Skip to content

Audit fixes (2026-09) - #3

Merged
luthermonson merged 1 commit into
mainfrom
fix/audit-2026-09
Sep 11, 2026
Merged

luthermonson merged 1 commit into
mainfrom
fix/audit-2026-09

Conversation

@luthermonson

Copy link
Copy Markdown
Contributor

Audited fixes for php-worker (see per-repo details). Config-key migration to [php.worker] (ePHPm #462, the old flat keys are hard startup errors), multipart name[] upload fix where applicable, request-isolation/security fixes for wordpress-worker, and CI (phpunit on PHP 8.2/8.3/8.4). Tests added for every behavioral/security change. wordpress-worker's podman e2e must be re-run manually.

- README/stub: [php] worker_populate_superglobals -> [php.worker] populate_superglobals
- README: 'worker processes' -> worker threads (ZTS threads in one process; pool = [php] concurrency)
- add GitHub Actions CI (composer install + phpunit on PHP 8.2/8.3/8.4)
- native primitive stub signatures left unchanged (accurate)
@luthermonson
luthermonson merged commit 3d9c369 into main Sep 11, 2026
3 checks passed
@luthermonson
luthermonson deleted the fix/audit-2026-09 branch September 11, 2026 06:35
@ephpm

ephpm Bot commented Sep 11, 2026 •

Copy link
Copy Markdown

ePHPm Preview — removed

Preview deployment has been torn down.

@ephpm
ephpm Bot temporarily deployed to preview-pr-3 September 11, 2026 06:36 Inactive
@ephpm
ephpm Bot temporarily deployed to preview-pr-3 September 11, 2026 06:36 Inactive

This branch was previously deployed

1 inactive deployment
preview-pr-3 — d16b10fa Deployed Sep 11, 2026 by ephpm[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant