deps(deps): update actions/checkout action to v5 #160

renovate · 2025-08-11T13:00:09Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v4.2.2` -> `v5.0.0`

Release Notes

actions/checkout (actions/checkout)

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

`v4.3.0`

Compare Source

What's Changed

docs: update README.md by @motss in https://github.com/actions/checkout/pull/1971
Add internal repos for checking out multiple repositories by @mouismail in https://github.com/actions/checkout/pull/1977
Documentation update - add recommended permissions to Readme by @benwells in https://github.com/actions/checkout/pull/2043
Adjust positioning of user email note and permissions heading by @joshmgross in https://github.com/actions/checkout/pull/2044
Update README.md by @nebuk89 in https://github.com/actions/checkout/pull/2194
Update CODEOWNERS for actions by @TingluoHuang in https://github.com/actions/checkout/pull/2224
Update package dependencies by @salmanmkc in https://github.com/actions/checkout/pull/2236
Prepare release v4.3.0 by @salmanmkc in https://github.com/actions/checkout/pull/2237

New Contributors

@motss made their first contribution in https://github.com/actions/checkout/pull/1971
@mouismail made their first contribution in https://github.com/actions/checkout/pull/1977
@benwells made their first contribution in https://github.com/actions/checkout/pull/2043
@nebuk89 made their first contribution in https://github.com/actions/checkout/pull/2194
@salmanmkc made their first contribution in https://github.com/actions/checkout/pull/2236

Full Changelog: actions/checkout@v4...v4.3.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2025-08-11T13:01:08Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:6f8a2ada5893c8f7a27d331450c971f2655d0c525029d5ec27c64a1ad04f88a9`
vulnerabilities
platform	linux/amd64
size	71 MB
packages	121

📦 Base Image php:2bc2a355c610a5ce2f4854d785c740aafe346f652caa7a4960796338a17a0ffe

also known as	`8.3-fpm-alpine` `8.3-fpm-alpine3.22` `8.3.24-fpm-alpine` `8.3.24-fpm-alpine3.22`
digest	`sha256:994a36314a28fed17d2d9d66ff694817dcf51343c7d42e1890ec75b3406a3caf`
vulnerabilities

github-actions · 2025-08-11T13:01:11Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:b21a61c089a659270cf2148f305d8d766a05bdd3272ea3fa96b59ab9f34d1215`
vulnerabilities
platform	linux/amd64
size	91 MB
packages	139

📦 Base Image php:8.1-alpine

also known as	`8.1-alpine3.21` `8.1-cli-alpine` `8.1-cli-alpine3.21` `8.1.33-alpine` `8.1.33-alpine3.21` `8.1.33-cli-alpine` `8.1.33-cli-alpine3.21` `84499e7665570bbef8ca20d15c642d8d9485a887d6be7a8b335ca33b5d3126f0`
digest	`sha256:6ed5103426b2c742dcc4721afa9864e7faaedcbb84c92410762d0c5162a8bdb2`
vulnerabilities

setuptools 70.3.0 (pypi)

pkg:pypi/setuptools@70.3.0

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected range	`<78.1.1`
Fixed version	`78.1.1`
CVSS Score	`7.7`
CVSS Vector	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P`
EPSS Score	`0.139%`
EPSS Percentile	`35th percentile`

Description

Summary

A path traversal vulnerability in PackageIndex was fixed in setuptools version 78.1.1

Details
 def _download_url(self, url, tmpdir): # Determine download filename # name, _fragment = egg_info_for_url(url) if name: while '..' in name: name = name.replace('..', '.').replace('\\', '_') else: name = "__downloaded__" # default if URL has no path contents if name.endswith('.[egg.zip](http://egg.zip/)'): name = name[:-4] # strip the extra .zip before download --> filename = os.path.join(tmpdir, name) 
Here: https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88

os.path.join() discards the first argument tmpdir if the second begins with a slash or drive letter.
name is derived from a URL without sufficient sanitization. While there is some attempt to sanitize by replacing instances of '..' with '.', it is insufficient.

Risk Assessment

As easy_install and package_index are deprecated, the exploitation surface is reduced.
However, it seems this could be exploited in a similar fashion like GHSA-r9hx-vwmv-q579, and as described by POC 4 in GHSA-cx63-2mw6-8hw5 report: via malicious URLs present on the pages of a package index.

