Changelog
Image changes are read from the recorded builds: new PHP releases, extension and component updates, and rebuilds for OS package fixes. Commits to the repository sit beside them.
- Rebuilt, no tracked version changed8.28.38.48.58.6nginx82 images
- 80c0f38 Bundle the mongodb driver, built against OpenSSL so TLS connections work
- 0d91d6e Bundle intl, zip, exif, sockets, gmp, soap, apcu and igbinary so common frameworks run without a compiler stage
- ebb7b21 Move usage material from the README to the site and list each image's PHP releases beside its facts
- 9736ca4 Serve the site from the php.mintopia.net root so asset paths resolve
- 70ba1bc Silence SC2016 on the jq filter in backfill-records, whose $t is a jq variable
- 53b4eb5 Ignore local Claude settings and worktrees
- 66fa53b Rework the image site: home hero picker, shared image picker and examples, and per-architecture image sizes recorded at publish
- 0b4f7d5 Group the usage guide into Run, Configure and Extend chapters and drop the README reference copy
- Rebuilt, no tracked version changed8.28.38.48.58.6nginx80 images
- alpine:3.24 base image updated8.28.38.48.58.6nginx40 images
- 638775f Publish an image site to GitHub Pages, rebuilt from per-build records after every publish
- 61459d9 Smoke-test a bare nginx -s reload in php-fpm-nginx
- 8adf91d Point the default nginx.conf at the rendered config so bare nginx -s reload works
- cc6fd1b Skip empty forwarded headers to PHP so trusted-proxy hosts aren't blanked
- fce6122 Document proxies, logs and Xdebug setup, and record the forwarded-header decision
- 4e251af Resolve the client and scheme from trusted proxies only, on nginx and FrankenPHP
- 90f8207 Log each php-fpm-nginx request once, from nginx
- 11fb5b6 Keep root's access to stdio under PUID and tighten the .well-known exception
- d8b3fda Keep /etc/nginx/conf.d includes and nginx config root-owned
- c69eca1 Document images, hardening and development use in the README
- 5008d5c Run all lanes in parallel, label images with the commit and sign manifests with cosign
- dba0e3b Harden images and support read-only roots and dropped caps
- 610c436 Compile PHP once as ZTS and keep trixie's toolchain out of the runtime
- b22db83 Re-resolve PHP_FPM_HOST in nginx so php-fpm restarts don't break it
- Rebuilt, no tracked version changed8.28.38.48.58.6nginx127 images
- PHP 8.2.34 → 8.2.358.28 images
- alpine:3.24 base image updated8.28.38.48.58.614 images
- frankenphp 1.13.1 → 1.13.28.28.38.48.58 images
- debian:trixie-slim base image updated8.28.38.48.58.614 images
- PHP 8.3.35 → 8.3.368.38 images
- PHP 8.4.26 → 8.4.278.48 images
- PHP 8.5.11 → 8.5.128.58 images
- PHP 8.6.0RC3 → 8.6.0RC48.66 images
- PHP 8.6.0RC2 → 8.6.0RC38.62 images
- 82e5a1e Split README configuration by variant
- 49f7e28 Resolve client IP from trusted proxies in nginx
- 9e2b8c6 Pick listen addresses by IPv6 availability; add nginx status page
- 8701cf3 Rebuild lanes whose OS packages have fixable CVEs
- ec69613 Split APP_ROOT (app dir) from APP_PUBLIC_PATH (served dir)
- 54c7e05 Build PHP from php-src by default
- 714a6c2 Delete untagged, unreferenced GHCR images daily
- 62e5b3c Update ADR 0006 for layered trixie images (ADR 0005 revision)
- fc4d2f7 Build FrankenPHP from source against php-src ZTS in src mode
- 5bb2314 Wire php-src fallback into CI with per-version source switch
- b976f22 Add PHP_SOURCE=src: build PHP from php-src tags as an opt-in fallback
- 00da79c Spike: build PHP from php-src tags onto alpine and trixie-slim
- 58041e7 Allow chaining entrypoints via /docker-entrypoint.d
- cec8903 Keep trixie images layered instead of flattening to scratch
- 04e8e48 Fix smoke test exiting silently when the last /proc entry is not a worker
- f38d991 Add PHP base image matrix: Alpine and trixie Dockerfiles, bake, CI
- 37535e2 Initial