Summary
- Require PHP 8.5.12 or newer when building both the application and agent container images, establishing a minimum baseline for the critical PHP security update.
- Always pull current base images during container publication and support manual rebuilds through the Publish container images GitHub Actions workflow.
- Add regression coverage for rejected and accepted PHP versions and document the rebuild and redeployment procedure in the README and all nine changelog languages.
Upgrade Notes
- No database migrations are included. Pull the corrected VolumeVault application and agent images and recreate both the application and every agent container, preserving existing storage volumes, configuration and
APP_KEY. Running containers are not updated automatically. - For local builds, use
docker compose build --pull; build guards reject upstream PHP images older than 8.5.12. - Installations pinned to a release tag or digest must explicitly select the newly published corrected images. Rebuilding
maindoes not update older release tags.
Verification
- Release changelog validation and targeted tests passed: 25 tests, 173 assertions. Pint and diff checks passed.
- Feature validation passed the full PHP suite (1,759 passed, 29 optional/environment skips), frontend tests (236 passed) and the production frontend build. PHP tests used an isolated compiled-view cache to avoid pre-existing local permissions issues. The existing frontend bundle-size warning remains.
- Local AMD64 application and agent image builds passed with refreshed bases; PHP 8.5.12 was verified by executing both final images. ARM64 builds use the existing native GitHub Actions matrix and were not run locally.
Full Changelog: v2.0.6...v2.0.7