[CI] Backport usage of db service for 8.1

Nightly already uses them. We're running into port clashes otherwise.

Closes GH-16647

Backport CI fixes to security branches

Closes GH-16469

Working towards GH-16286

commit e0db221143b808d97bc3a44e9f0968c6308794b4
Author: Ilija Tovilo <ilija.tovilo@me.co

Backport CI fixes to security branches

Closes GH-16469

Working towards GH-16286

commit e0db221143b808d97bc3a44e9f0968c6308794b4
Author: Ilija Tovilo <ilija.tovilo@me.com>
Date: Fri Oct 25 22:48:20 2024 +0200

Move CFLAGS into ./configure command for consistency

commit 8ad67768250d181cd7fef30e0c866625bbd8ac94
Author: Ilija Tovilo <ilija.tovilo@me.com>
Date: Fri Oct 25 22:47:03 2024 +0200

Also upgrade nightly to macOS 13

commit 58a88ccb9f652adbd13e8c2b5186fb31213f0789
Author: Ilija Tovilo <ilija.tovilo@me.com>
Date: Wed Oct 23 19:07:59 2024 +0200

Fix call to dc[n]gettext in tests with 0 $category

This causes a segfault on PHP-8.1

commit 611af05c50685acbb22f0f9d18dd37234c3546f1
Author: Ilija Tovilo <ilija.tovilo@me.com>
Date: Fri Dec 8 13:36:52 2023 +0100

[skip ci] Skip intermittently failing curl test on macOS

The test fails with "CURL ERROR: 56". I will create an issue for it shortly.

commit ec745178bbded22830046d2ba3458120b778c21f
Author: Ilija Tovilo <ilija.tovilo@me.com>
Date: Wed Oct 23 19:05:32 2024 +0200

Backport parts of 9999a0c for gettext

See 9999a0cb757344974889a6f548727de6f2c3c10d

commit 5ce703496f4c9f0e95cc26af60f6abe62efde1d4
Author: Niels Dossche <7771979+nielsdos@users.noreply.github.com>
Date: Sun Jul 28 14:34:26 2024 +0200

Fix CI failure on macOS after Curl update

commit 714a3e707113510fb82bd507e9fd6f92954ca753
Author: Niels Dossche <7771979+nielsdos@users.noreply.github.com>
Date: Sat Jul 27 16:09:50 2024 +0200

Fix CI failure after Curl update (#15124)

commit 4f2eb921b9b3f3f68ff84605afb77dbd00829a44
Author: Niels Dossche <7771979+nielsdos@users.noreply.github.com>
Date: Thu May 23 22:20:37 2024 +0200

Fix GH-14307: Test curl_basic_024 fails with curl 8.8.0

Curl changed the behaviour, from the changelog:
- lib: make protocol handlers store scheme name lowercase curl/curl@c294f9c

From the docs: "The returned scheme might be upper or lowercase. Do
comparisons case insensitively."

Closes GH-14312.

commit 251195b41bea35f356bdd2bfc3623da38dafa3e8
Author: Ayesh Karunaratne <ayesh@aye.sh>
Date: Thu Feb 1 02:03:55 2024 +0700

ext/curl: Fix failing tests due to string changes in libcurl 8.6.0

Upstream libcurl 8.6.0 contains a change[^1] that caused a test failure.
This fixes it by updating the test's `EXPECTF` to use a regex to account for both string patterns.

[^1]: https://github.com/curl/curl/commit/45cf4755e71f#diff-a8a54563608f8155973318f4ddb61d7328dab512b8ff2b5cc48cc76979d4204cL1683

Closes GH-13293.

commit fc5d83f2b147d10d3f20aa96d9425b69d15b1b39
Author: Christoph M. Becker <cmbecker69@gmx.de>
Date: Wed Oct 16 22:46:20 2024 +0200

Prepare for necessary move to macOS 13

GH will remove macOS 12 runner images as of December 3rd, so we prepare
for that.

Besides the obvious need to change the runner, we also suppress a
couple of warnings, because otherwise the build would fail due to
`-Werror`.

show more ...

[skip ci] Allow to run push workflows manually

As is, we're running the push workflow for all pushes and pull request,
plus we run more comprehensive nightly workflow for all branches wh

[skip ci] Allow to run push workflows manually

As is, we're running the push workflow for all pushes and pull request,
plus we run more comprehensive nightly workflow for all branches which
had commits during the day. That means that security branches may not
run CI for weeks or even months. In the meantime, dependencies might
be updated, which can cause later workflow runs to fail. For instance,
a few openssl tests fail due to security fixes in OpenSSL[1], an update
of Oracle Instant Client causes a couple of oci8 and pdo_oci tests to
fail[2], and the macOS builds do no longer even built (investigation
pending).

Therefore, we allow to run the pull workflow manually, so it is
possible to check the CI condition of temporary inactive branches from
time to time.