Impact

An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

References

https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5
pypa/setuptools#4946

github-actions · 2025-08-11T13:01:11Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.3-fpm-alpine

Name	8.3.24-fpm-alpine3.22
Digest	sha256:994a36314a28fed17d2d9d66ff694817dcf51343c7d42e1890ec75b3406a3caf
Vulnerabilities
Pushed	1 week ago
Size	33 MB
Packages	61
Flavor	alpine
OS	3.22
Runtime	8.3.24

The base image is also available under the supported tag(s): 8.3-fpm-alpine3.22, 8.3.24-fpm-alpine, 8.3.24-fpm-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.4-fpm-alpine` Image has same number of vulnerabilities Also known as: 8.4.11-fpm-alpine 8.4.11-fpm-alpine3.22 8.4-fpm-alpine3.22 8-fpm-alpine 8-fpm-alpine3.22 fpm-alpine fpm-alpine3.22	Benefits: Same OS detected Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.22	1 week ago

github-actions · 2025-08-11T13:01:15Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:52db8b88e2146d170adbcd1c41c440ae730f00125af83f8388c33d463f83e968`
vulnerabilities
platform	linux/amd64
size	72 MB
packages	118

📦 Base Image php:8.1-alpine

also known as	`8.1-alpine3.21` `8.1-cli-alpine` `8.1-cli-alpine3.21` `8.1.33-alpine` `8.1.33-alpine3.21` `8.1.33-cli-alpine` `8.1.33-cli-alpine3.21` `84499e7665570bbef8ca20d15c642d8d9485a887d6be7a8b335ca33b5d3126f0`
digest	`sha256:6ed5103426b2c742dcc4721afa9864e7faaedcbb84c92410762d0c5162a8bdb2`
vulnerabilities

github-actions · 2025-08-11T13:01:16Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.1-alpine

Name	8.1.33-alpine3.21
Digest	sha256:6ed5103426b2c742dcc4721afa9864e7faaedcbb84c92410762d0c5162a8bdb2
Vulnerabilities
Pushed	1 week ago
Size	36 MB
Packages	59
Flavor	alpine
OS	3.21
Runtime	8.1.33

The base image is also available under the supported tag(s): 8.1-alpine3.21, 8.1-cli-alpine, 8.1-cli-alpine3.21, 8.1.33-alpine, 8.1.33-alpine3.21, 8.1.33-cli-alpine, 8.1.33-cli-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed
`8.1-alpine3.22` Patch runtime version update Also known as: 8.1.33-cli-alpine3.22 8.1-cli-alpine3.22 8.1.33-alpine3.22	Benefits: Patch runtime version update Same OS detected Image has similar size Image has same number of vulnerabilities Image contains similar number of packages Image details: Size: 36 MB Flavor: alpine OS: 3.22 Runtime: 8.1.33	1 week ago
`8.4-alpine` Minor runtime version update Also known as: 8.4.11-cli-alpine 8.4.11-cli-alpine3.22 8.4-cli-alpine 8.4-cli-alpine3.22 8-cli-alpine 8-cli-alpine3.22 cli-alpine cli-alpine3.22 alpine alpine3.22 8.4.11-alpine 8.4.11-alpine3.22 8.4-alpine3.22 8-alpine 8-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains similar number of packages Image details: Size: 42 MB Flavor: alpine OS: 3.22 Runtime: 8.4.11	1 week ago
`8.4-alpine3.21` Minor runtime version update Also known as: 8.4.11-cli-alpine3.21 8.4-cli-alpine3.21 8-cli-alpine3.21 cli-alpine3.21 alpine3.21 8.4.11-alpine3.21 8-alpine3.21	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 42 MB Flavor: alpine OS: 3.21 Runtime: 8.4.11	1 week ago
`8.3-alpine` Minor runtime version update Also known as: 8.3.24-cli-alpine 8.3.24-cli-alpine3.22 8.3-cli-alpine 8.3-cli-alpine3.22 8.3.24-alpine 8.3.24-alpine3.22 8.3-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains similar number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.22 Runtime: 8.3.24	1 week ago
`8.3-alpine3.21` Minor runtime version update Also known as: 8.3.24-cli-alpine3.21 8.3-cli-alpine3.21 8.3.24-alpine3.21	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.21 Runtime: 8.3.24	1 week ago
`8.2-alpine` Minor runtime version update Also known as: 8.2.29-cli-alpine 8.2.29-cli-alpine3.22 8.2-cli-alpine 8.2-cli-alpine3.22 8.2.29-alpine 8.2.29-alpine3.22 8.2-alpine3.22	Benefits: Same OS detected Minor runtime version update Image has similar size Image has same number of vulnerabilities Image contains similar number of packages 8.2-alpine was pulled 1.8K times last month Image details: Size: 37 MB Flavor: alpine OS: 3.22 Runtime: 8.2.29	1 week ago
`8.2-alpine3.21` Minor runtime version update Also known as: 8.2.29-cli-alpine3.21 8.2-cli-alpine3.21 8.2.29-alpine3.21	Benefits: Same OS detected Minor runtime version update Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 36 MB Flavor: alpine OS: 3.21 Runtime: 8.2.29	1 week ago

github-actions · 2025-08-11T13:01:18Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.1-alpine

Name	8.1.33-alpine3.21
Digest	sha256:6ed5103426b2c742dcc4721afa9864e7faaedcbb84c92410762d0c5162a8bdb2
Vulnerabilities
Pushed	1 week ago
Size	36 MB
Packages	59
Flavor	alpine
OS	3.21
Runtime	8.1.33

The base image is also available under the supported tag(s): 8.1-alpine3.21, 8.1-cli-alpine, 8.1-cli-alpine3.21, 8.1.33-alpine, 8.1.33-alpine3.21, 8.1.33-cli-alpine, 8.1.33-cli-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed
`8.1-alpine3.22` Patch runtime version update Also known as: 8.1.33-cli-alpine3.22 8.1-cli-alpine3.22 8.1.33-alpine3.22	Benefits: Patch runtime version update Same OS detected Image has similar size Image has same number of vulnerabilities Image contains similar number of packages Image details: Size: 36 MB Flavor: alpine OS: 3.22 Runtime: 8.1.33	1 week ago
`8.4-alpine` Minor runtime version update Also known as: 8.4.11-cli-alpine 8.4.11-cli-alpine3.22 8.4-cli-alpine 8.4-cli-alpine3.22 8-cli-alpine 8-cli-alpine3.22 cli-alpine cli-alpine3.22 alpine alpine3.22 8.4.11-alpine 8.4.11-alpine3.22 8.4-alpine3.22 8-alpine 8-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains similar number of packages Image details: Size: 42 MB Flavor: alpine OS: 3.22 Runtime: 8.4.11	1 week ago
`8.4-alpine3.21` Minor runtime version update Also known as: 8.4.11-cli-alpine3.21 8.4-cli-alpine3.21 8-cli-alpine3.21 cli-alpine3.21 alpine3.21 8.4.11-alpine3.21 8-alpine3.21	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 42 MB Flavor: alpine OS: 3.21 Runtime: 8.4.11	1 week ago
`8.3-alpine` Minor runtime version update Also known as: 8.3.24-cli-alpine 8.3.24-cli-alpine3.22 8.3-cli-alpine 8.3-cli-alpine3.22 8.3.24-alpine 8.3.24-alpine3.22 8.3-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains similar number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.22 Runtime: 8.3.24	1 week ago
`8.3-alpine3.21` Minor runtime version update Also known as: 8.3.24-cli-alpine3.21 8.3-cli-alpine3.21 8.3.24-alpine3.21	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.21 Runtime: 8.3.24	1 week ago
`8.2-alpine` Minor runtime version update Also known as: 8.2.29-cli-alpine 8.2.29-cli-alpine3.22 8.2-cli-alpine 8.2-cli-alpine3.22 8.2.29-alpine 8.2.29-alpine3.22 8.2-alpine3.22	Benefits: Same OS detected Minor runtime version update Image has similar size Image has same number of vulnerabilities Image contains similar number of packages 8.2-alpine was pulled 1.8K times last month Image details: Size: 37 MB Flavor: alpine OS: 3.22 Runtime: 8.2.29	1 week ago
`8.2-alpine3.21` Minor runtime version update Also known as: 8.2.29-cli-alpine3.21 8.2-cli-alpine3.21 8.2.29-alpine3.21	Benefits: Same OS detected Minor runtime version update Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 36 MB Flavor: alpine OS: 3.21 Runtime: 8.2.29	1 week ago

github-actions · 2025-08-11T13:01:24Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:e2bb8c0918f00c7da7baaa505c4b7616002f56ca36269ddac6fd01ca475c546e`
vulnerabilities
platform	linux/amd64
size	70 MB
packages	121

📦 Base Image php:3effc26a4a8524994f6fd9e3c99f564bfdee610687d2d1d455996608118a910f

also known as	`8.2-fpm-alpine` `8.2-fpm-alpine3.22` `8.2.29-fpm-alpine` `8.2.29-fpm-alpine3.22`
digest	`sha256:a992b4453c7ffe21584867dced3a8b82c896603a10bfe3f7ec734729e26fcda5`
vulnerabilities

github-actions · 2025-08-11T13:01:28Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.2-fpm-alpine

Name	8.2.29-fpm-alpine3.22
Digest	sha256:a992b4453c7ffe21584867dced3a8b82c896603a10bfe3f7ec734729e26fcda5
Vulnerabilities
Pushed	1 week ago
Size	32 MB
Packages	61
Flavor	alpine
OS	3.22
Runtime	8.2.29

The base image is also available under the supported tag(s): 8.2-fpm-alpine3.22, 8.2.29-fpm-alpine, 8.2.29-fpm-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.3-fpm-alpine` Minor runtime version update Also known as: 8.3.24-fpm-alpine 8.3.24-fpm-alpine3.22 8.3-fpm-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 33 MB Flavor: alpine OS: 3.22 Runtime: 8.3.24	1 week ago
`8.4-fpm-alpine` Image has same number of vulnerabilities Also known as: 8.4.11-fpm-alpine 8.4.11-fpm-alpine3.22 8.4-fpm-alpine3.22 8-fpm-alpine 8-fpm-alpine3.22 fpm-alpine fpm-alpine3.22	Benefits: Same OS detected Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.22	1 week ago

github-actions · 2025-08-11T13:01:31Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:7a1496da1ad593935ac41543e28e3c620aafcc8cdf58c3875a10bc3e75250e56`
vulnerabilities
platform	linux/amd64
size	100 MB
packages	158

📦 Base Image php:8-alpine

also known as	`8-alpine3.22` `8-cli-alpine` `8-cli-alpine3.22` `8.4-alpine` `8.4-alpine3.22` `8.4-cli-alpine` `8.4-cli-alpine3.22` `8.4.11-alpine` `8.4.11-alpine3.22` `8.4.11-cli-alpine` `8.4.11-cli-alpine3.22` `alpine` `alpine3.22` `cli-alpine` `cli-alpine3.22` `e4f9bb894d0d59558802c50d63685a084b2b4fb7eb77398e783423beab34d48f`
digest	`sha256:4ff5194e9fa697591425fa74e939879cde8c0d0da6a53b4b247cc47f43eb7d91`
vulnerabilities

github-actions · 2025-08-11T13:01:33Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:0257fd84c321ac33800cdcab22456604d83b57f376440ddd390c1c97528c837a`
vulnerabilities
platform	linux/amd64
size	75 MB
packages	120

📦 Base Image php:8.2-alpine

also known as	`8.2-alpine3.22` `8.2-cli-alpine` `8.2-cli-alpine3.22` `8.2.29-alpine` `8.2.29-alpine3.22` `8.2.29-cli-alpine` `8.2.29-cli-alpine3.22` `d8f4974194fb8fae35528e5ff3f03ca3566ee2e502f953b7817e0cbefebf8a0d`
digest	`sha256:cdee2ae021443a0806843448eb174a188d6e6d85377a2e5a9bcd44161001fb8d`
vulnerabilities

github-actions · 2025-08-11T13:01:36Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8-alpine

Name	8.4.11-alpine3.22
Digest	sha256:4ff5194e9fa697591425fa74e939879cde8c0d0da6a53b4b247cc47f43eb7d91
Vulnerabilities
Pushed	1 week ago
Size	42 MB
Packages	60
Flavor	alpine
OS	3.22
Runtime	8.4.11

The base image is also available under the supported tag(s): 8-alpine3.22, 8-cli-alpine, 8-cli-alpine3.22, 8.4-alpine, 8.4-alpine3.22, 8.4-cli-alpine, 8.4-cli-alpine3.22, 8.4.11-alpine, 8.4.11-alpine3.22, 8.4.11-cli-alpine, 8.4.11-cli-alpine3.22, alpine, alpine3.22, cli-alpine, cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

github-actions · 2025-08-11T13:01:37Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.2-alpine

