4 Commits

Include renames

Author	SHA1	Message	Date
TheWitnessandCopilot	9b217e0e3a	INFO: set compat to 1.2.29 (#838) ... * INFO: set compat to 1.2.32 * docs: update Copilot instructions Cacti baseline to 1.2.32 (matches INFO compat) * INFO: back off compat to 1.2.29 * Add manifest.json + upgrade-time file pruning * Prune phpunit.xml on upgrade and ignore markdown-lint configs phpunit.xml ships in the repo for CI but is a dev-only test artifact, so it is removed from manifest.json 'expected', pruned from installs on upgrade (like tests/), and excluded from the manifest drift check. The retired markdown-lint configs (.mdlrc, .md_style.rb) are deleted, and .md* is now ignored like .git*: protected from pruning and excluded from drift if it reappears. * Move thold_functions.php and thold_webapi.php into includes/; flatten css The main threshold library becomes includes/functions.php and the web API helper becomes includes/webapi.php; every caller (setup.php, includes/*, the CLI/poller/notify entry points and the test suite) loads them from includes/. Each per-theme stylesheet css/<theme>/main.css becomes css/<theme>.css so users can drop their own css/<theme>.css into the css base, and the page_head hook looks there. Old paths are tombstoned so existing installs drop the stale copies on upgrade. * Regenerate cacti.pot for the includes/ file relocations Moving the plugin's library files into includes/ changed the source-reference lines in the translation template; regenerate it so the 'Verify translation template' CI check passes. * Harden the hook-include test and make RPN integer ops explicit The HookFunctionsIncludeTest invokes real hooks with placeholder input purely to execute their relocated include_once lines; it now swallows engine notices/warnings/deprecations during those calls (and restores the error handler and config afterward) so it cannot trip the suite's failOnDeprecation or leak state into other tests. The RPN % and ^ operators now cast their operands to int explicitly, matching their long-standing integer-truncation behaviour while silencing the implicit float-to-int conversion deprecation. * Harden prune against tampered-manifest path traversal The upgrade-time prune now rejects any tombstone containing '.'/'..' segments (which could escape the plugin directory or resolve to its root) and treats ancestors of whitelist entries as protected, so a tombstone on a parent directory can no longer delete a whitelisted file beneath it. * docs: update and align the Project Structure block Point the structure tree at the relocated files (libraries now under includes/, data files under docs/, stylesheets under css/) and align the trailing '# ...' comments to a single column so they no longer drift right. * docs/tests: standardize test header and correct manifest-contract notes - Use the full license header (from the plugin's own setup.php) in tests/Unit/PruneFilesTest.php instead of the abbreviated copyright banner. - Document that the manifest drift check and the upgrade-time prune also handle phpunit.xml and .md* files, matching the implemented behavior. * refactor: rename prune helpers to the plugin-slug function prefix The repository naming contract reserves the plugin_<name>_ prefix for plugin lifecycle / hook-registration functions; all other functions use the plain <name>_ prefix. Rename the internal upgrade helpers accordingly: plugin_<name>_prune_files() -> <name>_prune_files() plugin_<name>_rmtree() -> <name>_rmtree() The call site, unit tests, and the copilot-instructions.md references are updated to match. No behavioral change. * chore: set the Cacti compatibility floor to 1.2.29 Align the compat metadata (and the contributor-guide references) with the team decision to standardize the minimum supported Cacti version at 1.2.29; the previously proposed 1.2.32 floor was not adopted. --------- Co-authored-by: Copilot <copilot@users.noreply.github.com>	2026-10-01 01:40:00 -05:00
Thomas VincentandTheWitness	38dec82d55	fix: keep counter sample time pairs synchronized (#817) ... * fix: preserve counter sample time pairs Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * fix: preserve samples in daemon and poller paths Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * test: exercise poller sample persistence Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * fix: bound counter gap recovery Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * style: format counter recovery tests Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * fix: treat unusable counter baselines as unknown Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * fix: preserve unknown counter maximum semantics Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * test: cover validated poller interval fallback Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * fix: retain trustworthy counter baselines Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * fix: propagate unknown rate samples safely Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * fix: validate effective counter step Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * fix: preserve alerts across unknown rate