Repository navigation
Patch Larasend PHP runtime to 8.4.27 - #25
Open
vijaythecoder wants to merge 1 commit into
Open
vijaythecoder wants to merge 1 commit into
vijaythecoder wants to merge 1 commit into
Conversation
Collaborator
Author
|
@codex review |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
Codex Review: Didn't find any major issues. Already looking forward to the next diff. Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Larasend's email-serving, queue, scheduler, and rehearsal containers run PHP 8.4.24. Pin the shared runtime to the official PHP 8.4.27 FPM Alpine 3.24 image by digest, which includes the critical PHP security fixes. Give queue workers a three-minute shutdown grace period so active jobs can finish within their existing 150-second timeout.
The authorized production rollout preserves deployed application commit
077b2ea, vendor dependencies, and compiled assets. Their checksums match the replacement image. The candidate is published as252497420278.dkr.ecr.us-east-1.amazonaws.com/savvyagents/larasend:php-8.4.27-077b2ea-20261022(OCI indexsha256:0733b2c07145b17682768c6b1d82f5fda151ec28e1f582e9f127fb44be40d607).Validation: exact replacement image reports PHP 8.4.27 CLI/FPM with all required extensions; 56 focused tests passed with 255 assertions and warnings treated as failures, isolated from production and with no network. All four upstream PHP OOM security regression tests passed. Unrouted production canary
/upand/loginreturn 200; every migration is already applied and migrations are disabled for this runtime rollout. CI PHP 8.4/8.5 tests and Docker build passed; Codex review completed without findings.The
qualitycheck fails atcomposer audit --lockedon existing dependency advisories in the unchanged lockfile. This PR does not suppress the audit or change application dependencies. Authorized live rollout completed for app, queue, scheduler, and rehearsal: every container reports PHP 8.4.27 and Redis extension 6.3.0 with the same image configsha256:c00f18c8ea415fc252bf14217c6a8ac60cc1013e8adcad0d5b8e6ebadb4f132f. Effective app configuration hashes are unchanged. Database and Redis containers stayed running.A production test sent only to the AWS SES Mailbox Simulator was queued by the application, sent by the patched worker, marked delivered by SES, and its real SNS delivery notification was processed by patched Larasend at 13:28:32 UTC on October 22. No customer recipients or outbound webhook subscribers were used. Queue is empty, worker/scheduler heartbeats are fresh, and failed-job count remains at the pre-rollout baseline. Public health/login/API/webhook-route smoke checks passed. The normal port-80 target is healthy. The temporary canary finished its full 300-second drain and was removed, along with its temporary ALB-only security-group rule. Production retains the original database/Redis containers, application code, effective app settings, storage volumes, and webhook URLs. Rollback configuration and the old image remain protected on the host.