October 2026 - Git - lists.phpmyadmin.net

[phpmyadmin/scripts] c32749: mailman: improve script to handle auto moderation
by William Desportes 30 Oct '26

30 Oct '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/scripts Commit: c327497a5b5da48bfd66ae8655edfb9ffef017e7 https://github.com/phpmyadmin/scripts/commit/c327497a5b5da48bfd66ae8655edfb… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-30 (Fri, 10 October 2026) +01:00 Changed paths: M mailman-moderation/README.md M mailman-moderation/phpmyadmin-mailman-moderation.php Log Message: ----------- mailman: improve script to handle auto moderation The options where a bit unclear. I had focused on a working list. Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 2ceef2de2be05516f0c76c6863d871d2972c02a3 https://github.com/phpmyadmin/scripts/commit/2ceef2de2be05516f0c76c6863d871… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-30 (Fri, 10 October 2026) +01:00 Changed paths: M mailman-moderation/phpmyadmin-mailman-moderation.php Log Message: ----------- mailman: allow to specify ids in range even if some are missing Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 3c27bd996d1450d1839a760115154136a21a69b7 https://github.com/phpmyadmin/scripts/commit/3c27bd996d1450d1839a7601151541… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-30 (Fri, 10 October 2026) +01:00 Changed paths: A mailman-moderation/BanRefused.php A mailman-moderation/HttpFailure.php M mailman-moderation/composer.json M mailman-moderation/phpmyadmin-mailman-moderation.php Log Message: ----------- mailman: coding standard fixes and phpstans Co-Authored-By: DeepSeek <noreply(a)deepseek.com>

1 0

[phpmyadmin/scripts] 4a6e6a: mailman: add a new script to handle auto moderation
by William Desportes 30 Oct '26

30 Oct '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/scripts Commit: 4a6e6a88f697a2c7fffa8f6b0c57809089683d65 https://github.com/phpmyadmin/scripts/commit/4a6e6a88f697a2c7fffa8f6b0c5780… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-30 (Fri, 10 October 2026) +01:00 Changed paths: A mailman-moderation/.gitignore A mailman-moderation/README.md A mailman-moderation/composer.json A mailman-moderation/composer.lock A mailman-moderation/phpmyadmin-mailman-moderation.php Log Message: ----------- mailman: add a new script to handle auto moderation Two days of work, this script combined with the .md added in the private repository alors to moderate the security list that is often filled with spam. Co-Authored-By: DeepSeek <noreply(a)deepseek.com>

1 0

[phpmyadmin/phpmyadmin] bab805: Align all page titles to the same style
by Kamil Tekiela 29 Oct '26

29 Oct '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/phpmyadmin Commit: bab805a40f4071e28fe76a4598d75a6723dfb88f https://github.com/phpmyadmin/phpmyadmin/commit/bab805a40f4071e28fe76a4598d… Author: Kamil Tekiela <tekiela246(a)gmail.com> Date: 2026-10-28 (Wed, 10 October 2026) -03:00 Changed paths: M resources/templates/database/privileges/index.twig M resources/templates/database/routines/index.twig M resources/templates/database/search/main.twig M resources/templates/database/structure/show_create.twig M resources/templates/error/simple.twig M resources/templates/events/index.twig M resources/templates/export.twig M resources/templates/import.twig M resources/templates/relation/check_relations.twig M resources/templates/server/databases/index.twig M resources/templates/server/privileges/add_user.twig M resources/templates/server/privileges/edit_routine_privileges.twig M resources/templates/server/privileges/user_overview.twig M resources/templates/server/privileges/user_properties.twig M resources/templates/server/user_groups/edit_user_groups.twig M resources/templates/table/chart/tbl_chart.twig M resources/templates/table/privileges/index.twig M resources/templates/triggers/list.twig M tests/unit/Controllers/Database/Fixtures/Export-testController.html M tests/unit/Controllers/Database/Fixtures/Import-testController.html M tests/unit/Controllers/Database/Fixtures/Search-testController.html M tests/unit/Controllers/Database/RoutinesControllerTest.php M tests/unit/Controllers/Events/Fixtures/Index-testWithEventSchedulerDisabled.html M tests/unit/Controllers/Events/Fixtures/Index-testWithEvents.html M tests/unit/Controllers/Events/Fixtures/Index-testWithoutEvents.html M tests/unit/Controllers/Fixtures/CheckRelations-createConfigStorage.html M tests/unit/Controllers/Fixtures/CheckRelations-testCheckRelationsController.html M tests/unit/Controllers/Triggers/IndexControllerTest.php Log Message: ----------- Align all page titles to the same style Signed-off-by: Kamil Tekiela <tekiela246(a)gmail.com> Commit: 601690888679e2fb5574ba7acd499812ddc9160a https://github.com/phpmyadmin/phpmyadmin/commit/601690888679e2fb5574ba7acd4… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-10-28 (Wed, 10 October 2026) -03:00 Changed paths: M resources/templates/database/privileges/index.twig M resources/templates/database/routines/index.twig M resources/templates/database/search/main.twig M resources/templates/database/structure/show_create.twig M resources/templates/error/simple.twig M resources/templates/events/index.twig M resources/templates/export.twig M resources/templates/import.twig M resources/templates/relation/check_relations.twig M resources/templates/server/databases/index.twig M resources/templates/server/privileges/add_user.twig M resources/templates/server/privileges/edit_routine_privileges.twig M resources/templates/server/privileges/user_overview.twig M resources/templates/server/privileges/user_properties.twig M resources/templates/server/user_groups/edit_user_groups.twig M resources/templates/table/chart/tbl_chart.twig M resources/templates/table/privileges/index.twig M resources/templates/triggers/list.twig M tests/unit/Controllers/Database/Fixtures/Export-testController.html M tests/unit/Controllers/Database/Fixtures/Import-testController.html M tests/unit/Controllers/Database/Fixtures/Search-testController.html M tests/unit/Controllers/Database/RoutinesControllerTest.php M tests/unit/Controllers/Events/Fixtures/Index-testWithEventSchedulerDisabled.html M tests/unit/Controllers/Events/Fixtures/Index-testWithEvents.html M tests/unit/Controllers/Events/Fixtures/Index-testWithoutEvents.html M tests/unit/Controllers/Fixtures/CheckRelations-createConfigStorage.html M tests/unit/Controllers/Fixtures/CheckRelations-testCheckRelationsController.html M tests/unit/Controllers/Triggers/IndexControllerTest.php Log Message: ----------- Merge #20581 Align all page titles to the same style Closes #20581 Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br>

