- Git - lists.phpmyadmin.net

[phpmyadmin/error-reporting-server] 3177ef: docs: Move the deployment procedure out of the README
by William Desportes 09 Nov '26

09 Nov '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/error-reporting-server Commit: 3177efd2a87065be475459966aea896500221dee https://github.com/phpmyadmin/error-reporting-server/commit/3177efd2a87065b… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: A docs/DEPLOYMENT.md M README.md Log Message: ----------- docs: Move the deployment procedure out of the README The README carried the install steps, the requirements, the web server setup, the OAuth and webhook registrations and the cron jobs between two paragraphs of what the service does, and every change to how the server is deployed had to be written into that page: a reader looking for what the service is scrolled through a migration plan. The deployment procedure moves to docs/DEPLOYMENT.md as it stands, with the links to the web server examples made relative to the new file, and the README keeps a paragraph that points at it. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 058d146945902ba17d30828ee7313fce7828e590 https://github.com/phpmyadmin/error-reporting-server/commit/058d146945902ba… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: M src/Controller/AppController.php M src/Mailer/Transport/TestTransport.php M tests/TestCase/Controller/AppControllerPagingTest.php M tests/TestCase/Controller/StatsControllerTest.php Log Message: ----------- docs: Read the docblocks without array shapes Scrutinizer skips a file whose docblock carries an array shape, keyed or not, so the analysis lost those files for nothing. A plain array type says the same thing to the tools that read it. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 921b41b609a14e2fa5bec96c45186cc2e857010d https://github.com/phpmyadmin/error-reporting-server/commit/921b41b609a14e2… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: M src/Report.php M tests/TestCase/ReportTest.php Log Message: ----------- fix: Give every event of a report its own identity getEventId() memoised the id it generated, and getReports() calls it inside the loop that builds one event per error: every event of a report carried the same event_id. A tracker keys its events by that id, so a PHP report with 3 errors stored one event and silently lost the others, and 3800a9dd8f pinned that shared id in a test as if it were the contract. Generate a fresh id per event instead, and assert that the ids differ. That id also has to be a UUID. A tracker validates it once more when it reads back the user report that points at it, and Rustrak answers the page of the issue with "The Rustrak API answered with data this dashboard could not read" — the issue, its stack trace and its feedback are lost because 1 nibble of the id is random. Fix the version and the variant bits of the random bytes, which is the shape every Sentry SDK sends. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 9bfa9c96d322430fa3f87ecbfaa7ade9e1b9e7dd https://github.com/phpmyadmin/error-reporting-server/commit/9bfa9c96d322430… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: A tests/TestCase/Forwarding/RecordingSentry.php M config/forwarding_example.php M docs/DEPLOYMENT.md M phpstan-baseline.neon M src/Controller/IncidentsController.php M src/Forwarding/Sentry.php M tests/TestCase/Controller/IncidentsControllerTest.php M tests/TestCase/Forwarding/SentryTest.php Log Message: ----------- feat: Send the reports to Sentry with the envelope protocol The tracker moved to Rustrak, which implements the sentry SDK protocol: it answers 400 to POST /api/{id}/store/ and has no /api/embed/error-page/, so every forwarded report and every feedback was rejected, and the controller swallowed the errors, which made the forwarding silently dead. Send a sentry envelope instead: a header line that names the event and the time it was sent, then, per item, a header with the length in bytes and the payload. The header carries the public key and nothing else — sentry_secret and sentry_timestamp are gone, with the userpwd option they fed. A 2xx answer is a store; anything else, a redirect included, is a failure with the status and the head of the body in the log. The feedback becomes a user_report item, in an envelope that names its event as the protocol requires, sent once per report instead of once per event, and cut with mb_strcut() so a multi-byte character is never split. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 291e852482d41cbe9ac195a80309966c04fab13f https://github.com/phpmyadmin/error-reporting-server/commit/291e852482d41cb… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: A config/Migrations/20261103120000_add_forwarded_at_to_reports.php A src/Command/ForwardReportsCommand.php A tests/TestCase/Command/ForwardReportsCommandTest.php M docs/DEPLOYMENT.md M src/Controller/IncidentsController.php M src/Forwarding/Sentry.php M tests/TestCase/Controller/IncidentsControllerTest.php Log Message: ----------- feat: Forward the occurrence from a command, not from the request The forwarding ran inside POST /incidents/create, one request per event with up to five seconds each: a slow tracker held the answer to the client and the notification mail after it for up to 200 seconds, and a timeout in the middle left the report stored, unforwarded and unmailed, with the client retrying into a duplicate. Read the pending rows from bin/cake forward_reports instead, mark each with the new forwarded_at column, and stop calling the tracker from the request. An incident is one occurrence of an error and the report groups them, so the column lives on incidents and every occurrence is sent: an issue in the tracker keeps showing that it still happens. A hundred rows are read at a time, after the id of the last one read, since the driver buffers a result. The command runs on a cron, so it stays quiet: the per-row lines are printed by -v, the event ids by --debug — CakePHP has no VERY_VERBOSE and reads -vvv as -v — and a run that finds nothing to do, or another run already going, prints nothing. The flock() on tmp/forward_reports.lock keeps two runs apart and holds the PID of the run that has it. Mark the archive as handled before the cron exists, or the first run forwards every occurrence ever stored, with fresh ids and the run's date: UPDATE incidents SET forwarded_at = created; Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: ae530231da27cd1b84e04a5946f4942b490a849f https://github.com/phpmyadmin/error-reporting-server/commit/ae530231da27cd1… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: M src/Command/ForwardReportsCommand.php M tests/TestCase/Command/ForwardReportsCommandTest.php Log Message: ----------- fix: Build the forwarded report from the JSON it was stored as The command handed fromObject() a payload it had decoded to arrays: the top level was copied and every message, culprit and frame came out empty. Read it through the JSON it came from, which is what fromString() understands, in one place the test can reach. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 4238fc1b30216ca5de7c63b1a031a9e2fab9baa4 https://github.com/phpmyadmin/error-reporting-server/commit/4238fc1b30216ca… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: M src/Controller/DevelopersController.php M src/Github/GithubApi.php M src/Middleware/AuthenticationMiddleware.php M tests/TestCase/Github/GithubApiTest.php M tests/TestCase/Middleware/AuthenticationMiddlewareTest.php Log Message: ----------- security: Treat a refused GitHub answer as a refusal canCommitTo() answered null for every status but 200 and 404, and the middleware reads null as "the API could not be asked", so it kept the access the session already had: a maintainer whose token GitHub refuses with 401 or 403 kept write access for as long as their session lived. A refusal of both tokens is now false, which is what a 404 already answered. A rate limit stays an open question, since it says nothing about the developer, and the rate limit header tells the two apart. An answer that says nothing is bounded too: past a day without one, the session drops the access instead of keeping it for ever, and the question is asked again sooner than the interval. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 96e8439a03af364a2354bb16cf7663955d4e0478 https://github.com/phpmyadmin/error-reporting-server/commit/96e8439a03af364… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: M src/Controller/GithubController.php M tests/TestCase/Controller/GithubControllerTest.php Log Message: ----------- security: Escape the report values in the issue body tableCell() escaped the pipes, the line breaks and the mentions, and sent the angle brackets through: GitHub renders raw HTML in a comment and in a table cell alike, so a report whose error name was <img src=x onerror=…> ran it in the page of whoever read the issue, and <https://…> became a link. Escape both brackets in the one place the two paths share, and assert on the body itself rather than on the helpers: reverting the call sites left the helper tests green. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 4f7d867b63689ba2e9eb032d1c7d93329e0939a0 https://github.com/phpmyadmin/error-reporting-server/commit/4f7d867b63689ba… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: A src/Middleware/TrustedProxiesMiddleware.php A tests/TestCase/Middleware/TrustedProxiesMiddlewareTest.php M config/app.default.php M docs/server-setup.md M src/Application.php Log Message: ----------- security: Read the trusted proxies from the configuration Security.trustedProxies was documented and never read: ServerRequest::$trustProxy is the flag the framework checks, nothing set it, so clientIp() always answered the address of the proxy and the list had no effect. A middleware reads it now, and the documentation says what the framework really does with it: it compares the header against the list, it does not check that the connection comes from a proxy, so the empty default is the safe value and an operator can only judge with that in hand. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 32e23fe6c3b4033e57b5fb044e600d029edc8cd3 https://github.com/phpmyadmin/error-reporting-server/commit/32e23fe6c3b4033… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: A config/Migrations/20261103140000_add_forwarded_at_to_incidents.php M README.md M config/app.default.php M docs/DEPLOYMENT.md M docs/server-setup.md M phpstan-baseline.neon M src/Command/ForwardReportsCommand.php M src/Controller/AppController.php M src/Controller/Component/GithubApiComponent.php M src/Controller/IncidentsController.php M src/Forwarding/Sentry.php M src/Github/GithubApi.php M src/Middleware/AuthenticationMiddleware.php M src/Model/Table/IncidentsTable.php M src/Report.php M src/View/Helper/IncidentsHelper.php M tests/TestCase/Command/ForwardReportsCommandTest.php M tests/TestCase/Controller/AppControllerPagingTest.php M tests/TestCase/Controller/GithubControllerTest.php M tests/TestCase/Controller/IncidentsControllerTest.php M tests/TestCase/Forwarding/RecordingSentry.php M tests/TestCase/Forwarding/SentryTest.php M tests/TestCase/Github/GithubApiTest.php M tests/TestCase/Middleware/AuthenticationMiddlewareTest.php M tests/TestCase/ReportTest.php D config/Migrations/20261103120000_add_forwarded_at_to_reports.php Log Message: ----------- security: Keep the access current, and the identity of the client The permission is asked again every half day rather than every quarter of an hour: a refusal is answered as soon as it is asked, so a long interval costs no security and saves the token budget the issue creation needs. The client address is what salts the identity of a report, and moving the forwarding to a command took the request away from it: the command rebuilds the report from what the ingest stored, where no address is left. The ingest stores the salted hash of it with the payload — the hash, never the address, since the class goes out of its way to make the address unfindable — and the identity is read from there, or every user of a browser shares one identity. A repeat of the same error adds an incident to the existing report, and that incident is forwarded: the stored payload is narrowed to the error it was built from, or every occurrence would replay all of them. Security.trustedProxies is documented as what the framework does with it: the list holds the addresses of the proxies, which are removed from the X-Forwarded-For chain to leave the client, not the addresses of the clients. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 5737477b5af349a28de25be77f437123a2a7f723 https://github.com/phpmyadmin/error-reporting-server/commit/5737477b5af349a… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: A config/Migrations/20261109120000_add_report_lookup_indexes.php M phpstan-baseline.neon M src/Model/Table/IncidentsTable.php M src/Model/Table/NotificationsTable.php Log Message: ----------- perf: Index the report lookups and read the developers once Every report submission looks for the report of a nearby error before it creates one, on location, line and version, and nothing indexed that: on a table of a hundred thousand reports the lookup is a full scan, measured at 86 to 115 ms per error, so a submission of forty errors spends seconds in scans alone. Index the three columns, with a prefix on the text one, and index related_to, which the related reports are read on. The ingest also read a row back only to get the report id it had just built the incident with, and read every developer again for each report it created — one scan and one query per developer, per report. Pass the id along and read the developers once per submission. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: cea52613fe450f0c27776d61053933a544b49285 https://github.com/phpmyadmin/error-reporting-server/commit/cea52613fe450f0… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: M src/Command/ForwardReportsCommand.php M tests/TestCase/Command/ForwardReportsCommandTest.php Log Message: ----------- fix: Send the error an incident was built from, or nothing The match compared the line of the incident with the line of the error, and both sides were wrong: incidents have no linenumber column, and the payload names its line lineNum, not line. Both sides were therefore always 0, so the match degenerated to "the first error of that file". A report with two errors in one file sent the first one twice and never sent the second, which is exactly the case where the tracker needs both. Compare the three fields the ingest copies out of the error — file, type and message — cut to the width of their columns, so the comparison is exact. An incident whose error cannot be found sent the whole submission instead, which is one event per error for a single occurrence, with fresh ids each time. Send nothing and log it: the tracker must not receive the same data again. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: a942123c538c414f1b5cab24114a7f35dab20778 https://github.com/phpmyadmin/error-reporting-server/commit/a942123c538c414… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: A src/Forwarding/TrackerThrottledException.php A src/Forwarding/TrackerUnreachableException.php M src/Forwarding/Sentry.php M tests/TestCase/Forwarding/SentryTest.php Log Message: ----------- perf: Reach the tracker on one connection, and give up when it is gone The transport opened a cURL handle for every event, so a backlog paid a TCP and TLS handshake per event; keep one handle for the run and reset it at the end. A tracker that does not answer then cost the full timeout of every event before the run gave up: after three failed connections in a row the run now stops, logs it and exits with an error, instead of spending its whole budget chewing through the backlog. A 429 is not a refusal of the payload either: it says the tracker wants to be left alone, so it stops the run as well, and carries the delay the tracker asked for so the next run can respect it. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: debe9a7d17cee8750f2b6d784e526b87c973741d https://github.com/phpmyadmin/error-reporting-server/commit/debe9a7d17cee87… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: M src/Github/GithubApi.php M src/Middleware/AuthenticationMiddleware.php Log Message: ----------- perf: Do not spend the shared token on a rate-limited answer When GitHub answered a rate limit, the permission check asked again with the token of the server: the same budget the issue creation needs, for an answer that would say the same thing. Return "could not ask" instead and log it. A check that could not be asked was retried sixty seconds later, per session, so a GitHub outage turned into two calls a minute per signed-in developer, half of them on the shared token. Wait a quarter of an hour. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 52c34293e96e0bb61cfc31f48a5755720816e749 https://github.com/phpmyadmin/error-reporting-server/commit/52c34293e96e0bb… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: M docs/DEPLOYMENT.md M src/Controller/IncidentsController.php Log Message: ----------- docs: Say what a refused incident does, and what the mail prints The deployment guide and a comment claimed a refused incident produces no stderr output, and that only a transport failure reaches it. Both are false: the failure is logged through the cron_jobs scope, which the command's console log engine echoes to stderr, so a cron mails it on every run while the incident stays pending. The comment on the notification mail listed the two incident lists and the related reports as values nobody printed. Two of them are not read by the template, the similar fields are. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: c3ce540cfc4fd5bb919ce861b0f85d8f89570319 https://github.com/phpmyadmin/error-reporting-server/commit/c3ce540cfc4fd5b… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: M src/Model/Table/IncidentsTable.php Log Message: ----------- security: Bound the line number and the version an incident stores Two client values reached a column of a fixed width with nothing to stop them: a line number of ten digits overflows int(11), and a version with a suffix keeps it — "5.2.1-" followed by anything passes the version rules on its numeric prefix, and getStrippedPmaVersion() stores the suffix too. On a server in strict mode the insert is refused and the request answers 500; on one that is not, the value is silently truncated to something that no longer matches the rule it passed. Read the line through one clamp, used by the lookup and by the stored value so they keep agreeing, and measure the version that is stored rather than the prefix that was accepted. The rejected version is also logged escaped and cut: a newline in it forged a line of the cron log, and a long one filled the disk before the body cap. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 9116ae3e6d4f45b4f4cf4a07b4d963366fce2c6d https://github.com/phpmyadmin/error-reporting-server/commit/9116ae3e6d4f45b… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: M src/Report.php M src/View/Helper/IncidentsHelper.php Log Message: ----------- security: Survive a payload whose values are not the shape it claims Three client-controlled values reached code that assumes a shape they do not have, and each one took a page down or poisoned the queue: - a stack frame that is a string, not a frame: getStacktrace() read a field of it before checking, which is a TypeError, so any maintainer opening the incident or its report got a 500 — and the incident can be attached to a report whose location is public in its GitHub issue. Skip anything that is not a frame. - an internal____ key this class does not declare: it was assigned to a typed property, which throws, so the forwarder could never send that incident and retried it for ever. Only the declared properties are read, and any other internal____ key is dropped. - a message that is a list or an object: decode() was typed to a string and threw while rendering. Read any value, and answer an empty string. A version without a minor part also warned while building the tags, which a payload without pma_version triggers. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: c45840e0fefc66952511ade8ee221c2393c43e93 https://github.com/phpmyadmin/error-reporting-server/commit/c45840e0fefc669… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: M src/Controller/GithubController.php M src/Controller/IncidentsController.php M tests/TestCase/Controller/GithubControllerTest.php Log Message: ----------- security: Refuse a big body early and escape the issue cell fully The size cap compared the request body after reading all of it, so a body of hundreds of megabytes was buffered in memory before the 413 — which is the failure an oversized body is trying to cause, and post_max_size does not bound a JSON body. Refuse on the announced length before reading anything. In the issue body, a backslash in a value escaped the escape that keeps its pipe inside the cell, a link or an image in a cell was still live and fetched by whoever read the issue, and an entity-encoded at sign notified just as the plain one did. Double the backslash first, escape the brackets, and neutralise the encoded at sign. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: b3e323fd573ad44d882b46f9ccad0c7e0b25f22d https://github.com/phpmyadmin/error-reporting-server/commit/b3e323fd573ad44… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-10 (Tue, 11 November 2026) +01:00 Changed paths: M docs/DEPLOYMENT.md Log Message: ----------- docs: Say what a deployment has to do now that forwarding is a command The deploy steps stopped at the migrations, and the three things that make the migration safe were only described in the section about the command: the model cache keeps the schema from before the migration, every stored incident looks like it is waiting to be forwarded, and nothing reaches the tracker until the cron exists. A deployment that follows the list as it was written stops forwarding in silence. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com>

1 0

[phpmyadmin/scripts] 5a131d: sentry: replace Sentry 9.1.2 with a hardened error tracking stack
by William Desportes 09 Nov '26

09 Nov '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/scripts Commit: 5a131dc67dec2d1d269bff055b53eb220c4344ae https://github.com/phpmyadmin/scripts/commit/5a131dc67dec2d1d269bff055b53eb… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-09 (Mon, 11 November 2026) +01:00 Changed paths: M infrastructure/sentry/.env.dist M infrastructure/sentry/README.md M infrastructure/sentry/compose.yml Log Message: ----------- sentry: replace Sentry 9.1.2 with a hardened error tracking stack Sentry 9.1.2 is EOL and needs redis, a cron container and a worker for what is now one process. Replace the stack with a Sentry-SDK-compatible server on PostgreSQL: the API, the dashboard and ingest all served by it. No data is imported. The new server speaks the Sentry ingestion protocol, not the Sentry schema, and the old cluster is PostgreSQL 13, so the new instance starts empty and the old data directories are left untouched. Networking, verified on a running stack: every network is a plain bridge, and all but `egress` disable masquerading, so outbound packets keep their private source address and nothing answers. `egress` is the only network with NAT and `smtp` is its only member. One mechanism, one comment, no mix of `internal: true` and bridge options. `postgres` and `sentry` additionally set `dns: 127.0.0.1`, which stops Docker's resolver forwarding external names upstream; peer names still resolve. That is what completes the sealed networks, which stop TCP but not DNS lookups. The relay keeps the default resolver, since MX lookups need it. The trade-off is in the README: a sealed container keeps a default route to the host and is dropped for want of NAT, where `internal: true` has no route at all. The rest of the hardening: rootless Docker, non-root users, cap_drop ALL, no-new-privileges, read-only rootfs with noexec/nosuid tmpfs, mem/cpu/pids limits. Postgres keeps no capability either: the bind mount is pre-chowned by a one-shot `init` profile instead of adding chown/fowner/dac_override. Telemetry, DO_NOT_TRACK and metrics off, so /metrics is 404. Images pinned by digest, each with its tag and date. The exim relay stays for alert and invitation email, now on the sealed network with SMTP_HOST=smtp. Its queue is a tmpfs, so a message queued while delivery fails does not survive a restart. The HELO name the old compose file hardcoded is now SMTP_HELO_HOSTNAME, so no hostname is written in any committed file. The .env keys keep the names the Sentry stack used: keep POSTGRES_PASSWORD as it is, regenerate SENTRY_SECRET_KEY (refused below 64 bytes, and the old one was 40), repoint the two data paths at empty directories, and add PUBLIC_URL, SMTP_HELO_HOSTNAME and SENTRY_SERVER_EMAIL. Those three are required, with no default, so compose refuses to start rather than build DSNs, HELOs and senders out of a placeholder. The binary's SSL_PROXY reads as a TLS switch but only sets the session cookie's Secure flag, besides making the secret mandatory, so the .env key is COOKIE_SESSION_SECURE and compose maps it to SSL_PROXY. Verified both ways: the cookie carries Secure only when the key is true. Nothing in the server reads X-Forwarded-Proto, so the proxy header is for logs. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com>

1 0

[phpmyadmin/scripts] f7e583: docker: use docker compose and remove dockerl script
by William Desportes 09 Nov '26

09 Nov '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/scripts Commit: f7e5832e295781bd028ab160e8f8356b14f20147 https://github.com/phpmyadmin/scripts/commit/f7e5832e295781bd028ab160e8f835… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-09 (Mon, 11 November 2026) +01:00 Changed paths: M infrastructure/sentry/README.md D infrastructure/sentry/dockerl Log Message: ----------- docker: use docker compose and remove dockerl script It is just easier for most users

1 0

[phpmyadmin/scripts] d2f1ed: mailman: update docs
by William Desportes 09 Nov '26

09 Nov '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/scripts Commit: d2f1edf5a0e19154c39afdf08ff8f514c976b2d0 https://github.com/phpmyadmin/scripts/commit/d2f1edf5a0e19154c39afdf08ff8f5… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-01 (Sun, 11 November 2026) +01:00 Changed paths: M mailman-moderation/README.md Log Message: ----------- mailman: update docs Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 749bb7230de1060b91879d13cb025b96daecd2e9 https://github.com/phpmyadmin/scripts/commit/749bb7230de1060b91879d13cb025b… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-09 (Mon, 11 November 2026) +01:00 Changed paths: A infrastructure/sentry/compose.yml D infrastructure/sentry/docker-compose.yml Log Message: ----------- docker: update to compose.yml and remove version header

1 0

[phpmyadmin/error-reporting-server] 75418c: tests: Pin the timestamp of the report routing tests
by William Desportes 09 Nov '26

09 Nov '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/error-reporting-server Commit: 75418c13a378bda6acdc8361228f79cd4669f683 https://github.com/phpmyadmin/error-reporting-server/commit/75418c13a378bda… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-02 (Mon, 11 November 2026) +01:00 Changed paths: M tests/TestCase/ReportTest.php Log Message: ----------- tests: Pin the timestamp of the report routing tests testReportRoutingSystem and testReportFromString compare what getReports() builds with a second call to getTimestampUTC(). The fixtures carry no date, so that method falls back to date() and both sides read the clock: when the two reads straddle a second boundary the arrays differ, which is what the last CI run reported, 2026-11-02T14:53:09 against 2026-11-02T14:53:08. Set the timestamp once, as c9be109151 should have when it added the comparison, so the value no longer depends on when the test runs. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 5595bc3ee002f035cdd0ee4c1893e49fd7cf9b22 https://github.com/phpmyadmin/error-reporting-server/commit/5595bc3ee002f03… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-07 (Sat, 11 November 2026) +01:00 Changed paths: M src/Controller/ReportsController.php M tests/TestCase/Controller/ReportsControllerTest.php Log Message: ----------- fix: Clear the notification when a report is opened The check that guards the delete reads $current_developer['Developer'], a key of an entity that has no such field: it was already wrong when 6aa5001d70 ported the code to CakePHP 3, and 41dfcd97de only added the null test in front of it. Array access on the entity answers null, so the method returned before deleting anything and no notification was ever cleared. Read the id of the entity instead. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 80bf4582f15e00197d0a121336b8793d1245c9ab https://github.com/phpmyadmin/error-reporting-server/commit/80bf4582f15e001… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-07 (Sat, 11 November 2026) +01:00 Changed paths: A tests/TestCase/Controller/AppControllerPagingTest.php M src/Controller/AppController.php M src/Controller/NotificationsController.php M src/Controller/ReportsController.php Log Message: ----------- security: Bound the page size of the data tables iDisplayLength is read from the query string and passed straight to the query, and both actions build every row of the answer in memory: an unauthenticated caller asks for the whole table with /reports/data_tables?iDisplayLength=100000000, one row per report with its version, name, message and location. Clamp it to the 100 rows the page offers, keep 25 when the value is absent or not a number, and refuse a negative offset. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 86f8fff2c9f73d79f206bfe66f80b4fcd1216332 https://github.com/phpmyadmin/error-reporting-server/commit/86f8fff2c9f73d7… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-07 (Sat, 11 November 2026) +01:00 Changed paths: M src/Controller/IncidentsController.php M src/Forwarding/Sentry.php M src/Model/Table/IncidentsTable.php M src/Report.php M tests/TestCase/Forwarding/SentryTest.php Log Message: ----------- security: Forward a report to Sentry only once it is stored and capped The ingest endpoint forwarded every payload to Sentry before looking at the answer of the storage, and from the raw request rather than from what was stored: a report the version filter refused, or one whose errors or stack was never capped, was still forwarded. 920c75d5c5 wired the call before the caps of the ingest existed, and nothing bounded the number of events one request could produce or the time the ingestion could wait for Sentry. Forward only an accepted report, from the capped payload, stop at 40 events per report, bound the two requests to 3 s of connection and 5 s in total, and log a Sentry failure instead of letting it fail the ingest and the notification email. The Sentry payload also reads type, stackTrace and file defensively: a PHP report that omits one of them raised a warning, and a missing type reached a string parameter. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: d3fbfa25d558e2aea61ce2da7c56aed8751b7159 https://github.com/phpmyadmin/error-reporting-server/commit/d3fbfa25d558e2a… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-07 (Sat, 11 November 2026) +01:00 Changed paths: M src/Controller/DevelopersController.php M templates/layout/default.php M tests/TestCase/Controller/DevelopersControllerTest.php Log Message: ----------- security: Sign the developer out on POST only logout() destroyed the session on any method since 6aa5001d70, and the layout reached it with a plain link: a page on another site signed the developer out of this application, which is the CSRF logout the audit describes. Answer only POST, and build the link with FormHelper so the request carries the CSRF token. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 9540c60c8a10ac274b0ffcf71f30a58613c9caee https://github.com/phpmyadmin/error-reporting-server/commit/9540c60c8a10ac2… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-07 (Sat, 11 November 2026) +01:00 Changed paths: M src/Controller/GithubController.php M tests/TestCase/Controller/GithubControllerTest.php Log Message: ----------- security: Keep the values of a report inside the Markdown of the issue The body of the issue is built by concatenation from the name, the message, the version and the description of a report, all written by a client without an account: a pipe adds a column to the table, a line break ends the row or starts a list, a fence closes the block, an HTML tag is rendered by GitHub, and an @ mentions whoever the value names, which notifies them. Keep a cell on one line with its pipe escaped, write the description in a block it cannot close, and neutralise the mentions. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 138abb5398d084e6b1da98d63943c7949ba67021 https://github.com/phpmyadmin/error-reporting-server/commit/138abb5398d084e… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-07 (Sat, 11 November 2026) +01:00 Changed paths: M config/app.default.php M config/app_ci.php M docs/server-setup.md M src/Controller/IncidentsController.php M src/Report.php M tests/TestCase/ReportTest.php Log Message: ----------- security: Read the client address instead of the forwarded header getUserId() salted the identity of a report with HTTP_CLIENT_IP, then HTTP_X_FORWARDED_FOR, then REMOTE_ADDR, since the class was written: the two first are written by the caller, so a report chose the address that groups it and that is shown to the developers. The test of 6aa5001d70 even pinned that behaviour. Read the address of the request instead, through the trusted proxies of Security.trustedProxies, and keep REMOTE_ADDR as the fallback so the identity of the reports already stored does not change. The setting is empty by default and documented in the server setup: a proxy is listed by its own address, never by a network the caller can reach. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: cd5dd9e98573ff2a78c000b8f5ad811ecd81196a https://github.com/phpmyadmin/error-reporting-server/commit/cd5dd9e98573ff2… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-07 (Sat, 11 November 2026) +01:00 Changed paths: A src/Github/PermissionChecker.php A tests/TestCase/Github/PermissionCheckerTest.php M src/Controller/DevelopersController.php M src/Middleware/AuthenticationMiddleware.php M tests/TestCase/Middleware/AuthenticationMiddlewareTest.php Log Message: ----------- security: Read the access of a developer again while the session lives The permission of a developer was decided at login from one answer of GitHub and kept in the session until it ended, without a limit: a developer who lost the write access of the repository kept it here for as long as their cookie lived, and the flag was a boolean derived from has_commit_access rather than the value itself (e452f05a13). Ask GitHub again when the last answer is older than 15 minutes, once per request at most, and keep what the session knew when the API cannot be asked. The login is stored at sign-in for that call, the decision reads has_commit_access, and the older read_only flag of an existing session is still honoured until the next sign-in. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: e29c9868f3511de9f37e8212fc11600e173e3ca6 https://github.com/phpmyadmin/error-reporting-server/commit/e29c9868f3511de… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-11-09 (Mon, 11 November 2026) +01:00 Changed paths: A src/Github/GithubApi.php A tests/TestCase/Github/GithubApiTest.php M phpstan-baseline.neon M src/Controller/Component/GithubApiComponent.php M src/Middleware/AuthenticationMiddleware.php M tests/TestCase/Controller/Component/GithubApiComponentTest.php D src/Github/PermissionChecker.php D tests/TestCase/Github/PermissionCheckerTest.php Log Message: ----------- github: Share one API class between the controllers and the middleware The permission read of the middleware was a class of its own, with an HTTP client of its own beside the one GithubApiComponent built for every request: two places to change when the API moves, two clients, and two lists of the roles that may write. Move the client, the requests, the token exchange and the reading of a permission into App\Github\GithubApi, which builds its client once and keeps it. GithubApiComponent delegates to it for the controllers, and the middleware uses it directly: it is not a controller, so it cannot reach a component, but it can share the class behind it. canCommitTo() answers null when it cannot ask the API, so the middleware keeps the answer it already had, and the component turns that into the refusal a controller needs. A missing login or token is not asked at all, which the first version of cd5dd9e985 had and the extracted class dropped: it asked GitHub with an empty user and read the 404 as a refusal. The exchange of the code for a token no longer reads a "state" key of the configuration, which warned whenever GithubConfig did not carry one, and the component that 5fbb8c5ec9 gave its client is now the only place that builds one. Signed-off-by: William Desportes <williamdes(a)wdes.fr> Co-Authored-By: DeepSeek <noreply(a)deepseek.com>

1 0

[phpmyadmin/phpmyadmin] 1d0362: Update po files
by phpMyAdmin bot 07 Nov '26

07 Nov '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/phpmyadmin Commit: 1d0362d214490512967f1d1ec2a7d036269c787c https://github.com/phpmyadmin/phpmyadmin/commit/1d0362d214490512967f1d1ec2a… Author: phpMyAdmin bot <bot(a)phpmyadmin.net> Date: 2026-11-08 (Sun, 11 November 2026) +00:00 Changed paths: M resources/po/af.po M resources/po/am.po M resources/po/ar.po M resources/po/ar_LY.po M resources/po/ast.po M resources/po/az.po M resources/po/be.po M resources/po/be(a)latin.po M resources/po/ber.po M resources/po/bg.po M resources/po/bn.po M resources/po/br.po M resources/po/brx.po M resources/po/bs.po M resources/po/ca.po M resources/po/ckb.po M resources/po/cs.po M resources/po/cy.po M resources/po/da.po M resources/po/de.po M resources/po/el.po M resources/po/en_GB.po M resources/po/enm.po M resources/po/eo.po M resources/po/es.po M resources/po/et.po M resources/po/eu.po M resources/po/fa.po M resources/po/fi.po M resources/po/fil.po M resources/po/fr.po M resources/po/fy.po M resources/po/gl.po M resources/po/gu.po M resources/po/he.po M resources/po/hi.po M resources/po/hr.po M resources/po/hu.po M resources/po/hy.po M resources/po/ia.po M resources/po/id.po M resources/po/ig.po M resources/po/it.po M resources/po/ja.po M resources/po/ka.po M resources/po/kab.po M resources/po/kk.po M resources/po/km.po M resources/po/kn.po M resources/po/ko.po M resources/po/ksh.po M resources/po/ku.po M resources/po/ky.po M resources/po/li.po M resources/po/lo.po M resources/po/lt.po M resources/po/lv.po M resources/po/mk.po M resources/po/ml.po M resources/po/mn.po M resources/po/ms.po M resources/po/my.po M resources/po/nb.po M resources/po/ne.po M resources/po/nl.po M resources/po/nn.po M resources/po/pa.po M resources/po/phpmyadmin.pot M resources/po/pl.po M resources/po/pt.po M resources/po/pt_BR.po M resources/po/rcf.po M resources/po/ro.po M resources/po/ru.po M resources/po/si.po M resources/po/sk.po M resources/po/sl.po M resources/po/sq.po M resources/po/sr.po M resources/po/sr(a)latin.po M resources/po/sv.po M resources/po/ta.po M resources/po/te.po M resources/po/th.po M resources/po/tk.po M resources/po/tr.po M resources/po/tt.po M resources/po/tzm.po M resources/po/ug.po M resources/po/uk.po M resources/po/ur.po M resources/po/uz.po M resources/po/uz(a)latin.po M resources/po/vi.po M resources/po/vls.po M resources/po/zh_CN.po M resources/po/zh_TW.po Log Message: ----------- Update po files [ci skip] Signed-off-by: phpMyAdmin bot <bot(a)phpmyadmin.net>

1 0

[phpmyadmin/phpmyadmin] 718333: Update po files
by phpMyAdmin bot 07 Nov '26

07 Nov '26

Branch: refs/heads/QA_5_2 Home: https://github.com/phpmyadmin/phpmyadmin Commit: 7183338d58ed53842959021a254bf47aaa411e9c https://github.com/phpmyadmin/phpmyadmin/commit/7183338d58ed53842959021a254… Author: phpMyAdmin bot <bot(a)phpmyadmin.net> Date: 2026-11-07 (Sat, 11 November 2026) +00:00 Changed paths: M po/af.po M po/am.po M po/ar.po M po/ar_LY.po M po/ast.po M po/az.po M po/be.po M po/be(a)latin.po M po/ber.po M po/bg.po M po/bn.po M po/br.po M po/brx.po M po/bs.po M po/ca.po M po/ckb.po M po/cs.po M po/cy.po M po/da.po M po/de.po M po/el.po M po/en_GB.po M po/enm.po M po/eo.po M po/es.po M po/et.po M po/eu.po M po/fa.po M po/fi.po M po/fil.po M po/fr.po M po/fy.po M po/gl.po M po/gu.po M po/he.po M po/hi.po M po/hr.po M po/hu.po M po/hy.po M po/ia.po M po/id.po M po/ig.po M po/it.po M po/ja.po M po/ka.po M po/kab.po M po/kk.po M po/km.po M po/kn.po M po/ko.po M po/ksh.po M po/ku.po M po/ky.po M po/li.po M po/lo.po M po/lt.po M po/lv.po M po/mk.po M po/ml.po M po/mn.po M po/ms.po M po/my.po M po/nb.po M po/ne.po M po/nl.po M po/nn.po M po/pa.po M po/phpmyadmin.pot M po/pl.po M po/pt.po M po/pt_BR.po M po/rcf.po M po/ro.po M po/ru.po M po/si.po M po/sk.po M po/sl.po M po/sq.po M po/sr.po M po/sr(a)latin.po M po/sv.po M po/ta.po M po/te.po M po/th.po M po/tk.po M po/tr.po M po/tt.po M po/tzm.po M po/ug.po M po/uk.po M po/ur.po M po/uz.po M po/uz(a)latin.po M po/vi.po M po/vls.po M po/zh_CN.po M po/zh_TW.po Log Message: ----------- Update po files [ci skip] Signed-off-by: phpMyAdmin bot <bot(a)phpmyadmin.net>

1 0

[phpmyadmin/phpmyadmin] 324551: Specify that the query in query encryption is the URL query
by Maurício Meneghini Fauth 07 Nov '26

07 Nov '26

Branch: refs/heads/QA_5_2 Home: https://github.com/phpmyadmin/phpmyadmin Commit: 324551a1049553a8ba4cbaf6a12884da208ca4a2 https://github.com/phpmyadmin/phpmyadmin/commit/324551a1049553a8ba4cbaf6a12… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-11-06 (Fri, 11 November 2026) -03:00 Changed paths: M libraries/classes/Controllers/HomeController.php Log Message: ----------- Specify that the query in query encryption is the URL query And not an SQL query. Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Commit: dbd27e633e0f72b7e306824fce19d903fba5f036 https://github.com/phpmyadmin/phpmyadmin/commit/dbd27e633e0f72b7e306824fce1… Author: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br> Date: 2026-11-07 (Sat, 11 November 2026) -03:00 Changed paths: M libraries/classes/Controllers/HomeController.php Log Message: ----------- Merge #20612 Specify that the query in 'query encryption' is the URL query Closes #20612 Signed-off-by: Maurício Meneghini Fauth <mauricio(a)mfauth.com.br>