[1] <https://github.com/php/php-src/pull/16097>
[2] <https://github.com/php/php-src/pull/16107>

Closes GH-16148.

show more ...

Remove now unused llvm installation in asan build

Switch asan build to Ubuntu 24.04

Closes GH-16065

Added PHP-8.4 to push workflow (#16045)

Add missing CI services for 8.2

Remove Travis artefacts (#15714)

Travis was suspended https://github.com/php/php-src/pull/15314

This removes 404 errored Travis image in README, travis configuration
directory a

Remove Travis artefacts (#15714)

Travis was suspended https://github.com/php/php-src/pull/15314

This removes 404 errored Travis image in README, travis configuration
directory and YAML file and usages in tests.

[skip ci]

Co-authored-by: Gina Peter Banyard <girgias@php.net>

show more ...

Update ci actions/checkout to v4 (#15283)

see 45e60e585eed63353301f797c75da4e553ce21ff
see 69dbfadd1eebc2e99f349b6fd617cda1d5cad448

Update Windows CI to build with vs17

PHP 8.4 is supposed to be built with vs17 (aka. Visual Studio 2022)[1],
so we also do this for CI.

We mark gh8841.phpt as xfail for known re

Update Windows CI to build with vs17

PHP 8.4 is supposed to be built with vs17 (aka. Visual Studio 2022)[1],
so we also do this for CI.

We mark gh8841.phpt as xfail for known reasons.

[1] <https://windows.php.net/>

show more ...

Update the php-sdk-binary-tools to php-sdk-2.3.0

The Windows CI of the `PHP-8.2` to `PHP-8.3` branches still use the
`php-sdk-2.2.0` which is almost five years old, and does not fetch th

Update the php-sdk-binary-tools to php-sdk-2.3.0

The Windows CI of the `PHP-8.2` to `PHP-8.3` branches still use the
`php-sdk-2.2.0` which is almost five years old, and does not fetch the
updated dependencies from https://downloads.php.net/~windows.

The `master` branch CI uses `php_downloads_server_migration_v1`, which
has been superseded a few months ago[1]. So switching to the
`php-sdk-2.3.0` makes sense there, too.

[1] <php/php-sdk-binary-tools@19c8ccb>

Closes GH-14991.

show more ...

Remove GitHub actions junit artifacts

Nobody looks at those, and nightly regularly fails due to uploading them.

Closes GH-14555

Attempt to fix mysql_native_password error for 32-bit build

Closes GH-14356

Re-add 32-bit push build

32-bit fails more commonly that I had assumed.

Closes GH-14300

CI: Do not save the ccache for PRs (8.3+)

see GH-14168

CI: Do not save the ccache for PRs (#14168)

Resolves #14155

Fix the MySQL Server version used for testing to (#14120)

closes #14120

[skip ci] Backport 0e7ef95 and 4f0d4c0

[skip ci] Also skip all other push jobs on non php-src

[skip ci] Also skip benchmarking on non php-src

Fix GH-13834: Applying non-zero offset 36 to null pointer in zend_jit.c (#13846)

* Fix GH-13834: Applying non-zero offset 36 to null pointer in zend_jit.c

ssa_op can be NULL in func

Fix GH-13834: Applying non-zero offset 36 to null pointer in zend_jit.c (#13846)

* Fix GH-13834: Applying non-zero offset 36 to null pointer in zend_jit.c

ssa_op can be NULL in function JIT. Doing pointer arithmetic on a NULL
pointer is undefined behaviour. Undefined behaviour can be dangerous
because the optimizer may assume then that the variable is not actually
NULL.

To solve this:
1. Add ADVANCE_SSA_OP() to safely add an offset to ssa_op in zend_jit.c
2. For inference, add an extra offset argument to the helper functions.

To reproduce this, use Clang (not GCC) on a test like
sapi/cli/tests/gh12363.phpt (or other tests also work).

* Remove -fno-sanitize=pointer-overflow flag from CI

* Fix NULL pointer offsets added to the stack_map

* Fix an offset add on a potentially NULL ssa->ops

* Fix NULL pointer arithmetic in zend_range_info()

* Address review comments

show more ...

Disable ASLR for benchmark (#13769)

Fix missing llvm deps inside docker

Fix ASan build

See https://github.com/actions/runner-images/issues/9491#issuecomment-1989718917

The mentioned workaround doesn't work for us because we run ASan inside Docker.
I

Fix ASan build

See https://github.com/actions/runner-images/issues/9491#issuecomment-1989718917

The mentioned workaround doesn't work for us because we run ASan inside Docker.
Instead, we switch to ubuntu-20.04 as the host. The docker setup itself remains
the same.

Closes GH-13757

show more ...

[skip ci] Fix paths-ignore glob pattern

* does not work for nested files.