Skip to content

Harden GitHub workflows#159

Merged
samdark merged 61 commits into
masterfrom
fix-zizmor-workflows
Jul 6, 2026
Merged

Harden GitHub workflows#159
samdark merged 61 commits into
masterfrom
fix-zizmor-workflows

Conversation

@samdark

@samdark samdark commented Jun 18, 2026

Copy link
Copy Markdown
Member

Summary

  • Pin reusable yiisoft/actions workflows to a commit SHA.
  • Set read-only GITHUB_TOKEN permissions for read-only workflows.

Validation

  • zizmor --no-progress --no-exit-codes strings/.github/workflows

dependabot Bot and others added 30 commits January 10, 2024 08:51
@dependabot
Update rector/rector requirement from ^0.18.3 to ^0.19.0 (#124)
8705f91 
Updates the requirements on [rector/rector](https://github.com/rectorphp/rector) to permit the latest version.
- [Release notes](https://github.com/rectorphp/rector/releases)
- [Commits](rectorphp/rector@0.18.3...0.19.0)

---
updated-dependencies:
- dependency-name: rector/rector
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Update rector/rector requirement from ^0.19.0 to ^1.0.0 (#125)
57e7c3e 
Updates the requirements on [rector/rector](https://github.com/rectorphp/rector) to permit the latest version.
- [Release notes](https://github.com/rectorphp/rector/releases)
- [Commits](rectorphp/rector@0.19.0...1.0.0)

---
updated-dependencies:
- dependency-name: rector/rector
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@Arhell
update irc link (#127)
1ffc263
@vjik
Add more specific psalm type for result of `StringHelper::base64UrlEn…
da1a178 
…code()` method (#128)
@luizcmarin @vjik
Fix docs (#130)
de94166 
Co-authored-by: Sergei Predvoditelev <sergei@predvoditelev.ru>
@luizcmarin
Fix docs (#131)
530048a
@luizcmarin
Update UPGRADE.md (#132)
47a3675
@vjik
Fix readme badges (#133)
a7217c8
@vjik
Remove scrutinizer (#134)
e7a06ae
@vjik
Fix psalm errors (#135)
fccb0ef
@dependabot @vjik
Update rector/rector requirement from ^1.0.0 to ^2.0.3 (#136)
0e09941 
Co-authored-by: Sergei Predvoditelev <sergei@predvoditelev.ru>
@vjik
Add StringHelper::matchAnyRegex() (#137)
3230b19
@vjik
Release version 2.5.0
5063d70
@vjik
Prepare for next release
ae45a5c
@vjik
Improve Rector CI action (#139)
2bf12f1
@ferrumfist
Explicitly mark nullable parameters
eff507e
@vjik
Bump minimal required PHP version to 8.1 (#140)
4cdcc85
@vjik
Fix StringHelper::parsePath() for empty string (#141)
4a1623d
@vjik
Check string on a valid UTF-8 in StringHelper trim methods (#142)
59deb2e
@vjik @Tigrov
Add PHP 8.4 (#143)
8accf08 
Co-authored-by: Sergei Tigrov <rrr-r@ya.ru>
@vjik
Release version 2.6.0
eeb087d
@vjik
Prepare for next release
220caa7
@vjik
Fix psalm errors + Update dev deps (#145)
284f7a7
@samdark @vjik
Add benchmarks for Inflector (#144)
5d59732 
Co-authored-by: samdark <47294+samdark@users.noreply.github.com>
Co-authored-by: Sergei Predvoditelev <sergei@predvoditelev.ru>
@samdark
Fix #119: Fix incorrect pluralization of words ending in "tion", "sio…
2d5fea1 
…n" and "gion"

Co-authored-by: Alexander Makarov <sam@rmcreative.ru>
@vjik @samdark
Fix #3: Add StringHelper::truncateWordsByLength() method to truncat…
e4aa788 
…e text by character length while preserving word boundaries

Co-authored-by: Sergei Predvoditelev <sergei@predvoditelev.ru>
Co-authored-by: Alexander Makarov <sam@rmcreative.ru>
@mspirkov
Add NumericHelper::convertHumanReadableSizeToBytes() method (#148)
c877036
@mspirkov @vjik
Minor edits in NumericHelper (#149)
34bba9e 
Co-authored-by: Sergei Predvoditelev <sergey.predvoditelev@gmail.com>
@vjik
Add PHP 8.5 support (#150)
bce4a7c
@vjik
Release version 2.7.0
9bc7fea
@samdark samdark mentioned this pull request Jun 24, 2026
Closed
@coderabbitai

coderabbitai Bot commented Jul 6, 2026

Copy link
Copy Markdown

Caution

Review failed

An error occurred during the review process. Please try again later.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix-zizmor-workflows

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@samdark samdark force-pushed the fix-zizmor-workflows branch from 4ffa01b to ca2728e Compare July 6, 2026 10:56
@samdark samdark merged commit 25c0221 into master Jul 6, 2026
17 of 22 checks passed
@samdark samdark deleted the fix-zizmor-workflows branch July 6, 2026 11:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

8 participants

@samdark @Arhell @vjik @luizcmarin @ferrumfist @mspirkov