecard analysis runs-on: ubuntu-latest permissions: # Needed to upload the results to code-scanning dashboard. security-events: write # Needed to publish results and get a badge (see publish_results below). id-token: write # Uncomment the permissions below if installing in a private repository. # contents: read # actions: read steps: - name: Harden Runner uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 with: egress-policy: audit - name: "Checkout code" uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: persist-credentials: false - name: "Run analysis" uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0 with: results_file: results.sarif results_format: sarif # (Optional) "write" PAT token. Uncomment the `repo_token` line below if: # - you want to enable the Branch-Protection check on a *public* repository, or # - you are installing Scorecard on a *private* repository # To create the PAT, follow the steps in https://github.com/ossf/scorecard-action?tab=readme-ov-file#authentication-with-fine-grained-pat-optional. # repo_token: ${{ secrets.SCORECARD_TOKEN }} # Public repositories: # - Publish results to OpenSSF REST API for easy access by consumers # - Allows the repository to include the Scorecard badge. # - See https://github.com/ossf/scorecard-action#publishing-results. # For private repositories: # - `publish_results` will always be set to `false`, regardless # of the value entered here. publish_results: true # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 with: name: SARIF file path: results.sarif retention-days: 5 # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5 with: sarif_file: results.sarif workflows/part_release.yml 0000664 00000004557 00000000000 0011750 0 ustar 00 on: workflow_call: inputs: releaseName: required: true type: string stable: required: false type: boolean default: false name: "Release" permissions: contents: read jobs: create: name: Create Release runs-on: ubuntu-latest permissions: contents: write steps: - name: Harden Runner uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 with: egress-policy: audit - name: Create prerelease if: ${{ !inputs.stable }} env: GITHUB_TOKEN: ${{ github.token }} run: | gh release create \ --repo ${{ github.repository }} \ --title ${{ inputs.releaseName }} \ --prerelease \ --generate-notes \ ${{ inputs.releaseName }} - name: Create release if: ${{ inputs.stable }} env: GITHUB_TOKEN: ${{ github.token }} run: | gh release create \ --repo ${{ github.repository }} \ --title ${{ inputs.releaseName }} \ --generate-notes \ ${{ inputs.releaseName }} upload_release: name: "Upload" needs: ["create"] runs-on: ubuntu-latest permissions: id-token: write contents: write attestations: write steps: - name: Harden Runner uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 with: egress-policy: audit - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: name: docs path: docs - run: | tar -czvf docs.tar.gz docs - name: "Attest Documentation" id: attestation uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0 with: subject-path: "docs.tar.gz" - name: Copy Attestation run: cp "$ATTESTATION" docs.tar.gz.sigstore env: ATTESTATION: "${{ steps.attestation.outputs.bundle-path }}" - name: Upload env: GITHUB_TOKEN: ${{ github.token }} run: | gh release upload --clobber "${{ github.ref_name }}" \ docs.tar.gz docs.tar.gz.sigstore PULL_REQUEST_TEMPLATE/NEW_FEATURE.md 0000664 00000000321 00000000000 0012110 0 ustar 00 <!--- name: 🎉 New Feature about: You have implemented some neat idea that you want to make part of ZipStream-PHP? labels: type/enhancement ---> <!-- - Please target the `main` branch of ZipStream-PHP. --> PULL_REQUEST_TEMPLATE/FAILING_TEST.md 0000664 00000000607 00000000000 0012223 0 ustar 00 <!--- name: 🐞 Failing Test about: You found a bug and have a failing test? labels: bug, tests ---> <!-- - Please do not send a pull request for an issue in a version of ZipStream-PHP that is no longer supported. See: https://github.com/maennchen/ZipStream-PHP#version-support - Please target the oldest branch of ZipStream-PHP that is still supported and where the test fails. --> PULL_REQUEST_TEMPLATE/IMPROVEMENT.md 0000664 00000000262 00000000000 0012115 0 ustar 00 <!--- name: ⚙ Improvement about: You have some improvement to make ZipStream-PHP better? labels: enhancement ---> <!-- - Please target the `main` branch of ZipStream-PHP. --> PULL_REQUEST_TEMPLATE/FIX.md 0000664 00000000554 00000000000 0010742 0 ustar 00 <!--- name: 🐞 Bug Fix about: You have a fix for a bug? labels: bug ---> <!-- - Please do not send a pull request for an issue in a version of ZipStream-PHP that is no longer supported. See: https://github.com/maennchen/ZipStream-PHP#version-support - Please target the oldest branch of ZipStream-PHP that is still supported and affected by this bug. --> SECURITY.md 0000664 00000002470 00000000000 0006303 0 ustar 00 # Security Policy [](https://github.com/ossf/oss-vulnerability-guide/blob/main/finder-guide.md) [](https://github.com/maennchen/ZipStream-PHP/security/advisories/new) [](mailto:jonatan@maennchen.ch) This repository follows the [OpenSSF Vulnerability Disclosure guide](https://github.com/ossf/oss-vulnerability-guide/tree/main). You can learn more about it in the [Finders Guide](https://github.com/ossf/oss-vulnerability-guide/blob/main/finder-guide.md). Please report vulnerabilities via the [GitHub Security Vulnerability Reporting](https://github.com/maennchen/ZipStream-PHP/security/advisories/new) or via email to [`jonatan@maennchen.ch`](mailto:jonatan@maennchen.ch) if this does not work for you. Our vulnerability management team will respond within 3 working days of your report. If the issue is confirmed as a vulnerability, we will open a Security Advisory. This project follows a 90 day disclosure timeline. If you have questions about reporting security issues, email the vulnerability management team: [`jonatan@maennchen.ch`](mailto:jonatan@maennchen.ch) CODE_OF_CONDUCT.md 0000664 00000012555 00000000000 0007316 0 ustar 00 # Contributor Covenant Code of Conduct ## Our Pledge We as members, contributors, and leaders pledge to make participation in our community a harassment-free experience for everyone, regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, caste, color, religion, or sexual identity and orientation. We pledge to act and interact in ways that contribute to an open, welcoming, diverse, inclusive, and healthy community. ## Our Standards Examples of behavior that contributes to a positive environment for our community include: - Demonstrating empathy and kindness toward other people - Being respectful of differing opinions, viewpoints, and experiences - Giving and gracefully accepting constructive feedback - Accepting responsibility and apologizing to those affected by our mistakes, and learning from the experience - Focusing on what is best not just for us as individuals, but for the overall community Examples of unacceptable behavior include: - The use of sexualized language or imagery, and sexual attention or advances of any kind - Trolling, insulting or derogatory comments, and personal or political attacks - Public or private harassment - Publishing others' private information, such as a physical or email address, without their explicit permission - Other conduct which could reasonably be considered inappropriate in a professional setting ## Enforcement Responsibilities Community leaders are responsible for clarifying and enforcing our standards of acceptable behavior and will take appropriate and fair corrective action in response to any behavior that they deem inappropriate, threatening, offensive, or harmful. Community leaders have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, and will communicate reasons for moderation decisions when appropriate. ## Scope This Code of Conduct applies within all community spaces, and also applies when an individual is officially representing the community in public spaces. Examples of representing our community include using an official e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. ## Enforcement Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the community leaders responsible for enforcement at jonatan@maennchen.ch. All complaints will be reviewed and investigated promptly and fairly. All community leaders are obligated to respect the privacy and security of the reporter of any incident. ## Enforcement Guidelines Community leaders will follow these Community Impact Guidelines in determining the consequences for any action they deem in violation of this Code of Conduct: ### 1. Correction **Community Impact**: Use of inappropriate language or other behavior deemed unprofessional or unwelcome in the community. **Consequence**: A private, written warning from community leaders, providing clarity around the nature of the violation and an explanation of why the behavior was inappropriate. A public apology may be requested. ### 2. Warning **Community Impact**: A violation through a single incident or series of actions. **Consequence**: A warning with consequences for continued behavior. No interaction with the people involved, including unsolicited interaction with those enforcing the Code of Conduct, for a specified period of time. This includes avoiding interactions in community spaces as well as external channels like social media. Violating these terms may lead to a temporary or permanent ban. ### 3. Temporary Ban **Community Impact**: A serious violation of community standards, including sustained inappropriate behavior. **Consequence**: A temporary ban from any sort of interaction or public communication with the community for a specified period of time. No public or private interaction with the people involved, including unsolicited interaction with those enforcing the Code of Conduct, is allowed during this