1 0

[phpmyadmin/phpmyadmin] 49ef98: Fix SqlController missing parameter check
by Maurício Meneghini Fauth 29 Oct '26

29 Oct '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/phpmyadmin Commit: 49ef98f90430e97df12a8af94f3e97cce40ceff7 https://github.com/phpmyadmin/phpmyadmin/commit/49ef98f90430e97df12a8af94f3… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-10-27 (Tue, 10 October 2026) -03:00 Changed paths: A test/classes/Controllers/Sql/SqlControllerTest.php M libraries/classes/Controllers/Sql/SqlController.php Log Message: ----------- Fix SqlController missing parameter check Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Commit: ea1119dc31ed0dbaf6f5038d64d8813940eca317 https://github.com/phpmyadmin/phpmyadmin/commit/ea1119dc31ed0dbaf6f5038d64d… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-10-27 (Tue, 10 October 2026) -03:00 Changed paths: M ChangeLog Log Message: ----------- Add ChangeLog entry for #20577 [ci skip] Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Commit: f42a61290f8110496ff101d3f2ad541adf917ba3 https://github.com/phpmyadmin/phpmyadmin/commit/f42a61290f8110496ff101d3f2a… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-10-27 (Tue, 10 October 2026) -03:00 Changed paths: A test/classes/Controllers/Sql/SqlControllerTest.php M ChangeLog M libraries/classes/Controllers/Sql/SqlController.php Log Message: ----------- Merge #20577 Fix SqlController missing parameter check Closes #20577 Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Commit: da43fc46875e714d1fa4c732c95eed7330d9defc https://github.com/phpmyadmin/phpmyadmin/commit/da43fc46875e714d1fa4c732c95… Author: Salvador Peña <sal(a)users.noreply.hosted.weblate.org> Date: 2026-10-28 (Wed, 10 October 2026) +01:00 Changed paths: M po/es.po Log Message: ----------- Translated using Weblate (Spanish) Currently translated at 99.9% (3437 of 3438 strings) [ci skip] Translation: phpMyAdmin/5.2 Translate-URL: https://hosted.weblate.org/projects/phpmyadmin/5-2/es/ Signed-off-by: Salvador Peña <sal(a)users.noreply.hosted.weblate.org> Commit: 3f3852040e9e31319a5dbabf859b483587be4eee https://github.com/phpmyadmin/phpmyadmin/commit/3f3852040e9e31319a5dbabf859… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-10-28 (Wed, 10 October 2026) -03:00 Changed paths: M libraries/classes/Controllers/Import/ImportController.php M libraries/classes/Controllers/Table/ReplaceController.php M libraries/classes/InsertEdit.php M phpstan-baseline.neon M psalm-baseline.xml M test/classes/InsertEditTest.php Log Message: ----------- Fix cases where an invalid include will cause an error It's dead code under normal circumstances. It's left over code from previous refactorings. The only possible value for $goto is 'index.php', which will cause an error when being included. Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Commit: b6b849380f8f1196c7ebcf8b1c7afc53b74d60e6 https://github.com/phpmyadmin/phpmyadmin/commit/b6b849380f8f1196c7ebcf8b1c7… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-10-28 (Wed, 10 October 2026) -03:00 Changed paths: M ChangeLog Log Message: ----------- Add change log entry for #20578 [ci skip] Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Commit: 6b04ffde0168df6176a260ba21111153ea42041c https://github.com/phpmyadmin/phpmyadmin/commit/6b04ffde0168df6176a260ba211… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-10-28 (Wed, 10 October 2026) -03:00 Changed paths: M ChangeLog M libraries/classes/Controllers/Import/ImportController.php M libraries/classes/Controllers/Table/ReplaceController.php M libraries/classes/InsertEdit.php M phpstan-baseline.neon M psalm-baseline.xml M test/classes/InsertEditTest.php Log Message: ----------- Merge #20578 Fix cases where an invalid include will cause an error Closes #20578 Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Commit: f34ca077284a23b54f7e42558ba2909cb5ec1579 https://github.com/phpmyadmin/phpmyadmin/commit/f34ca077284a23b54f7e42558ba… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-10-28 (Wed, 10 October 2026) -03:00 Changed paths: A tests/unit/Controllers/Sql/SqlControllerTest.php M phpstan-baseline.neon M psalm-baseline.xml M src/Controllers/Import/ImportController.php M src/Controllers/Table/ReplaceController.php M src/InsertEdit.php M tests/unit/InsertEditTest.php Log Message: ----------- Merge branch 'QA_5_2' Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br>