Name	8.2.29-alpine3.22
Digest	sha256:cdee2ae021443a0806843448eb174a188d6e6d85377a2e5a9bcd44161001fb8d
Vulnerabilities
Pushed	1 week ago
Size	37 MB
Packages	60
Flavor	alpine
OS	3.22
Runtime	8.2.29

The base image is also available under the supported tag(s): 8.2-alpine3.22, 8.2-cli-alpine, 8.2-cli-alpine3.22, 8.2.29-alpine, 8.2.29-alpine3.22, 8.2.29-cli-alpine, 8.2.29-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.4-alpine` Minor runtime version update Also known as: 8.4.11-cli-alpine 8.4.11-cli-alpine3.22 8.4-cli-alpine 8.4-cli-alpine3.22 8-cli-alpine 8-cli-alpine3.22 cli-alpine cli-alpine3.22 alpine alpine3.22 8.4.11-alpine 8.4.11-alpine3.22 8.4-alpine3.22 8-alpine 8-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 42 MB Flavor: alpine OS: 3.22 Runtime: 8.4.11	1 week ago
`8.3-alpine` Minor runtime version update Also known as: 8.3.24-cli-alpine 8.3.24-cli-alpine3.22 8.3-cli-alpine 8.3-cli-alpine3.22 8.3.24-alpine 8.3.24-alpine3.22 8.3-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.22 Runtime: 8.3.24	1 week ago

github-actions · 2025-08-11T13:01:39Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:7aed2b40002d087fcf6aa8f7efa7fb81e08be82a47929d8fde5bf905ed254806`
vulnerabilities
platform	linux/amd64
size	68 MB
packages	119

📦 Base Image oisupport/staging-amd64:8.1-fpm-alpine

also known as	`8.1-fpm-alpine3.21` `8.1.33-fpm-alpine` `8.1.33-fpm-alpine3.21` `da3eabe89d0c6c833838e3480d063d65f38577bc37dc976948b9352f3fb3d2fb`
digest	`sha256:4268ab6c629f48d1f77ff76b70355c1f384d95028c301d7a9d07a5f1644d4072`
vulnerabilities

github-actions · 2025-08-11T13:01:43Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is :8.1-fpm-alpine

Digest
Vulnerabilities
Size	0 B
Packages	0

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

github-actions · 2025-08-11T13:01:43Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:0387ee8525ce53a6baa3f1d1a2dffe555a8dfc446f6f25c24d215efd1f58f039`
vulnerabilities
platform	linux/amd64
size	75 MB
packages	121

📦 Base Image oisupport/staging-amd64:639b54f0afafe1a50d5dfdf4306b05aa09357ed7292390e3ed242ecfc57cc7e0

also known as	`8-fpm-alpine` `8-fpm-alpine3.22` `8.4-fpm-alpine` `8.4-fpm-alpine3.22` `8.4.11-fpm-alpine` `8.4.11-fpm-alpine3.22` `fpm-alpine` `fpm-alpine3.22`
digest	`sha256:dd4b38d02d63413f45aea06eaaf1ac2410b7cbe81b017efd3d6feefb142809b2`
vulnerabilities

github-actions · 2025-08-11T13:01:46Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is :639b54f0afafe1a50d5dfdf4306b05aa09357ed7292390e3ed242ecfc57cc7e0

Digest
Vulnerabilities
Size	0 B
Packages	0

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

github-actions · 2025-08-11T13:02:08Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:721569754e1977df7e01553f0b1f0141d81726e16232af5af57e30d0275864ad`
vulnerabilities
platform	linux/amd64
size	76 MB
packages	120

📦 Base Image php:8.3-alpine

also known as	`8.3-alpine3.22` `8.3-cli-alpine` `8.3-cli-alpine3.22` `8.3.24-alpine` `8.3.24-alpine3.22` `8.3.24-cli-alpine` `8.3.24-cli-alpine3.22` `b026e7d2fc6d7801e1af55dc42c7409b2f38d6b42c32494e9276b6ef40a28ee3`
digest	`sha256:f43a903b3e7fb97ce6ecdc8ab54c4beeebc913c38697740c6e9dd0d69fc37322`
vulnerabilities

github-actions · 2025-08-11T13:02:11Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:9dc96dcc144d4cfbf9a19bcfc0e9a72281ed297b7e3d87097cd73cf6bcea56e5`
vulnerabilities
platform	linux/amd64
size	81 MB
packages	120