gaps Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * fix: preserve unknown values through transforms Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * fix: fail closed on missing expression sources Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * fix: keep unavailable thresholds eligible Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * fix: preserve cached expression rates Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * fix: deduplicate backward-clock warnings Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * test: adopt shared Cacti plugin CI workflow, add Security/Integration coverage - Replace plugin-ci-workflow.yml with the Cacti/plugin_evidence-based template: pinned actions, CACTI/COMPOSER_ALLOW_SUPERUSER global env vars, sudo on every composer command, and an actual Pest execution step (previously missing - this workflow never ran Pest at all). - Remove php-unit-tests.yml; its Docker-based Pest run is now redundant with plugin-ci-workflow.yml's Pest step. - Preserve this plugin's existing, more advanced tests/bootstrap-unit.php, TestCase.php, CactiStubs helper and pinned tests/.cacti-version (1.2.31, strict match) rather than overwriting with plugin_evidence's simpler generic versions - only additive stubs (api_plugin_register_hook/realm, get_current_page, plugin_test_read_source) were appended. - Add tests/Security (SetupStructureTest, Php82CompatibilityTest) and tests/Integration (PluginLifecycleTest covering plugin_thold_version/uninstall/upgrade gating) to round out the Security/Unit/Integration directory convention used across other plugins. - Update phpunit.xml to run all three suites and include setup.php as covered source. * ci: retrigger checks * fix: address Copilot review findings - includes/polling.php: stop manufacturing a numeric zero for an unavailable current sample when thold_consider_unknown_zero is enabled - it was bypassing thold_check_threshold()'s new unavailable-sample guard entirely. Preserve the informational NOTE/debug logging. - thold_functions.php: thold_build_cdef() now fails closed (returns '') when a |query_...| CDEF operand cannot be resolved, instead of silently continuing arithmetic on a manufactured zero and returning a fabricated numeric result. Added TholdBuildCdefTest.php covering the literal, unresolved-operand, and resolved-operand paths. - tests/Unit/TholdCalculateLowerUpperTest.php: updated to match thold_calculate_lower_upper()'s current fail-closed contract (returns '' when the high word is absent/out of range, previously asserted stale pass-through values) and its float return type; added coverage for a non-numeric current value and an out-of-range high word. - .github/workflows/plugin-ci-workflow.yml: drop PHP 8.1 from the matrix (Pest 3 requires PHP >= 8.2) and add a pcov coverage driver to the setup-php step so --coverage-clover does not fail with 'No code coverage driver available'. * ci: replace plugin-ci-workflow.yml whole-cloth from plugin_evidence A prior merge did not cleanly bring in plugin_evidence's current CI template, leaving this file in an inconsistent state. Replaced it entirely with plugin_evidence's .github/workflows/plugin-ci-workflow.yml, with only the light corrections needed for this plugin: - evidence -> thold in checkout path, plugin_manage --plugin, .cacti-version path, and coverage upload path - Install System Dependencies keeps apache2 (needed by the later Configure Apache step; evidence's own template omits it) - Run Pest Unit Tests step drops the trailing tests/Security path arg since thold's phpunit.xml testsuite already covers tests/Security, tests/Unit, and tests/Integration - Actions pinned to their latest release commit SHA (actions/checkout, actions/upload-artifact, shivammathur/setup-php), COMPOSER_ALLOW_SUPERUSER env var and an explicit coverage: xdebug driver added, and sudo added to the composer validate/lint/phpcsfixer/ phpstan invocations for consistency with the rest of the workflow * fix(tests): tolerate the moving 1.2.x/develop branch in bootstrap-unit.php The new workflow's 'Set expected Cacti version' step writes the literal branch name (env.CACTI, e.g. '1.2.x') into tests/.cacti-version, but this file's version check compared it verbatim against the checked-out cacti_version file (e.g. '1.2.32'), throwing on every run. Matches the exception plugin_evidence's bootstrap-unit.php already uses. * fix(ci): run composer unprivileged so Pest's vendor cache is writable Setup Permissions chowns the checkout to www-data:runner (group-writable) before Composer runs. Running composer install as root via sudo left include/vendor owned by root, so the later non-root 'Run Pest Unit Tests' step couldn't create pestphp/pest-plugin-mutate's cache directory (mkdir(): Permission denied). Composer no longer needs sudo here: the runner user is already a member of the runner group with write access from Setup Permissions, so dropping sudo leaves vendor/ owned by runner and writable by the later Pest step. Applied the same fix to the (currently dead, CACTI==1.2.x-gated) lint/phpcsfixer/phpstan steps for consistency. * fix(ci): restore vendor ownership for Pest instead