1 0

[phpmyadmin/phpmyadmin] 3f3852: Fix cases where an invalid include will cause an error
by Maurício Meneghini Fauth 29 Oct '26

29 Oct '26

Branch: refs/heads/QA_5_2 Home: https://github.com/phpmyadmin/phpmyadmin Commit: 3f3852040e9e31319a5dbabf859b483587be4eee https://github.com/phpmyadmin/phpmyadmin/commit/3f3852040e9e31319a5dbabf859… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-10-28 (Wed, 10 October 2026) -03:00 Changed paths: M libraries/classes/Controllers/Import/ImportController.php M libraries/classes/Controllers/Table/ReplaceController.php M libraries/classes/InsertEdit.php M phpstan-baseline.neon M psalm-baseline.xml M test/classes/InsertEditTest.php Log Message: ----------- Fix cases where an invalid include will cause an error It's dead code under normal circumstances. It's left over code from previous refactorings. The only possible value for $goto is 'index.php', which will cause an error when being included. Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Commit: b6b849380f8f1196c7ebcf8b1c7afc53b74d60e6 https://github.com/phpmyadmin/phpmyadmin/commit/b6b849380f8f1196c7ebcf8b1c7… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-10-28 (Wed, 10 October 2026) -03:00 Changed paths: M ChangeLog Log Message: ----------- Add change log entry for #20578 [ci skip] Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Commit: 6b04ffde0168df6176a260ba21111153ea42041c https://github.com/phpmyadmin/phpmyadmin/commit/6b04ffde0168df6176a260ba211… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-10-28 (Wed, 10 October 2026) -03:00 Changed paths: M ChangeLog M libraries/classes/Controllers/Import/ImportController.php M libraries/classes/Controllers/Table/ReplaceController.php M libraries/classes/InsertEdit.php M phpstan-baseline.neon M psalm-baseline.xml M test/classes/InsertEditTest.php Log Message: ----------- Merge #20578 Fix cases where an invalid include will cause an error Closes #20578 Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br>

1 0

[phpmyadmin/error-reporting-server] a03360: Remove the flash layout, the CakePHP 5 skeleton does not have it
by William Desportes 28 Oct '26

28 Oct '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/error-reporting-server Commit: a03360cda98dd553c5e42b70c3be41c857933961 https://github.com/phpmyadmin/error-reporting-server/commit/a03360cda98dd55… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: D templates/layout/flash.php Log Message: ----------- Remove the flash layout, the CakePHP 5 skeleton does not have it templates/layout/flash.php is a CakePHP 2 file: it reads $page_title and $pause, and it calls Configure without importing it, so it would fail if it was ever rendered. The skeleton of the application for CakePHP 5 ships ajax.php, default.php, email/ and error.php only, and nothing sets this layout. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: b81ffe5ff20153726b41e66804e69b02ac59cda5 https://github.com/phpmyadmin/error-reporting-server/commit/b81ffe5ff201537… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M templates/email/text/default.php M templates/layout/ajax.php Log Message: ----------- Use the layout syntax of the CakePHP 5 skeleton The skeleton writes "echo $content" instead of closing the PHP tag and opening a short echo tag. The @var annotation of the skeleton is left out: the coding standard forbids a fully qualified name outside a use statement, and it rejects a file level @var declaration. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 784da1a324e8dc13a89e0aa5b2cff9bd039f659e https://github.com/phpmyadmin/error-reporting-server/commit/784da1a324e8dc1… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M src/Report.php Log Message: ----------- Do not test the type of the query of a route parse_url() answers a string, false on a malformed URL or null when the URL has no query, and the three cases give no route. Cast the value instead of testing it: the analysis reads the comparison as always true, and the result of the method does not change. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 8b22ef74c27038778e997a3b817d6f0eb0f9f109 https://github.com/phpmyadmin/error-reporting-server/commit/8b22ef74c270387… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M .scrutinizer.yml M src/Console/Installer.php Log Message: ----------- Install the development dependencies in the Scrutinizer analysis The tests extend Cake\TestSuite\TestCase, which inherits from PHPUnit: the analysis reported the base class as missing for every test file because the dev dependencies were not installed in the container. The Codeception installer of src/Console/Installer.php is annotated with @scrutinizer ignore-type instead: it is not a dependency of this application, the class_exists() guard is what makes its absence harmless. Ignoring the line keeps the rest of the file analyzed. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr>

1 0

[phpmyadmin/phpmyadmin] 49ef98: Fix SqlController missing parameter check
by Maurício Meneghini Fauth 28 Oct '26