📦 Base Image php:8-alpine

also known as	`8-alpine3.22` `8-cli-alpine` `8-cli-alpine3.22` `8.4-alpine` `8.4-alpine3.22` `8.4-cli-alpine` `8.4-cli-alpine3.22` `8.4.11-alpine` `8.4.11-alpine3.22` `8.4.11-cli-alpine` `8.4.11-cli-alpine3.22` `alpine` `alpine3.22` `cli-alpine` `cli-alpine3.22` `e4f9bb894d0d59558802c50d63685a084b2b4fb7eb77398e783423beab34d48f`
digest	`sha256:4ff5194e9fa697591425fa74e939879cde8c0d0da6a53b4b247cc47f43eb7d91`
vulnerabilities

github-actions · 2025-08-11T13:02:12Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.3-alpine

Name	8.3.24-alpine3.22
Digest	sha256:f43a903b3e7fb97ce6ecdc8ab54c4beeebc913c38697740c6e9dd0d69fc37322
Vulnerabilities
Pushed	1 week ago
Size	37 MB
Packages	60
Flavor	alpine
OS	3.22
Runtime	8.3.24

The base image is also available under the supported tag(s): 8.3-alpine3.22, 8.3-cli-alpine, 8.3-cli-alpine3.22, 8.3.24-alpine, 8.3.24-alpine3.22, 8.3.24-cli-alpine, 8.3.24-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.4-alpine` Minor runtime version update Also known as: 8.4.11-cli-alpine 8.4.11-cli-alpine3.22 8.4-cli-alpine 8.4-cli-alpine3.22 8-cli-alpine 8-cli-alpine3.22 cli-alpine cli-alpine3.22 alpine alpine3.22 8.4.11-alpine 8.4.11-alpine3.22 8.4-alpine3.22 8-alpine 8-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 42 MB Flavor: alpine OS: 3.22 Runtime: 8.4.11	1 week ago

github-actions · 2025-08-11T13:02:15Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8-alpine

Name	8.4.11-alpine3.22
Digest	sha256:4ff5194e9fa697591425fa74e939879cde8c0d0da6a53b4b247cc47f43eb7d91
Vulnerabilities
Pushed	1 week ago
Size	42 MB
Packages	60
Flavor	alpine
OS	3.22
Runtime	8.4.11

The base image is also available under the supported tag(s): 8-alpine3.22, 8-cli-alpine, 8-cli-alpine3.22, 8.4-alpine, 8.4-alpine3.22, 8.4-cli-alpine, 8.4-cli-alpine3.22, 8.4.11-alpine, 8.4.11-alpine3.22, 8.4.11-cli-alpine, 8.4.11-cli-alpine3.22, alpine, alpine3.22, cli-alpine, cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

github-actions · 2025-08-11T13:02:25Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:43648da4593f0f4b4cdfb6dda6980e2d93e32bcaa41d1e68342e45ba94d5a250`
vulnerabilities
platform	linux/amd64
size	95 MB
packages	158

📦 Base Image php:8.3-alpine

also known as	`8.3-alpine3.22` `8.3-cli-alpine` `8.3-cli-alpine3.22` `8.3.24-alpine` `8.3.24-alpine3.22` `8.3.24-cli-alpine` `8.3.24-cli-alpine3.22` `b026e7d2fc6d7801e1af55dc42c7409b2f38d6b42c32494e9276b6ef40a28ee3`
digest	`sha256:f43a903b3e7fb97ce6ecdc8ab54c4beeebc913c38697740c6e9dd0d69fc37322`
vulnerabilities

github-actions · 2025-08-11T13:02:29Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.3-alpine

Name	8.3.24-alpine3.22
Digest	sha256:f43a903b3e7fb97ce6ecdc8ab54c4beeebc913c38697740c6e9dd0d69fc37322
Vulnerabilities
Pushed	1 week ago
Size	37 MB
Packages	60
Flavor	alpine
OS	3.22
Runtime	8.3.24

