BudsieBuds 72a75152ad fix(security): harden container permissions, validate platform reqs, and use rolling base image (#4789) ...

- Dockerfile: use rolling php:8.2-apache with expose_php = Off.
- Dockerfile: validate runtime against composer.lock at build boundary via BuildKit composer check-platform-reqs.
- Dockerfile: enforce least-privilege permissions (root:www-data 0640 files, 0750 dirs), restricting write access to writable/ and public/uploads.
- dockerignore: include composer.json and composer.lock in build context for platform validation.
- CI: remove redundant bash version checks across workflows; enforce fresh upstream base via pull: true in build-release.yml.
- Docs & Changelog: remove security advisory identifiers while preserving minimum patch levels.

2026-11-03 20:06:39 +01:00

..

BUILD.md

docs: move BUILD.md, INSTALL.md, UPGRADE.md into docs/ (#4755)

2026-10-16 09:20:45 +02:00

INSTALL.md

fix(security): harden container permissions, validate platform reqs, and use rolling base image (#4789)

2026-11-03 20:06:39 +01:00

UPGRADE.md

docs: move BUILD.md, INSTALL.md, UPGRADE.md into docs/ (#4755)

2026-10-16 09:20:45 +02:00