Skip to content

fix(deps): manage selectable WordPress images with Renovate - #41

Merged
vitormattos merged 6 commits into
mainfrom
security/php-rce-fixes-2026-10-21
Oct 22, 2026
Merged

fix(deps): manage selectable WordPress images with Renovate#41
vitormattos merged 6 commits into
mainfrom
security/php-rce-fixes-2026-10-21

Conversation

@vitormattos

@vitormattos vitormattos commented Oct 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

Summary

  • Renovate updates the official WordPress base image tag and digest used by CI, including republished tags.
  • Preserve local VERSION_WORDPRESS and VERSION_PHP build arguments, plus a manual workflow image override.
  • Remove the custom PHP minimum-version gate; retain reviewed builds before publication.

Validation

  • Renovate configuration, patch/digest-update simulations, Actionlint and Bats passed.
  • Buildx resolved both the pinned default and an alternative PHP version.
  • GitHub image build pending.

@vitormattos
fix(security): require PHP patched for critical RCEs
316d772 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test(ci): verify patched PHP before registry publication
9f54e15 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
fix(deps): pin patched WordPress image for Dependabot
a3114d3 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
fix(build): restore configurable WordPress and PHP versions
5e899d3 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos vitormattos changed the title fix(security): Block vulnerable PHP from WordPress image publication fix(security): keep WordPress/PHP versions configurable Oct 22, 2026
@vitormattos
fix(deps): manage selectable WordPress base with Renovate
c7ac7f7 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos vitormattos changed the title fix(security): keep WordPress/PHP versions configurable fix(deps): manage selectable WordPress images with Renovate Oct 22, 2026
@vitormattos
docs: remove redundant dependency update instructions
76180d8 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
vitormattos merged commit 591bc61 into main Oct 22, 2026
4 checks passed
@vitormattos
vitormattos deleted the security/php-rce-fixes-2026-10-21 branch October 22, 2026 19:48
@vitormattos vitormattos mentioned this pull request Oct 22, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@vitormattos