period. Violating these terms may lead to a permanent ban. ### 4. Permanent Ban **Community Impact**: Demonstrating a pattern of violation of community standards, including sustained inappropriate behavior, harassment of an individual, or aggression toward or disparagement of classes of individuals. **Consequence**: A permanent ban from any sort of public interaction within the community. ## Attribution This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 2.1, available at [https://www.contributor-covenant.org/version/2/1/code_of_conduct.html][v2.1]. Community Impact Guidelines were inspired by [Mozilla's code of conduct enforcement ladder][mozilla coc]. For answers to common questions about this code of conduct, see the FAQ at [https://www.contributor-covenant.org/faq][faq]. Translations are available at [https://www.contributor-covenant.org/translations][translations]. [homepage]: https://www.contributor-covenant.org [v2.1]: https://www.contributor-covenant.org/version/2/1/code_of_conduct.html [mozilla coc]: https://github.com/mozilla/diversity [faq]: https://www.contributor-covenant.org/faq [translations]: https://www.contributor-covenant.org/translations scorecard.yml 0000664 00000000475 00000000000 0007205 0 ustar 00 annotations: - checks: - fuzzing reasons: - reason: not-applicable # PHP is memory safe - checks: - packaging reasons: - reason: not-supported # Using Composer - checks: - signed-releases reasons: - reason: not-applicable # Releases are distributed via Composer CONTRIBUTING.md 0000775 00000002463 00000000000 0006750 0 ustar 00 # Contributing Contributions are **welcome** and will be fully **credited**. We accept contributions via Pull Requests on [Github](https://github.com/spatie/db-dumper). ## Pull Requests - **[PSR-2 Coding Standard](https://github.com/php-fig/fig-standards/blob/master/accepted/PSR-2-coding-style-guide.md)** - The easiest way to apply the conventions is to install [PHP Code Sniffer](http://pear.php.net/package/PHP_CodeSniffer). - **Add tests!** - Your patch won't be accepted if it doesn't have tests. - **Document any change in behaviour** - Make sure the `README.md` and any other relevant documentation are kept up-to-date. - **Consider our release cycle** - We try to follow [SemVer v2.0.0](http://semver.org/). Randomly breaking public APIs is not an option. - **Create feature branches** - Don't ask us to pull from your master branch. - **One pull request per feature** - If you want to do more than one thing, send multiple pull requests. - **Send coherent history** - Make sure each individual commit in your pull request is meaningful. If you had to make multiple intermediate commits while developing, please [squash them](http://www.git-scm.com/book/en/v2/Git-Tools-Rewriting-History#Changing-Multiple-Commit-Messages) before submitting. ## Running Tests ``` bash $ composer test ``` **Happy coding**! ISSUE_TEMPLATE/FEATURE.yml 0000664 00000000504 00000000000 0010507 0 ustar 00 name: 🎉 Feature Request description: You have a neat idea that should be implemented? labels: ["enhancement"] body: - type: textarea id: description attributes: label: Description description: Provide a summary of the feature you would like to see implemented. validations: required: true ISSUE_TEMPLATE/BUG.yml 0000664 00000003760 00000000000 0010040 0 ustar 00 name: 🐞 Bug Report description: Something is broken? labels: ["bug"] body: - type: markdown attributes: value: | - Create a discussion instead if you are looking for support: https://github.com/maennchen/ZipStream-PHP/discussions - type: input id: version attributes: label: ZipStream-PHP version placeholder: x.y.z validations: required: true - type: input id: php-version attributes: label: PHP version placeholder: x.y.z validations: required: true - type: checkboxes id: constraints attributes: label: Constraints for Bug Report options: - label: | I'm using a version of ZipStream that is currently supported: https://github.com/maennchen/ZipStream-PHP#version-support required: true - label: | I'm using a version of PHP that has active support: https://www.php.net/supported-versions.php required: true - label: | I'm using a version of PHP that is compatible with your used ZipStream version. required: true - label: | I'm using the latest release of the used ZipStream major version. required: true - type: textarea id: summary attributes: label: Summary description: Provide a summary describing the problem you are experiencing. validations: required: true - type: textarea id: current-behaviour attributes: label: Current behavior description: What is the current (buggy) behavior? validations: required: true - type: textarea id: reproduction attributes: label: How to reproduce description: Provide steps to reproduce the bug. validations: required: true - type: textarea id: expected-behaviour attributes: label: Expected behavior description: What was the expected (correct) behavior? validations: required: true workflows/stale-issues.yml 0000644 00000001234 00000000000 0011706 0 ustar 00 name: "Close stale issues" on: schedule: - cron: "0 0 * * *" jobs: stale: runs-on: ubuntu-latest steps: - uses: actions/stale@v9.1.0 with: repo-token: ${{ secrets.GITHUB_TOKEN }} stale-issue-message: "This issue is stale because it has been open 21 days with no activity. Remove stale label or comment or this will be closed in 7 days" stale-issue-label: "stale" exempt-issue-labels: "bug,enhancement,help wanted,next release,revisit for next major version" days-before-stale: 21 days-before-close: 7 workflows/update-changelog.yml 0000644 00000001204 00000000000 0012471 0 ustar 00 name: "Update Changelog" on: release: types: [released] jobs: update: runs-on: ubuntu-latest steps: - name: Checkout code uses: actions/checkout@v2 with: ref: main - name: Update Changelog uses: stefanzweifel/changelog-updater-action@v1 with: latest-version: ${{ github.event.release.name }} release-notes: ${{ github.event.release.body }} - name: Commit updated CHANGELOG uses: stefanzweifel/git-auto-commit-action@v4 with: branch: main commit_message: Update CHANGELOG file_pattern: CHANGELOG.md workflows/dependabot-auto-merge.yml 0000755 00000002775 00000000000 0013453 0 ustar 00 name: dependabot-auto-merge on: pull_request_target permissions: pull-requests: write contents: write jobs: dependabot: runs-on: ubuntu-latest if: ${{ github.actor == 'dependabot[bot]' }} steps: - name: Dependabot metadata id: metadata uses: dependabot/fetch-metadata@v1.5.1 with: github-token: "${{ secrets.GITHUB_TOKEN }}" compat-lookup: true - name: Auto-merge Dependabot PRs for semver-minor updates if: ${{steps.metadata.outputs.update-type == 'version-update:semver-minor'}} run: gh pr merge --auto --merge "$PR_URL" env: PR_URL: ${{github.event.pull_request.html_url}} GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} - name: Auto-merge Dependabot PRs for semver-patch updates if: ${{steps.metadata.outputs.update-type == 'version-update:semver-patch'}} run: gh pr merge --auto --merge "$PR_URL" env: PR_URL: ${{github.event.pull_request.html_url}} GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} - name: Auto-merge Dependabot PRs for Action major versions when compatibility is higher than 90% if: ${{steps.metadata.outputs.package-ecosystem == 'github_actions' && steps.metadata.outputs.update-type == 'version-update:semver-major' && steps.metadata.outputs.compatibility-score >= 90}} run: gh pr merge --auto --merge "$PR_URL" env: PR_URL: ${{github.event.pull_request.html_url}} GH_TOKEN: ${{secrets.GITHUB_TOKEN}} workflows/composer-normalize.yml 0000644 00000001210 00000000000 0013104 0 ustar 00 name: normalize composer.json on: push: paths: - "composer.json" jobs: normalize: runs-on: ubuntu-latest steps: - name: Git checkout uses: actions/checkout@v3 - name: normalize composer.json run: | composer global config --no-plugins allow-plugins.ergebnis/composer-normalize true composer global require ergebnis/composer-normalize composer normalize - uses: stefanzweifel/git-auto-commit-action@v5.2.0 with: commit_message: normalize composer.json ISSUE_TEMPLATE/bug-report.md 0000644 00000001353 00000000000 0011302 0 ustar 00 --- name: "🐛 Bug Report" about: Create a bug report to help us improve title: '' labels: bug assignees: '' --- **Describe the bug** A clear and concise description of what the bug is. **To Reproduce** Things needed to reproduce the error. eg: Configuration, Migration, Model, Controller/Command **Expected behavior** A clear and concise description of what you expected to happen. **Screenshots** If applicable, add screenshots to help explain your problem. **Versions (please complete the following information)** - PHP: - Database: - Laravel: - Package: **Additional context** Add any other context about the problem here. **Exception** The thrown exception message. **Stack Trace** The full stack trace of the thrown exception. workflows/php-workflow.yml 0000644 00000005726 00000000000 0011736 0 ustar 00 name: Authorize.net PHP CI on: push: pull_request: workflow_dispatch: env: sdk_php: 'sdk-php' sample_code_php: 'sample-code-php' jobs: workflow-job: defaults: run: shell: bash strategy: fail-fast: false matrix: operating-system: [ubuntu-latest, macos-latest, windows-latest] php-version: ['5.6', '7.0', '7.1', '7.2', '7.3', '7.4', '8.0', '8.1', '8.2', '8.3', '8.4'] runs-on: ${{matrix.operating-system}} env: PHP_VERSION: ${{matrix.php-version}} steps: - name: Creating separate folders for SDK and Sample Codes run: | rm -rf $sdk_php rm -rf $sample_code_php mkdir $sdk_php $sample_code_php - name: Checkout authorizenet/sdk-php uses: actions/checkout@v4 with: path: ${{env.sdk_php}} - name: Checkout authorizenet/sample-code-php uses: actions/checkout@v4 with: repository: 'authorizenet/sample-code-php' ref: 'future' # Remove this line before pushing to master branch path: ${{env.sample_code_php}} - name: Setup PHP id: php-setup uses: shivammathur/setup-php@v2 with: php-version: ${{matrix.php-version}} extensions: mbstring, curl, openssl, zip - name: Composer Validation run: | cd $sdk_php composer validate if [[ ${{env.PHP_VERSION}} == "5.6" || ${{env.PHP_VERSION}} == "7.0" ]]; then echo "PHPUNIT_VERSION=$(echo 5.6.