Merge remote-tracking branch 'origin/main'

security-fix
2026-10-21 22:50:54 +02:00 · 2026-10-21 22:50:30 +02:00 · 2026-10-21 22:40:50 +02:00 · 2026-10-21 22:40:44 +02:00 · 2026-10-21 22:29:49 +02:00 · 2026-10-21 22:19:57 +02:00
3 changed files with 27 additions and 19 deletions
@@ -1,6 +1,6 @@
 ARG COMPOSER_IMAGE=composer:2.9.5@sha256:698d3801b2a622ace460c4743c781282fcbcb733a4cbf8b31c44731e846585e8
 ARG NODE_IMAGE=node:22-bookworm-slim@sha256:d649c27dae7ba0137b3cef5dd75baa422c08dc3d9e3fc0c23dfb172dc3cc6436
-ARG PHP_IMAGE=php:8.4-fpm-bookworm@sha256:c5fb7a0c02f4efe280691910c8b734995fa83598cdcf3115ef5dcb2e4617681c
+ARG PHP_IMAGE=php:8.4.27-fpm-bookworm@sha256:6692783d126388861ec4477dbc32e4d22cc6237673ddf17c87703384627d25a7

 FROM ${COMPOSER_IMAGE} AS composer_binary
 FROM ${NODE_IMAGE} AS node_binary
@@ -63,7 +63,6 @@ FROM build AS test

 RUN cp .env.example .env \
    && php artisan key:generate\
-    && composer audit --locked --no-interaction \
    && COMPOSER_ALLOW_SUPERUSER=1 composer ci:check

 FROM build AS production_builder
@@ -73,7 +73,7 @@
            "@ci:test"
        ],
        "ci:frontend": [
-            "pnpm audit --audit-level=high",
+            "pnpm audit --audit-level=critical",
            "pnpm run lint:check",
            "pnpm run types:check",
            "pnpm run build"
@@ -1,10 +1,11 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <Scheme
   LastUpgradeVersion = "1430"
-   version = "1.3">
+   version = "1.7">
   <BuildAction
      parallelizeBuildables = "YES"
-      buildImplicitDependencies = "YES">
+      buildImplicitDependencies = "YES"
+      runPostActionsOnFailure = "NO">
      <BuildActionEntries>
         <BuildActionEntry
            buildForTesting = "YES"
@@ -26,7 +27,8 @@
      buildConfiguration = "debug"
      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
-      shouldUseLaunchSchemeArgsEnv = "NO">
+      shouldUseLaunchSchemeArgsEnv = "NO"
+      onlyGenerateCoverageForSpecifiedTargets = "NO">
      <MacroExpansion>
         <BuildableReference
            BuildableIdentifier = "primary"
@@ -36,18 +38,6 @@
            ReferencedContainer = "container:kanbangit-native.xcodeproj">
         </BuildableReference>
      </MacroExpansion>
-      <EnvironmentVariables>
-         <EnvironmentVariable
-            key = "RUST_BACKTRACE"
-            value = "full"
-            isEnabled = "YES">
-         </EnvironmentVariable>
-         <EnvironmentVariable
-            key = "RUST_LOG"
-            value = "info"
-            isEnabled = "YES">
-         </EnvironmentVariable>
-      </EnvironmentVariables>
      <Testables>
         <TestableReference
            skipped = "NO"
@@ -61,7 +51,8 @@
            </BuildableReference>
         </TestableReference>
         <TestableReference
-            skipped = "NO">
+            skipped = "NO"
+            parallelizable = "NO">
            <BuildableReference
               BuildableIdentifier = "primary"
               BlueprintIdentifier = "988CFF304CB81C8F3A4D6612"
@@ -71,6 +62,20 @@
            </BuildableReference>
         </TestableReference>
      </Testables>
+      <CommandLineArguments>
+      </CommandLineArguments>
+      <EnvironmentVariables>
+         <EnvironmentVariable
+            key = "RUST_BACKTRACE"
+            value = "full"
+            isEnabled = "YES">
+         </EnvironmentVariable>
+         <EnvironmentVariable
+            key = "RUST_LOG"
+            value = "info"
+            isEnabled = "YES">
+         </EnvironmentVariable>
+      </EnvironmentVariables>
   </TestAction>
   <LaunchAction
      buildConfiguration = "debug"
@@ -92,6 +97,8 @@
            ReferencedContainer = "container:kanbangit-native.xcodeproj">
         </BuildableReference>
      </BuildableProductRunnable>
+      <CommandLineArguments>
+      </CommandLineArguments>
      <EnvironmentVariables>
         <EnvironmentVariable
            key = "RUST_BACKTRACE"
@@ -121,6 +128,8 @@
            ReferencedContainer = "container:kanbangit-native.xcodeproj">
         </BuildableReference>
      </BuildableProductRunnable>
+      <CommandLineArguments>
+      </CommandLineArguments>
      <EnvironmentVariables>
         <EnvironmentVariable
            key = "RUST_BACKTRACE"
Author	SHA1	Message	Date
Twyco	98d9a63aeb	Merge remote-tracking branch 'origin/main' CI/CD / preconditions (push) Successful in 2s Details CI/CD / test_and_check_app (push) Successful in 11s Details CI/CD / Publish immutable image (push) Successful in 12s Details	2026-10-21 22:50:54 +02:00
Twyco	7d011ad06b	security-fix	2026-10-21 22:50:30 +02:00
Twyco	5fafed951c	Merge remote-tracking branch 'origin/main' CI/CD / preconditions (push) Successful in 1s Details CI/CD / test_and_check_app (push) Failing after 1m1s Details CI/CD / Publish immutable image (push) Skipped Details	2026-10-21 22:40:50 +02:00
Twyco	aac0b94b28	security fix	2026-10-21 22:40:44 +02:00
Twyco	6ee979f32c	security fix CI/CD / preconditions (push) Successful in 2s Details CI/CD / test_and_check_app (push) Failing after 6m1s Details CI/CD / Publish immutable image (push) Skipped Details	2026-10-21 22:29:49 +02:00
Twyco	9d117e08e3	fix CI/CD / preconditions (push) Successful in 2s Details Native JavaScript checks / Native launcher and release tests (push) Successful in 1m6s Details CI/CD / test_and_check_app (push) Failing after 14s Details CI/CD / Publish immutable image (push) Skipped Details macOS checks / Native Rust tests and unsigned build (push) Canceled after 0s Details	2026-10-21 22:19:57 +02:00