1 0

[phpmyadmin/phpmyadmin] dedf56: Update po files
by phpMyAdmin bot 31 Oct '26

31 Oct '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/phpmyadmin Commit: dedf56d2875c0d0e3a9b110a9ee7eec5d943dfb4 https://github.com/phpmyadmin/phpmyadmin/commit/dedf56d2875c0d0e3a9b110a9ee… Author: phpMyAdmin bot <bot(a)phpmyadmin.net> Date: 2026-11-01 (Sun, 11 November 2026) +00:00 Changed paths: M resources/po/af.po M resources/po/am.po M resources/po/ar.po M resources/po/ar_LY.po M resources/po/ast.po M resources/po/az.po M resources/po/be.po M resources/po/be(a)latin.po M resources/po/ber.po M resources/po/bg.po M resources/po/bn.po M resources/po/br.po M resources/po/brx.po M resources/po/bs.po M resources/po/ca.po M resources/po/ckb.po M resources/po/cs.po M resources/po/cy.po M resources/po/da.po M resources/po/de.po M resources/po/el.po M resources/po/en_GB.po M resources/po/enm.po M resources/po/eo.po M resources/po/es.po M resources/po/et.po M resources/po/eu.po M resources/po/fa.po M resources/po/fi.po M resources/po/fil.po M resources/po/fr.po M resources/po/fy.po M resources/po/gl.po M resources/po/gu.po M resources/po/he.po M resources/po/hi.po M resources/po/hr.po M resources/po/hu.po M resources/po/hy.po M resources/po/ia.po M resources/po/id.po M resources/po/ig.po M resources/po/it.po M resources/po/ja.po M resources/po/ka.po M resources/po/kab.po M resources/po/kk.po M resources/po/km.po M resources/po/kn.po M resources/po/ko.po M resources/po/ksh.po M resources/po/ku.po M resources/po/ky.po M resources/po/li.po M resources/po/lo.po M resources/po/lt.po M resources/po/lv.po M resources/po/mk.po M resources/po/ml.po M resources/po/mn.po M resources/po/ms.po M resources/po/my.po M resources/po/nb.po M resources/po/ne.po M resources/po/nl.po M resources/po/nn.po M resources/po/pa.po M resources/po/phpmyadmin.pot M resources/po/pl.po M resources/po/pt.po M resources/po/pt_BR.po M resources/po/rcf.po M resources/po/ro.po M resources/po/ru.po M resources/po/si.po M resources/po/sk.po M resources/po/sl.po M resources/po/sq.po M resources/po/sr.po M resources/po/sr(a)latin.po M resources/po/sv.po M resources/po/ta.po M resources/po/te.po M resources/po/th.po M resources/po/tk.po M resources/po/tr.po M resources/po/tt.po M resources/po/tzm.po M resources/po/ug.po M resources/po/uk.po M resources/po/ur.po M resources/po/uz.po M resources/po/uz(a)latin.po M resources/po/vi.po M resources/po/vls.po M resources/po/zh_CN.po M resources/po/zh_TW.po Log Message: ----------- Update po files [ci skip] Signed-off-by: phpMyAdmin bot <bot(a)phpmyadmin.net>

1 0

[phpmyadmin/scripts] c32749: mailman: improve script to handle auto moderation
by William Desportes 30 Oct '26

30 Oct '26

Branch: refs/heads/master Home: https://github.com/phpmyadmin/scripts Commit: c327497a5b5da48bfd66ae8655edfb9ffef017e7 https://github.com/phpmyadmin/scripts/commit/c327497a5b5da48bfd66ae8655edfb… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-30 (Fri, 10 October 2026) +01:00 Changed paths: M mailman-moderation/README.md M mailman-moderation/phpmyadmin-mailman-moderation.php Log Message: ----------- mailman: improve script to handle auto moderation The options where a bit unclear. I had focused on a working list. Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 2ceef2de2be05516f0c76c6863d871d2972c02a3 https://github.com/phpmyadmin/scripts/commit/2ceef2de2be05516f0c76c6863d871… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-30 (Fri, 10 October 2026) +01:00 Changed paths: M mailman-moderation/phpmyadmin-mailman-moderation.php Log Message: ----------- mailman: allow to specify ids in range even if some are missing Co-Authored-By: DeepSeek <noreply(a)deepseek.com> Commit: 3c27bd996d1450d1839a760115154136a21a69b7 https://github.com/phpmyadmin/scripts/commit/3c27bd996d1450d1839a7601151541… Author: William Desportes <williamdes(a)wdes.fr> Date: 2026-10-30 (Fri, 10 October 2026) +01:00 Changed paths: A mailman-moderation/BanRefused.php A mailman-moderation/HttpFailure.php M mailman-moderation/composer.json M mailman-moderation/phpmyadmin-mailman-moderation.php Log Message: ----------- mailman: coding standard fixes and phpstans Co-Authored-By: DeepSeek <noreply(a)deepseek.com>

1 0