* | cut -c 1-6)" >> "$GITHUB_ENV" elif [[ ${{env.PHP_VERSION}} == "7.1" ]]; then echo "PHPUNIT_VERSION=$(echo 5.7.* | cut -c 1-6)" >> "$GITHUB_ENV" elif [[ ${{env.PHP_VERSION}} == "7.2" ]]; then echo "PHPUNIT_VERSION=$(echo 8.5.* | cut -c 1-6)" >> "$GITHUB_ENV" else echo "PHPUNIT_VERSION=$(echo 9.5.* | cut -c 1-6)" >> "$GITHUB_ENV" fi # Cannot use ${{env.PHPUNIT_VERSION}} in the same step where it is defined # Refer: https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#example-of-writing-an-environment-variable-to-github_env - name: Composer Update run: | cd $sdk_php composer require "phpunit/phpunit:${{env.PHPUNIT_VERSION}}" --no-update --dev composer update --prefer-dist - name: Unit Testing run: | cd $sdk_php cp -R lib ../$sample_code_php/ cp -R vendor ../$sample_code_php/ cd ../$sample_code_php vendor/phpunit/phpunit/phpunit TestRunner.php . workflows/github_pull_request.yml 0000777 00000001576 00000000000 0013373 0 ustar 00 name: PHP Composer on: pull_request: branches: [ "master" ] permissions: contents: read jobs: build: runs-on: ubuntu-latest strategy: matrix: php-versions: ['5.4', '5.5', '5.6', '7.0', '7.1', '7.2'] include: - php-versions: '5.3' steps: - uses: actions/checkout@v3 - name: Setup PHP uses: shivammathur/setup-php@v2 with: php-version: ${{ matrix.php-versions }} - name: Cache Composer packages id: composer-cache uses: actions/cache@v3 with: path: vendor key: ${{ runner.os }}-php-${{ hashFiles('**/composer.lock') }} restore-keys: | ${{ runner.os }}-php- - name: Update composer run: composer self-update - name: Install dependencies run: composer install --no-interaction - name: Run test run: composer run test workflows/github_master.yml 0000777 00000003654 00000000000 0012141 0 ustar 00 name: Update Release Workflow #on: # pull_request: # types: # - opened # - synchronize # - reopened on: push: branches: [ "master" ] jobs: build: runs-on: ubuntu-latest steps: - name: Checkout code uses: actions/checkout@v3 - name: Update Release Number run: | set -e # Retrieve the current release number current_release=$(cat VERSION) # Increment the release number new_release=$(echo $current_release | awk -F. -v OFS=. '{$NF++;print}') # Set the new release number as an environment variable echo "NEW_RELEASE=${new_release}" >> $GITHUB_ENV # Change version number on files sed -i -e's/'$current_release'/'$new_release'/g' src/Iyzipay/IyzipayResource.php VERSION - name: Github Tasks run: | set -e git config user.name "iyzico-ci" git config user.email iyzico-ci@iyzico.com git add . git commit -m "Automatic commit by iyzico-ci v${{env.NEW_RELEASE}}" git push origin master git tag -a v${{env.NEW_RELEASE}} -m "Automatic tag by iyzico-ci v${{env.NEW_RELEASE}}" git push origin v${{env.NEW_RELEASE}} - name: Github Release run: | # Use the new release version in release creation step echo "Creating release ${{env.NEW_RELEASE}}..." result=$( curl -# -XPOST -H "Authorization: token ${{secrets.TOKEN_GITHUB}}" -H "Content-Type: application/json" -H "Accept:application/json" --data-binary '{"tag_name": "v${{env.NEW_RELEASE}}","target_commitish": "master","name": "iyzipay-php ${{env.NEW_RELEASE}}","body": "version ${{env.NEW_RELEASE}}","draft": false,"prerelease": false}' https://api.github.com/repos/iyzico/iyzipay-php/releases ) echo $result echo "GitHub release ${{env.NEW_RELEASE}} created!" stale.yml 0000775 00000002211 00000000000 0006341 0 ustar 00 # Number of days of inactivity before an issue becomes stale daysUntilStale: 60 # Number of days of inactivity before a stale issue is closed daysUntilClose: 7 # Issues with these labels will never be considered stale exemptLabels: - bug - enhancement # Label to use when marking an issue as stale staleLabel: stale # Comment to post when marking an issue as stale. Set to `false` to disable markComment: > This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Any issues with PDF rendering itself that are not directly related to this package, should be reported on https://github.com/dompdf/dompdf instead. When having doubts, please try to reproduce the issue with just dompdf. If you believe this is an actual issue with the latest version of laravel-dompdf, please reply to this issue so we can investigate further. Thank you for your contribution! Apologies for any delayed response on our side. # Comment to post when closing a stale issue. Set to `false` to disable closeComment: false # Limit to only `issues` or `pulls` only: issues workflows/tests.yaml 0000755 00000002103 00000000000 0010567 0 ustar 00 name: Tests on: push: pull_request: schedule: - cron: '0 0 * * *' permissions: contents: read jobs: phpunit: runs-on: ubuntu-latest strategy: fail-fast: true matrix: php: ['8.0', 8.1, 8.2] name: PHP ${{ matrix.php }} env: LIVE_MAILBOX: true LIVE_MAILBOX_DEBUG: true LIVE_MAILBOX_HOST: mail.example.local LIVE_MAILBOX_PORT: 993 LIVE_MAILBOX_USERNAME: root@example.local LIVE_MAILBOX_ENCRYPTION: ssl LIVE_MAILBOX_PASSWORD: foobar LIVE_MAILBOX_QUOTA_SUPPORT: true steps: - name: Checkout code uses: actions/checkout@v3 - name: Setup PHP uses: shivammathur/setup-php@v2 with: php-version: ${{ matrix.php }} extensions: openssl, json, mbstring, iconv, fileinfo, libxml, zip coverage: none - name: Install Composer dependencies run: composer install --prefer-dist --no-interaction --no-progress - run: "sh .github/docker/dovecot_setup.sh" - name: Execute tests run: vendor/bin/phpunit ISSUE_TEMPLATE/bug_report.md 0000775 00000001705 00000000000 0011372 0 ustar 00 --- name: Bug report about: Report an issue with the Dompdf wrapper title: '' labels: '' assignees: '' --- **This is just a Dompdf wrapper!** I understand that this package is just a Laravel wrapper for https://github.com/dompdf/dompdf Any issues with PDF rendering, CSS that is not applied correctly, aligning/fonts/characters etc that are not directly related to this package, should be reported there. When having doubts, please try to reproduce the issue with just dompdf. If it's also present there, do not open an issue here please. **Describe the bug** A clear and concise description of what the bug is. **To Reproduce** Steps to reproduce the behavior: - Laravel and package version - Input HTML/CSS - Options / code **Expected behavior** A clear and concise description of what you expected to happen. **Screenshots** If applicable, add screenshots to help explain your problem. **Additional context** Add any other context about the problem here. ISSUE_TEMPLATE/feature_request.md 0000644 00000001060 00000000000 0012412 0 ustar 00 --- name: Feature request about: Suggest an idea for this project --- **Is your feature request related to a problem? Please describe.** A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] **Describe the solution you'd like** A clear and concise description of what you want to happen. **Describe alternatives you've considered** A clear and concise description of any alternative solutions or features you've considered. **Additional context** Add any other context or screenshots about the feature request here. ISSUE_TEMPLATE/general-help-request.md 0000755 00000000714 00000000000 0013250 0 ustar 00 --- name: General help request about: Feel free to ask about any project related stuff --- Please be aware that these issues will be closed if inactive for more then 14 days. Also make sure to use https://github.com/Webklex/php-imap/issues/new?template=bug_report.md if you want to report a bug or https://github.com/Webklex/php-imap/issues/new?template=feature_request.md if you want to suggest a feature. Still here? Well clean this out and go ahead :) docker/Dockerfile 0000755 00000001116 00000000000 0007750 0 ustar 00 FROM ubuntu:latest LABEL maintainer="Webklex <github@webklex.com>" RUN apt-get update RUN apt-get upgrade -y RUN apt-get install -y sudo dovecot-imapd ENV LIVE_MAILBOX=true ENV LIVE_MAILBOX_HOST=mail.example.local ENV LIVE_MAILBOX_PORT=993 ENV LIVE_MAILBOX_ENCRYPTION=ssl ENV LIVE_MAILBOX_VALIDATE_CERT=true ENV LIVE_MAILBOX_USERNAME=root@example.local ENV LIVE_MAILBOX_PASSWORD=foobar ENV LIVE_MAILBOX_QUOTA_SUPPORT=true EXPOSE 993 ADD dovecot_setup.sh /root/dovecot_setup.sh RUN chmod +x /root/dovecot_setup.sh CMD ["/bin/bash", "-c", "/root/dovecot_setup.sh && tail -f /dev/null"] docker/dovecot_setup.sh 0000755 00000003372 00000000000 0011203 0 ustar 00 #!/bin/sh set -ex sudo apt-get -q update sudo apt-get -q -y install dovecot-imapd { echo "127.0.0.1 $LIVE_MAILBOX_HOST" } | sudo tee -a /etc/hosts SSL_CERT="/etc/ssl/certs/dovecot.crt" SSL_KEY="/etc/ssl/private/dovecot.key" sudo openssl req -new -x509 -days 3 -nodes \ -out "$SSL_CERT" \ -keyout "$SSL_KEY" \ -subj "/C=EU/ST=Europe/L=Home/O=Webklex/OU=Webklex DEV/CN=""$LIVE_MAILBOX_HOST" sudo chown root:dovecot "$SSL_CERT" "$SSL_KEY" sudo chmod 0440 "$SSL_CERT" sudo chmod 0400 "$SSL_KEY" DOVECOT_CONF="/etc/dovecot/local.conf" MAIL_CONF="/etc/dovecot/conf.d/10-mail.conf" IMAP_CONF="/etc/dovecot/conf.d/20-imap.conf" QUOTA_CONF="/etc/dovecot/conf.d/90-quota.conf" sudo touch "$DOVECOT_CONF" "$MAIL_CONF" "$IMAP_CONF" "$QUOTA_CONF" sudo chown root:dovecot "$DOVECOT_CONF" "$MAIL_CONF" "$IMAP_CONF" "$QUOTA_CONF" sudo chmod 0640 "$DOVECOT_CONF" "$MAIL_CONF" "$IMAP_CONF" "$QUOTA_CONF" { echo "ssl = required" echo "disable_plaintext_auth = yes" echo "ssl_cert = <""$SSL_CERT" echo "ssl_key = <""$SSL_KEY" echo "ssl_protocols = !SSLv2 !SSLv3" echo "ssl_cipher_list = AES128+EECDH:AES128+EDH" } | sudo tee -a "$DOVECOT_CONF" { echo "mail_plugins = \$mail_plugins quota" } | sudo tee -a "$MAIL_CONF" { echo "protocol imap {" echo " mail_plugins = \$mail_plugins imap_quota" echo "}" } | sudo tee -a "$IMAP_CONF" { echo "plugin {" echo " quota = maildir:User quota" echo " quota_rule = *:storage=1G" echo "}" } | sudo tee -a "$QUOTA_CONF" sudo useradd --create-home --shell /bin/false "$LIVE_MAILBOX_USERNAME" echo "$LIVE_MAILBOX_USERNAME"":""$LIVE_MAILBOX_PASSWORD" | sudo chpasswd sudo service dovecot restart sudo doveadm auth test -x service=imap "$LIVE_MAILBOX_USERNAME" "$LIVE_MAILBOX_PASSWORD" ISSUE_TEMPLATE/2_Feature_request.md 0000775 00000000164 00000000000 0012604 0 ustar 00 --- name: "Feature request" about: 'For ideas or feature requests: please make a pull request or open an issue' --- ISSUE_TEMPLATE/1_Bug_report.md 0000775 00000000462 00000000000 0011551 0 ustar 00 --- name: "Bug report" about: 'Report a general library issue. Please ensure your version is still supported: https://laravel.com/docs/releases#support-policy' --- - Sail Version: #.#.# - Laravel Version: #.#.# - PHP Version: #.#.# - Database Driver & Version: ### Description: ### Steps To Reproduce: workflows/ci.yaml 0000755 00000001220 00000000000 0010017 0 ustar 00 name: ci on: pull_request: push: branches: - master jobs: phpunit: runs-on: "ubuntu-20.04" strategy: fail-fast: false matrix: php-version: - "7.4" - "8.0" - "8.1" steps: - uses: actions/checkout@v2 - name: "Install PHP ${{ matrix.php-version }}" uses: "shivammathur/setup-php@v2" with: php-version: "${{ matrix.php-version }}" coverage: "pcov" - name: "Install dependencies with Composer" uses: "ramsey/composer-install@v1" - name: "Run PHPUnit" run: "vendor/bin/simple-phpunit --coverage-text" workflows/static-analysis.yml 0000755 00000001214 00000000000 0012376 0 ustar 00 name: Static Analysis on: [push, pull_request] jobs: phpstan: name: PHPStan (PHP ${{ matrix.php-version }}) runs-on: ubuntu-latest strategy: matrix: php-version: - '8.2' steps: - name: Checkout code uses: actions/checkout@v3 - name: Install PHP uses: shivammathur/setup-php@v2 with: coverage: none php-version: ${{ matrix.php-version }} tools: cs2pr - name: Install Composer dependencies uses: ramsey/composer-install@v2 - name: Run PHPStan run: 'vendor/bin/phpstan analyse --error-format=checkstyle | cs2pr' SUPPORT.md 0000775 00000000226 00000000000 0006210 0 ustar 00 # Support Questions The Laravel support guide can be found in the [Laravel documentation](https://laravel.com/docs/contributions#support-questions). ISSUE_TEMPLATE/laravel-9-updates.md 0000775 00000000464 00000000000 0012462 0 ustar 00 --- name: Laravel 9 Updates about: Inform about Laravel 9 changes title: '' labels: '' assignees: '' --- <!-- NOTE: Laravel has incorporated this package into the core of Laravel as of Laravel 9. Do not use this package in Laravel 9. Details here: https://github.com/fideloper/TrustedProxy/issues/152 --> workflows/code-style.yml 0000755 00000000772 00000000000 0011346 0 ustar 00 name: Check & fix styling on: push: paths: - '**.php' permissions: contents: write jobs: php-code-styling: runs-on: ubuntu-latest steps: - name: Checkout code uses: actions/checkout@v3 with: ref: ${{ github.head_ref }} - name: Fix PHP code style issues uses: aglipanci/laravel-pint-action@2.3.0 - name: Commit changes uses: stefanzweifel/git-auto-commit-action@v4 with: commit_message: Fix styling workflows/deploy.yml 0000664 00000003054 00000000000 0010565 0 ustar 00 name: Deploy on: push: branches: - master pull_request: jobs: deploy: runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v4 ### MkDocs - name: Setup Python uses: actions/setup-python@v5 with: python-version: 3.x - name: Install Python Dependencies run: pip install mkdocs-material autolink-references-mkdocs-plugin - name: Build documentation run: mkdocs build --site-dir public ### PHPUnit - name: Setup PHP uses: shivammathur/setup-php@v2 with: php-version: 8.1 extensions: dom, xml coverage: xdebug - name: Create directory public/coverage run: mkdir ./public/coverage - name: Install PHP Dependencies run: composer install --ansi --prefer-dist --no-interaction --no-progress - name: Build Coverage Report run: XDEBUG_MODE=coverage ./vendor/bin/phpunit -c ./ --coverage-text --coverage-html ./public/coverage ### PHPDoc - name: Create directory public/docs run: mkdir ./public/docs - name: Install PhpDocumentor run: wget https://phpdoc.org/phpDocumentor.phar && chmod +x phpDocumentor.phar - name: Build Documentation run: ./phpDocumentor.phar run -d ./src -t ./public/docs ### Deploy - name: Deploy uses: peaceiris/actions-gh-pages@v4 if: github.ref == 'refs/heads/master' with: github_token: ${{ secrets.GITHUB_TOKEN }} publish_dir: ./public workflows/pint.yml 0000755 00000000662 00000000000 0010246 0 ustar 00 name: Check & fix styling on: [push] jobs: php-cs-fixer: runs-on: ubuntu-latest steps: - name: Checkout code uses: actions/checkout@v3 with: ref: ${{ github.head_ref }} - name: Fix styling issues uses: aglipanci/laravel-pint-action@0.1.0 - name: Commit changes uses: stefanzweifel/git-auto-commit-action@v4 with: commit_message: Fix styling workflows/node.js.yml 0000775 00000001273 00000000000 0010635 0 ustar 00 # This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node # For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions name: Node.js CI on: push: branches: [ master ] pull_request: branches: [ master ] jobs: build: runs-on: ubuntu-latest strategy: matrix: node-version: [12.x, 14.x, 15.x, 16.x] steps: - uses: actions/checkout@v2 - name: Use Node.js ${{ matrix.node-version }} uses: actions/setup-node@v1 with: node-version: ${{ matrix.node-version }} - run: npm i - run: npm test workflows/testLinks.yml 0000755 00000001275 00000000000 0011255 0 ustar 00 name: PhpStorm Stubs Check Links on: workflow_dispatch: schedule: - cron: '0 0 1 * *' jobs: build: runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v4 - name: Composer Install run: docker-compose -f docker-compose.yml run test_runner composer install env: PHP_VERSION: '8.0' - name: Build Docker Container run: docker-compose -f docker-compose.yml build >/dev/null env: PHP_VERSION: '8.0' - name: Run Tests run: docker-compose -f docker-compose.yml run -e CHECK_LINKS=true test_runner vendor/bin/phpunit --testsuite PhpDoc env: PHP_VERSION: '8.0' workflows/testPeclExtensions.yml 0000755 00000002306 00000000000 0013134 0 ustar 00 name: PhpStorm Stubs PECL Test on: workflow_dispatch: schedule: - cron: '0 0 1 * *' jobs: build: runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v4 - name: Build Docker Container run: docker-compose -f docker-compose.yml build >/dev/null env: PHP_VERSION: '8.0' - name: Composer Install run: docker-compose -f docker-compose.yml run test_runner composer install - name: Dump Reflection With Pecl To File run: docker-compose -f docker-compose.yml run pecl_extensions /usr/local/bin/php tests/Tools/dump-reflection-to-file.php ReflectionDataPecl.json - name: Dump Reflection Without Pecl To File run: docker-compose -f docker-compose.yml run php_under_test /usr/local/bin/php tests/Tools/dump-reflection-to-file.php ReflectionData.json - name: Build Reflection Data With Pecl Only run: docker-compose -f docker-compose.yml run php_under_test /usr/local/bin/php tests/Tools/dump-pecl-to-file.php - name: Run Tests run: docker-compose -f docker-compose.yml run -e PHP_VERSION='8.0' test_runner vendor/bin/phpunit tests/ env: PHP_VERSION: '8.0' workflows/run-tests-L8.yml 0000775 00000002465 00000000000 0011526 0 ustar 00 name: "Run Tests - Current" on: [push, pull_request] jobs: test: runs-on: ubuntu-latest strategy: fail-fast: true matrix: php: [8.0, 7.4, 7.3] laravel: [8.*] dependency-version: [prefer-lowest, prefer-stable] include: - laravel: 8.* testbench: 6.* name: P${{ matrix.php }} - L${{ matrix.laravel }} - ${{ matrix.dependency-version }} steps: - name: Checkout code uses: actions/checkout@v2 - name: Cache dependencies uses: actions/cache@v2 with: path: ~/.composer/cache/files key: dependencies-laravel-${{ matrix.laravel }}-php-${{ matrix.php }}-composer-${{ hashFiles('composer.json') }} - name: Setup PHP uses: shivammathur/setup-php@v2 with: php-version: ${{ matrix.php }} extensions: curl, mbstring, zip, pcntl, pdo, sqlite, pdo_sqlite, iconv coverage: none - name: Install dependencies run: | composer require "laravel/framework:${{ matrix.laravel }}" "orchestra/testbench:${{ matrix.testbench }}" "symfony/console:>=4.3.4" --no-interaction --no-update composer update --${{ matrix.dependency-version }} --prefer-dist --no-interaction - name: Execute tests run: vendor/bin/phpunit workflows/run-tests-L7.yml 0000775 00000002653 00000000000 0011524 0 ustar 00 name: "Run Tests - Older" on: [push, pull_request] jobs: test: runs-on: ubuntu-latest strategy: fail-fast: true matrix: php: [7.4, 7.3, 7.2] laravel: [7.*, 6.*, 5.8.*] dependency-version: [prefer-lowest, prefer-stable] include: - laravel: 7.* testbench: 5.* - laravel: 6.* testbench: 4.* - laravel: 5.8.* testbench: 3.8.* name: P${{ matrix.php }} - L${{ matrix.laravel }} - ${{ matrix.dependency-version }} steps: - name: Checkout code uses: actions/checkout@v2 - name: Cache dependencies uses: actions/cache@v2 with: path: ~/.composer/cache/files key: dependencies-laravel-${{ matrix.laravel }}-php-${{ matrix.php }}-composer-${{ hashFiles('composer.json') }} - name: Setup PHP uses: shivammathur/setup-php@v2 with: php-version: ${{ matrix.php }} extensions: curl, mbstring, zip, pcntl, pdo, sqlite, pdo_sqlite, iconv coverage: none - name: Install dependencies run: | composer require "laravel/framework:${{ matrix.laravel }}" "orchestra/testbench:${{ matrix.testbench }}" "symfony/console:>=4.3.4" --no-interaction --no-update composer update --${{ matrix.dependency-version }} --prefer-dist --no-interaction - name: Execute tests run: vendor/bin/phpunit
| ver. 1.4 |
Github
|
.
| PHP 8.3.30 | Generation time: 0.01 |
proxy
|
phpinfo
|
Settings