28 Oct '26

Branch: refs/heads/QA_5_2 Home: https://github.com/phpmyadmin/phpmyadmin Commit: 49ef98f90430e97df12a8af94f3e97cce40ceff7 https://github.com/phpmyadmin/phpmyadmin/commit/49ef98f90430e97df12a8af94f3… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-10-27 (Tue, 10 October 2026) -03:00 Changed paths: A test/classes/Controllers/Sql/SqlControllerTest.php M libraries/classes/Controllers/Sql/SqlController.php Log Message: ----------- Fix SqlController missing parameter check Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Commit: ea1119dc31ed0dbaf6f5038d64d8813940eca317 https://github.com/phpmyadmin/phpmyadmin/commit/ea1119dc31ed0dbaf6f5038d64d… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-10-27 (Tue, 10 October 2026) -03:00 Changed paths: M ChangeLog Log Message: ----------- Add ChangeLog entry for #20577 [ci skip] Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Commit: f42a61290f8110496ff101d3f2ad541adf917ba3 https://github.com/phpmyadmin/phpmyadmin/commit/f42a61290f8110496ff101d3f2a… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-10-27 (Tue, 10 October 2026) -03:00 Changed paths: A test/classes/Controllers/Sql/SqlControllerTest.php M ChangeLog M libraries/classes/Controllers/Sql/SqlController.php Log Message: ----------- Merge #20577 Fix SqlController missing parameter check Closes #20577 Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br>

1 0

[phpmyadmin/error-reporting-server] 2509ac: Use self for the constant of the command
by William Desportes 28 Oct '26

28 Oct '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/error-reporting-server Commit: 2509ac5b3117c183642cb27e0bd59e48550910c6 https://github.com/phpmyadmin/error-reporting-server/commit/2509ac5b3117c18… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M src/Command/SyncGithubIssueStatesCommand.php Log Message: ----------- Use self for the constant of the command The coding standard forbids the late static binding for constants: SlevomatCodingStandard.Classes.DisallowLateStaticBindingForConstants. The static:: use was added in ebbd9fccc5, it breaks the lint job on master. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 1cd1ac67b8e2b4c7645c199dc336cb6ec5aae35d https://github.com/phpmyadmin/error-reporting-server/commit/1cd1ac67b8e2b4c… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M src/Report.php Log Message: ----------- Make the event id getter return a non null value 53c3dd9b1b made internal____eventId nullable, the analyzer cannot follow the assignment in the branch and reports that a null string is returned. Keep the value in a local variable and remove the unused $user of getReportMetadata(). Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: d06612dc32b5301c3e02430be09effc27ecbd0dd https://github.com/phpmyadmin/error-reporting-server/commit/d06612dc32b5301… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M phpstan-baseline.neon M src/Model/Table/NotificationsTable.php M src/Model/Table/ReportsTable.php Log Message: ----------- Set the report and notification fields through the entity API The properties written on the EntityInterface are reported by the analysis and set() is the documented way, like f8759cf74d did for the developers. The is_int() guard of notifyDevs() can never be false, $report_id is typed int since the method was added. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 34991d7fb012e6ae133418ba35ef2287bf013fd3 https://github.com/phpmyadmin/error-reporting-server/commit/34991d7fb012e6a… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M config/app.default.php M config/app_ci.php M src/Model/Table/IncidentsTable.php M tests/Fixture/report_js.json M tests/Fixture/report_php.json M tests/TestCase/Controller/IncidentsControllerTest.php M tests/TestCase/Model/Table/IncidentsTableTest.php M tests/TestCase/ReportTest.php Log Message: ----------- Ignore the reports of the versions that are not maintained anymore The reports of the old clients are noise: nothing accepts 4.8 and older, 5.0 or 5.1 anymore. Only 4.9.x and 5.2.0 and newer are stored now, createIncidentFromBugReport() logs and drops anything else. The accepted versions are read from the AcceptedReportsVersions key of the configuration and documented in config/app.default.php: a rule is a branch like "4.9.*", a minimum like ">=5.2" or an exact version. There is no default list, a missing key accepts nothing. The ingest fixtures carried 4.5.4.1deb2ubuntu2, they now send the payload of a supported client. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: ebd9cb8198da703ce1cddc0df98c44ef250f14d9 https://github.com/phpmyadmin/error-reporting-server/commit/ebd9cb8198da703… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M README.md Log Message: ----------- Document what the GitHub webhook is used for The section only told how to create the hook. Document the repository it has to be added to, the GithubRepoPath key of config/oauth.php, the statuses the delivery changes and why most of the deliveries are ignored. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 53a724f67cbe4243437f51469a872cd6447499a5 https://github.com/phpmyadmin/error-reporting-server/commit/53a724f67cbe424… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M README.md Log Message: ----------- Fix the name of the OAuth example configuration file The file is config/oauth_example.php, the README documented an oauth.example.php that does not exist. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr>

1 0

[phpmyadmin/error-reporting-server] 92899d: Send the phpstan and phpcs results to Scrutinizer
by William Desportes 28 Oct '26

