[pull] main from Hebbinkpro:main

.github/workflows/ci.yml

@@ -8,35 +8,34 @@ on:
 jobs:
   build:
     name: PHPStan analysis
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     strategy:
       fail-fast: false
       matrix:
-        php:
-          - "8.1"
-          - "8.2"
-          - "8.3"
+        php: [ "8.2", "8.3" ]
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Setup PHP
-        uses: pmmp/setup-php-action@2.0.0
+        uses: pmmp/setup-php-action@3.2.0
         with:
           php-version: ${{ matrix.php }}
           install-path: "./bin"
           pm-version-major: 5
 
       - name: Restore Composer package cache
-        id: composer-cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
-          path: "~/.cache/composer"
-          key: "php-${{ matrix.php }}-composer-${{ hashFiles('**/composer.json') }}"
-          restore-keys: "php-${{ matrix.php }}-composer-"
+          path: |
+            ~/.cache/composer/files
+            ~/.cache/composer/vcs
+          key: "composer-v2-cache-${{ matrix.php }}-${{ hashFiles('./composer.lock') }}"
+          restore-keys: |
+            composer-v2-cache-
 
-      - name: Install PHPStan Composer dependencies
+      - name: Install Composer dependencies
         run: composer install --prefer-dist --no-interaction
 
       - name: Run PHPStan
-        run: composer run-script analyse
+        run: ./vendor/bin/phpstan analyze --no-progress --memory-limit=2G

.poggit.yml

@@ -7,7 +7,7 @@ projects:
     path: ""
     libs:
       - src: Hebbinkpro/pmmp-webserver/pmmp-webserver
-        version: 0.5.3
+        version: 0.5.4
       - src: HimbeersaftLP/LibSkin/LibSkin
         version: 2.1.1
       - src: Paroxity/Commando/Commando

README.md

@@ -1,5 +1,12 @@
 # PocketMap
 
+> [!WARNING]
+> This plugin uses the [PMMP WebServer](https://github.com/Hebbinkpro/pmmp-webserver) viron which contains a critical
+> security vulnerability.
+> All versions of this plugin released before **v0.6.4** are affected.
+> Please update the plugin to ensure that the PMMP WebServer virion uses version **v0.5.4 or later** as soon as
+> possible.
+
 A dynamic web-based world map for PocketMine-MP servers.<br>
 For a full overview over all functions of the plugin, go to the [documentation](#documentation)
 

changelogs/v0.6.md

@@ -28,4 +28,17 @@ None
 - Fixed some minor bugs
 - Updated the resource pack to minecraft v1.21.60
 - Updated the WebServer version in .poggit.yml to v0.4.2. [Issue #35](https://github.com/Hebbinkpro/PocketMap/issues/35)
-- Fixed issues with static routes in the index.html
+- Fixed issues with static routes in the index.html
+
+## v0.6.3
+
+- Updated libraries:
+  - Hebbinkpro/pmmp-webserver: v0.4.2 -> v0.5.3
+  - HimbeersaftLP/LibSkin: v2.0.1 -> v2.1.1
+  - Paroxity/Commando: v3.1.0 -> v3.3.0
+  - Muqsit/SimplePacketHandler: v0.1.3 -> v0.1.5
+- Updated the resource pack to minecraft v1.21.124
+
+## v0.6.4
+
+- Updated Hebbinkpro/pmmp-webserver: v0.5.3 -> v0.5.4

composer.json

@@ -9,7 +9,7 @@
     }
   ],
   "require": {
-    "hebbinkpro/pmmp-webserver": "^0.5.3",
+    "hebbinkpro/pmmp-webserver": "^0.5.4",
     "muqsit/simple-packet-handler": "0.1.5"
   },
   "require-dev": {
@@ -42,8 +42,7 @@
   },
   "config": {
     "allow-plugins": {
-      "phpstan/extension-installer": true,
-      "wikimedia/composer-merge-plugin": true
+      "phpstan/extension-installer": true
     }
   },
   "scripts": {

plugin.yml

@@ -1,6 +1,6 @@
 name: PocketMap
 main: Hebbinkpro\PocketMap\PocketMap
-version: 0.6.3
+version: 0.6.4
 api: [ 5.36.0 ]
 load: STARTUP
 author: Hebbinkpro