Branch: refs/heads/master Home: https://github.com/phpmyadmin/error-reporting-server Commit: c0a78134b3df0b0ed0419a816b149a3ac03a2b33 https://github.com/phpmyadmin/error-reporting-server/commit/c0a78134b3df0b0e... Author: William Desportes <williamdes@wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M config/app.default.php M config/app_ci.php Log Message: ----------- Restore the cron_jobs log scope The commands log with the cron_jobs scope since 6aa5001d70 and the README documents a logs/cron_jobs.log file, but the Log configuration lost the scope during the CakePHP 5 upgrade: every message landed in debug.log. Co-authored-by: DeepSeek <noreply@deepseek.com> Signed-off-by: William Desportes <williamdes@wdes.fr> Commit: da8a981738c85326b9298e4133917a8a716ed69a https://github.com/phpmyadmin/error-reporting-server/commit/da8a981738c85326... Author: William Desportes <williamdes@wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M README.md Log Message: ----------- Fix the mistakes of the README - The plugins sentence named debug kit without saying it is a development dependency, and an OAuth component that is not a package: the GitHub login is implemented in DevelopersController. - The web server pointed at the extraction directory: CakePHP has to be served from webroot, like the examples below do. - The "configure the web server" link pointed at the OAuth section. - The requirements were missing curl, json and pdo_mysql, and the database is MariaDB 11.8 on Debian 13 now. - The PHP-FPM comment still said php7 for a php8.4 socket. - The configuration step copied over the config/app.php that composer install generates, and did not mention AcceptedReportsVersions, which a missing key makes drop every report. - Normalized the bin/cake and config paths of the command sections. Co-authored-by: DeepSeek <noreply@deepseek.com> Signed-off-by: William Desportes <williamdes@wdes.fr> Commit: c848805e5dc2cb6228442db65a04664ec05b680f https://github.com/phpmyadmin/error-reporting-server/commit/c848805e5dc2cb62... Author: William Desportes <williamdes@wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M phpstan-baseline.neon M src/Controller/EventsController.php M tests/TestCase/Controller/EventsControllerTest.php M tests/TestCase/Controller/EventsSecurityTest.php Log Message: ----------- Check the webhook signature against the request body getHash() hashed file_get_contents('php://input') while the payload was read from the request, so the signature was checked against a body that is not necessarily the one that gets processed. In the test harness php://input is empty and every correctly signed delivery was refused with a 401. Read the body once and use it for both the signature and the JSON, which also removes the string|false of file_get_contents from the baseline. Co-authored-by: DeepSeek <noreply@deepseek.com> Signed-off-by: William Desportes <williamdes@wdes.fr> Commit: add2c40d2cbec3cc752a2e38eeabe8e228468576 https://github.com/phpmyadmin/error-reporting-server/commit/add2c40d2cbec3cc... Author: William Desportes <williamdes@wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M README.md M src/Controller/EventsController.php M tests/TestCase/Controller/EventsSecurityTest.php Log Message: ----------- Do not declare a content type for the answers that have no content The webhook answered text/html; charset=UTF-8 on every response, even the 204 ones that have no body: the Content-Type describes the content of the message (RFC 9110 section 8.3) and a 204 must not have any (section 15.3.5). CakePHP already removes the header from a 204. Answer the refusals with a JSON body and the matching content type instead, so the header tells the truth and the reason of the refusal can be read in the Recent Deliveries of GitHub. Co-authored-by: DeepSeek <noreply@deepseek.com> Signed-off-by: William Desportes <williamdes@wdes.fr> Commit: a74a99e7edd0d171a800e35f7e59c7b21f491967 https://github.com/phpmyadmin/error-reporting-server/commit/a74a99e7edd0d171... Author: William Desportes <williamdes@wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: A docs/github-webhook.md M README.md Log Message: ----------- Move the GitHub webhook documentation to docs/github-webhook.md The README described the whole hook, which is a topic of its own: the repository to hook, the statuses a delivery changes, the answers of the endpoint and the synchronization action to run when a delivery is missed. The README keeps the setup line and links to the page. Co-authored-by: DeepSeek <noreply@deepseek.com> Signed-off-by: William Desportes <williamdes@wdes.fr> Commit: e1fdd2031d3248253ea2a6805082c3cd0bd31d3c https://github.com/phpmyadmin/error-reporting-server/commit/e1fdd2031d324825... Author: William Desportes <williamdes@wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: A docs/Caddyfile A docs/apache.conf A docs/lighttpd.conf A docs/nginx.conf A docs/server-setup.md M README.md Log Message: ----------- Move the web server setup to docs/server-setup.md and one file per server The README carried the examples of four web servers inline. Give each one its file, docs/apache.conf, docs/Caddyfile, docs/lighttpd.conf and docs/nginx.conf, and explain in docs/server-setup.md what is common to them: the document root, the permissions, the PHP-FPM pool and the application URL. While moving them: - The Apache example now sets AllowOverride All, its .htaccess is what sends every request to index.php and the example answered 404 without it. - The nginx example no longer listens on 443: nginx refuses to start with a ssl listener that has no certificate, the two lines are commented with the certificate they need. - The lighttpd example gets the fastcgi.server block it was missing. - The logs of the Apache example used the RedHat paths. - The README headings were not all at the same level. Co-authored-by: DeepSeek <noreply@deepseek.com> Signed-off-by: William Desportes <williamdes@wdes.fr> Commit: 415276f06cd9a908c0762d1251c1b11706844067 https://github.com/phpmyadmin/error-reporting-server/commit/415276f06cd9a908... Author: William Desportes <williamdes@wdes.fr> Date: 2026-10-27 (Tue, 10 October 2026) +01:00 Changed paths: M .gitattributes Log Message: ----------- Do not ship the docs directory in the distribution archives Co-authored-by: DeepSeek <noreply@deepseek.com> Signed-off-by: William Desportes <williamdes@wdes.fr>