28 Oct '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/error-reporting-server Commit: 92899d913ede253b8c21991f3490f59655646da8 https://github.com/phpmyadmin/error-reporting-server/commit/92899d913ede253… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M .scrutinizer.yml Log Message: ----------- Send the phpstan and phpcs results to Scrutinizer phpcs-run ran the generic standard, which does not know the templates of CakePHP and reported issues that the project standard does not have. Report the results of the tools the project uses instead, like the phpMyAdmin QA branches do, so the Scrutinizer issues match composer check. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 53c3dd9b1bd9f59e851e8221e24aea028e07bb1e https://github.com/phpmyadmin/error-reporting-server/commit/53c3dd9b1bd9f59… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M src/Report.php Log Message: ----------- Declare the properties of the Report class The class extends stdClass and fromObject() copies every key of the payload on the instance, so the properties are not declared and the analyzers report "The property user_os does not exist on App\Report". 78af93a354 made them readable without the curly braces, declare them for the analyzer instead. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: f8759cf74d2b09d1e74686c07b90831dbef3442c https://github.com/phpmyadmin/error-reporting-server/commit/f8759cf74d2b09d… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M phpstan-baseline.neon M src/Model/Table/DevelopersTable.php Log Message: ----------- Set the developer fields through the entity API saveFromGithub() writes the properties on the EntityInterface, which Scrutinizer reports six times as "Accessing full_name on the interface". set() is the documented way and validates the fields. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: a83970bd5c0f119e978cf6b8e1dcca62622892ec https://github.com/phpmyadmin/error-reporting-server/commit/a83970bd5c0f119… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M tests/TestCase/Controller/EventsSecurityTest.php Log Message: ----------- Use a docblock the analyzers can read for the signature provider Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: ebbd9fccc5895fb220b006fd0042acf0358074b0 https://github.com/phpmyadmin/error-reporting-server/commit/ebbd9fccc5895fb… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M src/Command/SyncGithubIssueStatesCommand.php Log Message: ----------- Return an error code instead of exiting the command Calling exit kills the whole process, in a web context the command would answer with an empty success response. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr>

1 0

[phpmyadmin/error-reporting-server] 60fdee: Update the Composer dependencies
by William Desportes 28 Oct '26

