> De : Leigh [mailto:lei...@gmail.com] > > On 7 January 2015 at 12:52, Scott Arciszewski <kobrasre...@gmail.com> > wrote: > > > > Would it be possible for php.net to publish a cryptographically signed > > (e.g. openssl_sign() with a RSA private key kept offline) list in a > > pre-defined location (e.g. /stable_versions.txt) so that scripts can be > > written to read (and cache) the latest stable versions? > > I already do something similar to this for some of my CI, ensuring > tests pass on new versions of PHP. > > I use the following shell script snippet to check for new versions (If > there's a diff I parse the output with PHP to find _which_ new > version) > > git ls-remote -t https://github.com/php/php-src | cut -d '/' -f3 | > grep -P '^php-5\.\d+\.\d+' | sort -V
And what about extracting the information you require via the github API ? Exploring the release information for the 'php/php-src' project, you would get all the information you need. Once you know the names of every available releases, it is quite easy to determine if your current version needs upgrading. You can even display how many days passed since the last stable release, how many days your version is late, etc. I am not a specialist but github can probably provide the security level you require. Regards, François -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php