The base image is also available under the supported tag(s): 8.3-alpine3.22, 8.3-cli-alpine, 8.3-cli-alpine3.22, 8.3.24-alpine, 8.3.24-alpine3.22, 8.3.24-cli-alpine, 8.3.24-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.4-alpine` Minor runtime version update Also known as: 8.4.11-cli-alpine 8.4.11-cli-alpine3.22 8.4-cli-alpine 8.4-cli-alpine3.22 8-cli-alpine 8-cli-alpine3.22 cli-alpine cli-alpine3.22 alpine alpine3.22 8.4.11-alpine 8.4.11-alpine3.22 8.4-alpine3.22 8-alpine 8-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 42 MB Flavor: alpine OS: 3.22 Runtime: 8.4.11	1 week ago

github-actions · 2025-08-11T13:02:34Z

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:97c175bc0945f21aa5d61fecf6267d2b8e76d37a202532f7197416e61af176aa`
vulnerabilities
platform	linux/amd64
size	94 MB
packages	158

📦 Base Image php:8.2-alpine

also known as	`8.2-alpine3.22` `8.2-cli-alpine` `8.2-cli-alpine3.22` `8.2.29-alpine` `8.2.29-alpine3.22` `8.2.29-cli-alpine` `8.2.29-cli-alpine3.22` `d8f4974194fb8fae35528e5ff3f03ca3566ee2e502f953b7817e0cbefebf8a0d`
digest	`sha256:cdee2ae021443a0806843448eb174a188d6e6d85377a2e5a9bcd44161001fb8d`
vulnerabilities

github-actions · 2025-08-11T13:02:38Z

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.2-alpine

Name	8.2.29-alpine3.22
Digest	sha256:cdee2ae021443a0806843448eb174a188d6e6d85377a2e5a9bcd44161001fb8d
Vulnerabilities
Pushed	1 week ago
Size	37 MB
Packages	60
Flavor	alpine
OS	3.22
Runtime	8.2.29

The base image is also available under the supported tag(s): 8.2-alpine3.22, 8.2-cli-alpine, 8.2-cli-alpine3.22, 8.2.29-alpine, 8.2.29-alpine3.22, 8.2.29-cli-alpine, 8.2.29-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.4-alpine` Minor runtime version update Also known as: 8.4.11-cli-alpine 8.4.11-cli-alpine3.22 8.4-cli-alpine 8.4-cli-alpine3.22 8-cli-alpine 8-cli-alpine3.22 cli-alpine cli-alpine3.22 alpine alpine3.22 8.4.11-alpine 8.4.11-alpine3.22 8.4-alpine3.22 8-alpine 8-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 42 MB Flavor: alpine OS: 3.22 Runtime: 8.4.11	1 week ago
`8.3-alpine` Minor runtime version update Also known as: 8.3.24-cli-alpine 8.3.24-cli-alpine3.22 8.3-cli-alpine 8.3-cli-alpine3.22 8.3.24-alpine 8.3.24-alpine3.22 8.3-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.22 Runtime: 8.3.24	1 week ago

deps(deps): update actions/checkout action to v5

e64ca53

renovate bot requested a review from lotyp as a code owner August 11, 2025 13:00

renovate bot enabled auto-merge (squash) August 11, 2025 13:00

github-actions bot added the type: maintenance For maintenance, refactor and testing (perf, chore, style, revert, refactor, test, build, ci) label Aug 11, 2025

Uh oh!

deps(deps): update actions/checkout action to v5 #160

Are you sure you want to change the base?

deps(deps): update actions/checkout action to v5 #160

Uh oh!

Conversation

renovate bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v4.3.0

What's Changed

New Contributors

Configuration

github-actions bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-base:latest

github-actions bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-base:latest

Summary

Details

Risk Assessment

Impact

References

github-actions bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-base:latest

Refresh base image

Change base image

github-actions bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-base:latest

github-actions bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-base:latest

Refresh base image

Change base image

github-actions bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-base:latest

Refresh base image

Change base image

github-actions bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-base:latest

github-actions bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-base:latest

Refresh base image

Change base image

github-actions bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-base:latest

github-actions bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-base:latest

github-actions bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-base:latest

Refresh base image

Change base image

github-actions bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-base:latest

Refresh base image

Change base image

github-actions bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-base:latest

github-actions bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-base:latest

Refresh base image

Change base image

github-actions bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-base:latest

renovate bot commented Aug 11, 2025 •

edited

Loading

`v5.0.0`

`v4.3.0`

github-actions bot commented Aug 11, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Aug 11, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

🔍 Vulnerabilities of `wayofdev/php-base:latest`

Recommended fixes for image `wayofdev/php-base:latest`