28 Oct '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/error-reporting-server Commit: 60fdeed14cb3afcfcad24d504c7de4b24e95141f https://github.com/phpmyadmin/error-reporting-server/commit/60fdeed14cb3afc… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M composer.json Log Message: ----------- Update the Composer dependencies The constraints of composer.json were last changed in 70ca00307e and several of the installed versions are affected by security advisories: cakephp/cakephp 5.3.2 (CVE-2026-79752, CVE-2026-77635, CVE-2026-77634, CVE-2026-48820), cakephp/debug_kit 5.2.1, squizlabs/php_codesniffer and composer/composer. Refresh all of them to their latest compatible versions and declare the PHP extensions the application requires. mobiledetect is now required by config/bootstrap.php again, it was used there since 6aa5001d70. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: eecc800ca6d2d63cabe8cec4c76e26eb347f90e3 https://github.com/phpmyadmin/error-reporting-server/commit/eecc800ca6d2d63… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M src/Application.php Log Message: ----------- Remove the obsolete BaseApplication generic tag Cake\Http\BaseApplication is not generic anymore in CakePHP 5.4. The tag was added in 6aa5001d70 and the application class of the CakePHP app skeleton does not have it. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 5deac56d68dd63d462f3a4ebfed55d6594b72716 https://github.com/phpmyadmin/error-reporting-server/commit/5deac56d68dd63d… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M src/Controller/GithubController.php M src/Controller/NotificationsController.php M src/Model/Table/NotificationsTable.php M src/Model/Table/ReportsTable.php M src/View/Helper/ReportsHelper.php Log Message: ----------- Fix the phpstan errors detected after the dependency update The CakeDC extension now rejects the array access on entities, use the object notation instead. The report lookups are narrowed to an entity before being saved and the Incidents helper property gets the type the extension expects (b25acd961b). Rows are read as arrays in NotificationsController since 9ec1425ae8 and the developer id was set on the table in 51c6b6880d. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: e2be05e8a5b3ca67e2e6461f188b2add8cb1684d https://github.com/phpmyadmin/error-reporting-server/commit/e2be05e8a5b3ca6… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M phpstan-baseline.neon Log Message: ----------- Remove the obsolete entries from the phpstan baseline The baseline generated in 2164997525 has entries that do not match anymore after the fixes of the previous commit. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: a20934b5003a1aee50fb5a79edf45e04aae7f279 https://github.com/phpmyadmin/error-reporting-server/commit/a20934b5003a1ae… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M src/Command/CleanOldNotifsCommand.php M src/Command/StatsCommand.php M src/Command/SyncGithubIssueStatesCommand.php M src/Controller/AppController.php M src/Controller/Component/GithubApiComponent.php M src/Controller/Component/OrderSearchComponent.php M src/Controller/DevelopersController.php M src/Controller/ErrorController.php M src/Controller/EventsController.php M src/Controller/GithubController.php M src/Controller/IncidentsController.php M src/Controller/NotificationsController.php M src/Controller/ReportsController.php M src/Controller/StatsController.php M src/Mailer/Transport/TestTransport.php M src/Middleware/CsrfProtectionMiddleware.php M src/Model/Table/IncidentsTable.php M src/Report.php M src/View/Helper/ReportsHelper.php M tests/TestCase/Controller/DevelopersControllerTest.php M tests/TestCase/Controller/EventsControllerTest.php M tests/TestCase/Controller/GithubControllerTest.php M tests/TestCase/Controller/IncidentsControllerTest.php M tests/TestCase/Controller/NotificationsControllerTest.php M tests/TestCase/Controller/ReportsControllerTest.php M tests/TestCase/Model/Table/DevelopersTableTest.php M tests/TestCase/Model/Table/IncidentsTableTest.php M tests/TestCase/Model/Table/NotificationsTableTest.php M tests/TestCase/Model/Table/ReportsTableTest.php M tests/TestCase/ReportTest.php M tests/TestCase/View/Helper/ReportsHelperTest.php Log Message: ----------- Apply the new coding standard fixes Auto fixes from the coding standard rules of b25acd961b, applied after the dependency update. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: ea8744460750cd6f66ec1530fe48bd045ad0e98e https://github.com/phpmyadmin/error-reporting-server/commit/ea8744460750cd6… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M composer.json Log Message: ----------- Update the coding standard to version 5 This brings PHP_CodeSniffer 4 and the Doctrine coding standard 14. The ruleset of b25acd961b still applies to them. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 790ccf12f4ab75b52d6ed739cf6e3ef2e3cbe1e0 https://github.com/phpmyadmin/error-reporting-server/commit/790ccf12f4ab75b… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M config/Migrations/20150607191654_initial.php M config/Migrations/20150607192040_add_report_id_index_to_incidents.php M config/Migrations/20170515135017_fix_long_pma_versions.php M config/Migrations/20170530155816_fix_stale_report_states.php M config/routes.php M phpstan-baseline.neon M src/Command/CleanOldNotifsCommand.php M src/Command/ConsoleCommand.php M src/Command/SyncGithubIssueStatesCommand.php M src/Controller/AppController.php M src/Controller/Component/GithubApiComponent.php M src/Controller/Component/MailerComponent.php M src/Controller/Component/OrderSearchComponent.php M src/Controller/DevelopersController.php M src/Controller/EventsController.php M src/Controller/GithubController.php M src/Controller/IncidentsController.php M src/Controller/NotificationsController.php M src/Controller/ReportsController.php M src/Forwarding/Sentry.php M src/Mailer/Transport/TestTransport.php M src/Middleware/AuthenticationMiddleware.php M src/Middleware/CsrfProtectionMiddleware.php M src/Model/Table/DevelopersTable.php M src/Model/Table/IncidentsTable.php M src/Model/Table/NotificationsTable.php M src/Model/Table/ReportsTable.php M src/Report.php M src/View/Helper/ReportsHelper.php M templates/Error/error400.php M templates/Github/create_issue.php M templates/Incidents/view.php M templates/Notifications/index.php M templates/Reports/index.php M templates/Reports/view.php M templates/Stats/stats.php M templates/email/html/report.php M templates/layout/default.php M templates/layout/rss/default.php M tests/Fixture/DevelopersFixture.php M tests/Fixture/IncidentsFixture.php M tests/Fixture/NotificationsFixture.php M tests/Fixture/ReportsFixture.php M tests/TestCase/Controller/DevelopersControllerTest.php M tests/TestCase/Controller/EventsControllerTest.php M tests/TestCase/Controller/GithubControllerTest.php M tests/TestCase/Controller/IncidentsControllerTest.php M tests/TestCase/Controller/NotificationsControllerTest.php M tests/TestCase/Controller/ReportsControllerTest.php M tests/TestCase/Model/Table/DevelopersTableTest.php M tests/TestCase/Model/Table/IncidentsTableTest.php M tests/TestCase/Model/Table/ReportsTableTest.php M tests/TestCase/ReportTest.php M tests/TestCase/Shell/StatsShellTest.php M tests/TestCase/View/Helper/ReportsHelperTest.php Log Message: ----------- Apply the coding standard 5 fixes The type hints sniff added a native type on the internal properties of the Report class that are nullable, restore the nullability so the JSON payload of a report can still be parsed without those keys. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 0cb4b0e675211d866b5049a033e6a447e85c4c84 https://github.com/phpmyadmin/error-reporting-server/commit/0cb4b0e675211d8… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M webroot/index.php D config/requirements.php Log Message: ----------- Remove the platform requirements check config/requirements.php was added in 63645696ab and still checked for PHP 5.6. The CakePHP 5 app skeleton does not ship it anymore: the platform requirements are declared in composer.json and enforced by composer. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: ad9616955e316e16ebd40c6358e769f2a695d4d9 https://github.com/phpmyadmin/error-reporting-server/commit/ad9616955e316e1… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M .gitignore M phpunit.xml.dist Log Message: ----------- Update the phpunit configuration to the version 10+ schema The file from 989499ab56 uses the pre PHPUnit 10 schema and its listener pointed to Cake\TestSuite\Fixture\FixtureInjector, a class that no longer exists in CakePHP 5. Take the configuration of the CakePHP app skeleton, which registers the fixture extension, and keep the clover and junit reports the project generates. Ignore the .phpunit.cache directory PHPUnit writes with this version instead of the .phpunit.result.cache file. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 00f553761149d0cb795e620008af557a32b135b6 https://github.com/phpmyadmin/error-reporting-server/commit/00f553761149d0c… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: A tests/TestCase/Command/CleanOldNotifsCommandTest.php A tests/TestCase/Command/StatsCommandTest.php A tests/TestCase/Command/SyncGithubIssueStatesCommandTest.php D tests/TestCase/Shell/CleanOldNotifsShellTest.php D tests/TestCase/Shell/StatsShellTest.php D tests/TestCase/Shell/SyncGithubIssueStatesShellTest.php Log Message: ----------- Rename the shell tests to command tests The tested classes are commands since b78fba7fc1, the tests kept the cake 2 shell naming of cc99382cdc. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 14b07acbe536b40a9deccb800269970e312331c3 https://github.com/phpmyadmin/error-reporting-server/commit/14b07acbe536b40… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M .gitattributes Log Message: ----------- Sync the .gitattributes with the CakePHP app skeleton The file from 083ff72bc4 listed phpstan.xml.dist which does not exist, it is phpstan.neon.dist. Take the line endings and binary rules of the skeleton and keep the list of the files that should not be shipped in the archives. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 3286ea1fe7bd38481ce9e167980473787058740c https://github.com/phpmyadmin/error-reporting-server/commit/3286ea1fe7bd384… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M composer.json Log Message: ----------- Run the static analysis as part of the check script phpstan was only run by the lint-and-analyse-php.yml workflow of 1cf0bd802e, the check script ran the tests and the coding standard only, so a local check could pass with static analysis errors. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: cff37d9b06db96495e1474a75f33ffd891d77367 https://github.com/phpmyadmin/error-reporting-server/commit/cff37d9b06db964… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M phpstan-baseline.neon M src/Controller/DevelopersController.php M src/Report.php Log Message: ----------- Do not store the developer id on the table instance authenticateDeveloper() set the id of the developer on the table, a property that does not exist since the CakePHP 3 rewrite of 6aa5001d70, and the value was only used right after being computed. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 4dd52d5a0bf75beafceac5191e1ebdd0a1cacb85 https://github.com/phpmyadmin/error-reporting-server/commit/4dd52d5a0bf75be… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M phpstan-baseline.neon M src/Command/StatsCommand.php M src/Controller/IncidentsController.php M src/Controller/ReportsController.php M src/Controller/StatsController.php M src/Model/Table/ReportsTable.php M tests/TestCase/Controller/IncidentsControllerTest.php M tests/TestCase/Controller/ReportsControllerTest.php M tests/TestCase/Model/Table/ReportsTableTest.php Log Message: ----------- Pass the report id to the reports table methods f52f639575 made the reports table methods read $this->id, a hidden state that breaks as soon as two reports are handled by the same request: pass the id as an argument instead. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 45d593d7f78bfa4eff5f73199d3b6c4bdd6447a3 https://github.com/phpmyadmin/error-reporting-server/commit/45d593d7f78bfa4… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M phpstan-baseline.neon M src/Model/Table/ReportsTable.php Log Message: ----------- Remove the CakePHP 2 leftovers from the reports table The $hasMany, $validate and $findMethods properties date back to 6aa5001d70, they are not read by CakePHP 5: the association is declared in initialize() since the CakePHP 3 rewrite. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 88eb00478769f7de2e2cc0ce1fb57fba39020be9 https://github.com/phpmyadmin/error-reporting-server/commit/88eb00478769f7d… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M tests/TestCase/Model/Table/ReportsTableTest.php Log Message: ----------- Make the related reports test work again The test was marked incomplete in 61dc7e748a because it used the cake 2 read() call to change the report under test, set the relation with a query instead. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 2b0233ab2df905fd6f6a0f6dd21eed7054b57a48 https://github.com/phpmyadmin/error-reporting-server/commit/2b0233ab2df905f… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M config/bootstrap.php Log Message: ----------- Use the error handling of the bootstrap shipped by cake The catch block written in 159dc3871d diverges from the skeleton of the CakePHP app: exit() with a string reports a success exit code and the message is never logged. Take the skeleton version, it writes the message where it can be read and exits with an error code. The mobile and tablet detectors of the skeleton are kept, mobiledetect is required by composer.json. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: bf192fd544a168fa4adb70b53e009be88cf584f1 https://github.com/phpmyadmin/error-reporting-server/commit/bf192fd544a168f… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M README.md D config/app_example.php Log Message: ----------- Remove the duplicate app_example.php configuration file app_example.php was added in 8fcf478b82 and never received the environment driven settings of app.default.php (6aa5001d70). The README of b170f22458 pointed at it and f9796eb128 worked around the copy of the wrong file. Keep the up to date file only and point the README at it. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: bd90bcd44b178556d51947a157ba7e1082ded312 https://github.com/phpmyadmin/error-reporting-server/commit/bd90bcd44b17855… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M src/Console/Installer.php Log Message: ----------- Fix the configuration file the installer creates b2c531cfd8 stopped the salt setup when config/app_local.php is missing, but this project ships config/app.default.php and generates config/app.php from it, so the installer never created anything. Take the installer of the CakePHP app skeleton and point it at the files this project has, keeping the template existence guard of b2c531cfd8. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 6a3d75c16615b9c41c42129b9d814b2df1c49395 https://github.com/phpmyadmin/error-reporting-server/commit/6a3d75c16615b9c… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M .github/workflows/tests.yml Log Message: ----------- Update the GitHub actions versions c38fb65096 pinned actions/checkout v6 and actions/cache v5, and ignored the PHP platform requirements of composer.json. Bump the actions to their current major version and key the Composer cache on composer.json and the PHP version instead of a static key. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: c8524257d81544c9fb5ef7a270172790094a94a4 https://github.com/phpmyadmin/error-reporting-server/commit/c8524257d81544c… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M .github/workflows/tests.yml Log Message: ----------- Test the CI against the MariaDB version of Debian trixie The server runs PHP 8.4.27 and the MariaDB packaged in Debian 13 trixie, 11.8. The matrix of c38fb65096 uses MySQL 5.7, which is end of life since October 2023 and is not what the reports are stored in. Test the mariadb:11.8 image and install the intl extension that composer.json requires. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 8d8f73a2baec19197017f97e7893b2a7c1c1c3eb https://github.com/phpmyadmin/error-reporting-server/commit/8d8f73a2baec191… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M README.md Log Message: ----------- Update the README requirements and test instructions The requirements still ask for the cake 3.0 extensions and the test instructions mention the /test.php webrunner, which was removed with the CakePHP 5 upgrade. Document the coding standard and static analysis commands added in 3286ea1fe7. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 12af5b85775b9d12277ba47b802e541cd51fd621 https://github.com/phpmyadmin/error-reporting-server/commit/12af5b85775b9d1… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M README.md Log Message: ----------- Remove the obsolete shell instructions from the README The addHashesToOldRecords shell documented in c8a367c872 does not exist anymore and the commands moved to src/Command in b78fba7fc1, the webrunner sentence comes from 5324e88736. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: b3c48c9928fa669d8b23abcec9bb9fd46ba3a535 https://github.com/phpmyadmin/error-reporting-server/commit/b3c48c9928fa669… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: D .jshintrc D webroot/css/cake.generic.css D webroot/img/cake.icon.png D webroot/img/cake.power.gif D webroot/img/test-error-icon.png D webroot/img/test-fail-icon.png D webroot/img/test-pass-icon.png D webroot/img/test-skip-icon.png Log Message: ----------- Remove the unused CakePHP skeleton assets cake.generic.css and the cake icons came with the application skeleton in 6aa5001d70, the phpunit webrunner icons are served by a test.php that does not exist anymore and .jshintrc from a0419b3b0a is not used since there is no javascript lint in the CI. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: dc3f00f7eec1b430f04b27e25106737ce5621be1 https://github.com/phpmyadmin/error-reporting-server/commit/dc3f00f7eec1b43… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: A tests/TestCase/Controller/Component/OrderSearchComponentTest.php M src/Controller/Component/OrderSearchComponent.php Log Message: ----------- security: Do not inject the data tables sort direction into the query sSortDir_0 is taken from the query string and appended to the ORDER BY clause of the query, which the query builder does not escape, so a value like "ASC, (SLEEP(5))" was executed by the database. The column itself is safe, it is picked from the $aColumns list of 4725d7b296. Only ASC and DESC can be sent by DataTables, anything else is now read as ASC. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 501ee1e658c353cc557cb7ee604956767072243a https://github.com/phpmyadmin/error-reporting-server/commit/501ee1e658c353c… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: A tests/TestCase/Controller/EventsSecurityTest.php M phpstan-baseline.neon M src/Controller/EventsController.php Log Message: ----------- security: Reject the webhook events that are not signed The signature check of b8a7a7f680 compared two empty strings when the X-Hub-Signature header was missing, so anybody could close any report by posting an issue event. An unknown algorithm such as "crc32b" made getHash() throw, which answered with a 500. Require a supported hash_hmac algorithm and a header with a hash, and compare in constant time with hash_equals(). Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: c96b5a31f33eaf0878d62703b5630bd58128a0fb https://github.com/phpmyadmin/error-reporting-server/commit/c96b5a31f33eaf0… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: A tests/TestCase/Controller/IncidentsXssTest.php A tests/TestCase/View/Helper/IncidentsHelperTest.php M src/View/Helper/IncidentsHelper.php M templates/Incidents/view.php Log Message: ----------- security: Escape the report fields printed by the incident page The values of a report come from the unauthenticated create endpoint of 6aa5001d70 and were printed as HTML in templates/Incidents/view.php since b37b319852. A report with <script>alert("xss")</script> as error message was executed in the session of the developer who opened it. Escape the values, including the description and the microhistory block, and the stack levels that IncidentsHelper concatenates. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 25f64143eea194212fb83d5a83a07dd053e60fff https://github.com/phpmyadmin/error-reporting-server/commit/25f64143eea1942… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M src/View/Helper/ReportsHelper.php M templates/Reports/view.php M tests/TestCase/View/Helper/ReportsHelperTest.php Log Message: ----------- security: Escape the report fields of the report page and its charts The report page printed the fields of the report and of its first incident unescaped since b37b319852, and the chart data built by getChartArray() and getLineChartData() was encoded with JSON_UNESCAPED_SLASHES, so a label containing </script> closed the script element the JSON is printed in. Escape the fields and encode the chart data with the JSON_HEX_ flags. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr> Commit: 9c128f27b512d2b156835109cddd9f7cd0bc2603 https://github.com/phpmyadmin/error-reporting-server/commit/9c128f27b512d2b… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M templates/layout/default.php Log Message: ----------- security: Escape the developer name in the header The full name comes from the GitHub API response stored at login and was printed unescaped in the header of every page since b37b319852. Co-authored-by: DeepSeek <noreply(a)deepseek.com> Signed-off-by: William Desportes <williamdes(a)wdes.fr>

1 0