of running composer unprivileged Running composer without sudo failed differently: Setup Permissions chowns the whole checkout to www-data:runner before Composer runs, and composer's own file-touching (utime) on files it does not own fails even with group-write access (touch(): Utime failed: Operation not permitted) - group write only covers content changes, not mtime updates, which require file ownership. Revert to running composer as root (matching Setup Permissions/Install Cacti via CLI's existing pattern) and add an explicit 'Restore vendor ownership for Pest' step that chowns include/vendor and composer.lock to runner:runner right after Composer finishes, so the later non-root 'Run Pest Unit Tests' step can write pestphp/pest-plugin-mutate's cache directory and Pest's own result cache under vendor/. * fix(thold): bind graph_id parameter, quote shell tag substitutions Root-caused and fixed the actual source bugs behind ~40 of the 55 failing Pest tests (the rest are pre-existing/unrelated or test-stub mismatches fixed separately): - get_allowed_thresholds()/get_allowed_threshold_logs(): $graph_id was still interpolated directly into the WHERE clause (`gl.id=$graph_id`) and the row/count queries used unprepared db_fetch_assoc()/ db_fetch_cell(), even though GetAllowedThresholdsTest and OptionalCoreFunctionTest were already written expecting a bound `gl.id = ?` placeholder via db_fetch_assoc_prepared()/db_fetch_cell_prepared(). Added a new $sql_params parameter for the caller's own WHERE-clause bindings (appended before the graph_id placeholder), matching the tests' expected bind order and query text exactly. No existing caller passes $graph_id, so this is behavior-preserving for them. - thold_replace_threshold_tags(): added the $shell parameter TholdReplaceThresholdTagsTest/TholdCommandExecutionTest already call it with. Device/threshold-derived values (DESCRIPTION, HOSTNAME, LOCATION, SITE, CURRENTVALUE, NOTES, DNOTES/DEVICENOTE, EXTERNALID, THRESHOLDNAME) are now escapeshellarg()'d when $shell is true; email/HTML callers are unaffected. thold_command_execution() now passes $shell=true when building the exec()/queued command for all three breach directions - the exec() call sites already carried a comment claiming "cacti_escapeshellarg protection" that did not actually exist. - NotificationQueueClaimTest: cacti_log() calls are now recorded into CactiStubs::$calls (added elsewhere in this PR, needed by TholdGetCurrentvalTest), which added an extra 'cacti_log' entry to 3 assertions that expected an exact list/emptiness of $calls. Updated the 3 expectations to include it. - NotificationEmailDeduplicationTest: stubbed the wrong function (db_fetch_assoc instead of db_fetch_assoc_prepared, which is what process_device_notifications() actually calls), so the fixture record was never returned and no mail was ever built. Fixed the stub name; the sha256 dedup path it asserts on was already implemented correctly. Verified locally against a real Cacti 1.2.x checkout with a Windows PHP CLI (GetAllowedThresholdsTest, OptionalCoreFunctionTest, NotificationEmailDeduplicationTest, TholdReplaceThresholdTagsTest all green; TholdCommandExecutionTest and 3 NotificationQueueClaimTest cases only fail locally on Windows due to escapeshellarg()'s CRT-quoting convention and missing /bin/*, posix_*, LOG_LOCAL0 - all Linux-only, matching the actual CI environment). * fix(thold): correct command-output log topic, harden THOLDTYPE test isolation - thold_command_execution() called thold_process_command_output() with topic 'thold' but the function's switch only matches 'thold_cmd'/ 'thold_dhost_cmd'/'thold_uhost_cmd', so cacti_log() was silently never called for inline (non-queued) command execution. Fixed the topic string, restoring the exit-status/output logging TholdCommandExecutionTest's inline-execution tests check for. - TholdReplaceThresholdTagsTest::setUpBeforeClass() loaded includes/arrays.php via the shared require_once-based test loader, which is a no-op if an earlier test class in the same run already loaded the same real path, so \ is not guaranteed to reach this class's global scope. Force a fresh include as a fallback so <THOLDTYPE> substitution is not dependent on suite run order. * fix(thold): fix RPN evaluator crashes and silent bad-result pushes - The v1==0 && v2==0 && operator=='/' special case (0/0 -> 0) had a stray break that exited the switch before the array_push() below it ran, so the special-cased result was popped off but never pushed back, leaving the stack empty instead of [0]. - The zero-divisor guard only covered '/', so '%' with a zero divisor fell through to eval('... % 0'), which throws an uncaught DivisionByZeroError on PHP 8 instead of flagging rpn_error. Extended the guard to also cover modulo. - Unary functions (SQRT, LOG, etc.) evaled their operand without checking it was numeric first, so a non-numeric operand (e.g. the 'U'/unknown sentinel) produced an undefined-constant Error instead of flagging rpn_error. Added the same is_numeric guard the binary path already had. - Unary functions that produce a mathematically undefined result (sqrt of a negative, log of zero/a negative) silently pushed NAN/-INF onto the stack instead of flagging an error, which would have compared as false against every threshold. Now flags rpn_error and drops the result instead of pushing it. * fix(thold): log time-based restoral even when it does not cross the retrigger threshold thold_check_threshold()'s time-based arm (case 2) only logged a restoral (ST_NOTIFYRS) inside the two branches that also send a notification, each gated on the freshly re-queried failure/warning-failure counts reaching their trigger. When a threshold had been alerting but the fresh counts did not reach trigger again (the common case, since those counts measure consecutive alert rows in the log rather than the prior persisted state), execution fell into the bare final else, which reset the fail counters but never logged the restoral or cleared thold_alert - so an operator never saw the all-clear in the log and the threshold stayed marked as alerting. Added a branch that logs ST_NOTIFYRS and resets thold_alert to normal whenever the threshold was previously alerting, without sending a notification, matching this arm's documented behavior of logging every restoral while only mailing on retrigger. * fix: address remaining Copilot review findings on PR #817 - get_current_value(): return missing_value instead of round()-ing a non-numeric ('U'/'nan'/blank or fail-closed CDEF) sample, avoiding a PHP 8 TypeError and manufactured-zero alerting. - PluginLifecycleTest: reset CactiStubs in beforeEach so assertions on global call history/queued returns do not depend on suite order. - README: restore the notification-queue retry/worker-claim docs that were dropped instead of retained alongside the new sampling section. * security: fail-closed RPN evaluator errors; shell-escape thold_expand_string() thold_functions.php: - thold_calculate_expression() converted an RPN evaluation error (unbalanced expression, unsupported token, divide/modulo-by-zero) into a numeric 0 return. 0 passes is_numeric(), so includes/polling.php's fail-closed "unavailable sample" guard (which only catches non-numeric values) never saw it, and the poller could alert/recover on a manufactured zero instead of treating the reading as unavailable. Both error returns now return '' instead, matching every other early-return failure path already in this function. - thold_expand_string() gained a $shell parameter (mirroring thold_replace_threshold_tags()'s existing $q()/escapeshellarg() pattern). It previously called Cacti core's expand_title() unconditionally, which substitutes |host_*|/|query_*| tokens (hostname, SNMP community/password, sysDescr/sysContact/sysLocation, polled data-query fields, etc) with no shell escaping. Any of those values can be set by the polled device itself, so thold_command_execution() calling thold_expand_string() after thold_replace_threshold_tags($shell=true) reintroduced shell injection despite the initial hardening, since expand_title() ran unescaped on the already-quoted command string. In $shell mode, each |host_*|/|query_*| token in the string is now resolved in isolation through the same core substitute_host_data()/ substitute_snmp_query_data() helpers expand_title() itself uses (so the resolved value matches), then escapeshellarg()'d before it's substituted into the command. The plugin's own direct substitutions (data source name/description, graph title, interface speed) and its thold_substitute_custom_data()/thold_substitute_host_data() helpers are now shell-aware the same way. Non-shell callers (email/HTML rendering) are unaffected; thold_command_execution()'s three exec() paths now pass $shell = true. tests/Unit/TholdCalculateExpressionTest.php: updated the two existing error-path assertions from 0 to '', and added divide-by-zero/modulo-by-zero coverage. tests/Unit/TholdExpandStringTest.php + tests/bootstrap-unit.php: added substitute_host_data()/null_out_substitutions() stubs and a test asserting a malicious |host_description| value is escapeshellarg()'d in shell mode and left untouched otherwise. * security: shell-escape the <URL> tag in trigger commands The <a href='...'>...</a> markup substituted for <URL> contains literal single quotes. In \ mode this landed in the command unquoted, so the quotes could terminate the shell argument early (and any metacharacters in the configured base_url would remain executable) despite the rest of thold_replace_threshold_tags()'s hardening. The whole substituted value is now passed through the same \() helper as every other tag, quoting it as one token in shell mode while leaving email/HTML output unchanged. Added a regression test. * fix: address remaining Copilot review findings on PR #817 (round 2) - Guard modulo against fractional zero divisors: the % operator truncates both operands to int, so a divisor like 0.5 became 0 and reached eval(), throwing an uncaught DivisionByZeroError instead of failing closed. - Shell-escape <DSNAME> in thold_replace_threshold_tags(); every other substituted value already went through the $q() helper in shell mode. - Apply the same lastchanged/acknowledgment restoral side effects in the early-restoral branch of thold_check_threshold() as the two full restoral branches above it, so an acknowledged time-based alert that recovers before either failure count retriggers no longer stays acknowledged. - Log daemon sample-persistence failures unconditionally via thold_cacti_log() instead of the --debug-gated thold_daemon_debug(), so sample loss is visible in normal daemon operation. - Restore the changed-line coverage gate the shared CI workflow dropped when it replaced the old Docker-based Pest workflow: fetch full history for the plugin checkout and run tests/bin/patch-coverage.php against the PR base SHA. Allowlist thold_process.php (daemon entry point, cannot be required into the isolated unit test process). - Add/extend unit tests covering each of the above. * fix(ci): measure includes/polling.php for changed-line coverage phpunit.xml's <source><include> only listed thold_functions.php and setup.php, so Clover never recorded hits for includes/polling.php even though it has no top-level side effects and is already require()'d directly by PollerSchedulingTest. patch-coverage.php then correctly flagged this PR's changes to thold_poller_output() (the new thold_polling_sample_row()/status-row insert path, rrd_heartbeat column) as changed-but-unmeasured production lines and failed the build. Add includes/polling.php to the source include list, and add tests exercising thold_poller_output()'s non-daemon path for both outcomes: a numeric reading persisted as a sample_row, and an unavailable reading persisted as a status-only row, plus the post-write cleanup call. * test: cover remaining changed lines flagged by patch-coverage Adds/extends unit tests for lines the coverage gate flagged as changed but unexercised: - includes/polling.php: the thold_consider_unknown_zero "would have been zero" debug/log branch in thold_poller_output()'s non-daemon path (still preserves the unavailable state either way). - thold_functions.php: thold_substitute_host_data()'s cache-hit and build-fresh (|host_management_ip|) paths, and thold_substitute_custom_data()'s shell-escaped custom value - neither had any direct test coverage before. New TholdSubstituteHostDataTest. - thold_functions.php: thold_expand_string()'s |query_ifSpeed| fallback, the SNMP-query-resolved host/query token branch in $shell mode, and the top-level |host_management_ip| fallback that reads $device_id from Cacti's real lib/variables.php (a side effect of an include() inside the function's own scope). The last of those needs its own one-off library_path fixture rather than the shared one, since include_once() means the shared fixture's injected value would only ever take effect on the first call across the whole test run. - thold_functions.php: get_current_value()'s fail-closed return for a non-numeric stored RRD value (matches the existing empty-value-series contract already covered next to it). * fix: gate sample pair advancement on interval eligibility; resolve tags before quoting; add complete headers * test: cover rrd_heartbeat/rrd_step fallback branches in sample eligibility * fix: re-anchor stale rate baselines and stop re-scanning substituted values thold_sample_persistence() froze lasttime/oldvalue once a sample arrived after a heartbeat-exceeding gap, but thold_get_currentval() already fails that cycle's rate closed using the pair as it stood before this call, so freezing bought no extra protection while permanently disqualifying every later poll (whose elapsed time is measured against that same frozen lasttime and only grows). Always re-anchor to the current sample instead; thold_sample_interval_eligible() now only decides whether to log the re-anchor. thold_substitute_custom_data() and thold_expand_string() (both its host/query token loop and its |graph_title|/|data_source_description|/ |data_source_name| substitutions) quoted each value and then applied it with str_replace(), one token at a time. A later str_replace() call re-scans the whole string, including text just inserted by an earlier one, so a value that happens to contain another token's literal placeholder could be substituted a second time outside of its own quoting. Build a token => quoted-value map per substitution site and apply it in a single strtr() pass instead, same as thold_replace_threshold_tags(). Also switched thold_expand_string()'s and thold_substitute_custom_data()'s shell-escaping to the established cacti_escapeshellarg() wrapper instead of raw escapeshellarg(), matching every other quoting site in this file. Added regression coverage: a second poll recovering a real rate after a stale-gap re-anchor, and a re-scan test for each of the three affected substitution sites. * fix: close cross-phase/cross-function shell re-scan and log flooding thold_expand_string()'s per-phase strtr() passes were each individually re-scan-safe, but a value resolved in one phase (host/query, custom data) could still contain another phase's token literal text (e.g. a device description of |data_source_name|) and get re-substituted by that later phase, breaking out of the earlier phase's quoting. Separately, thold_command_execution() called thold_replace_threshold_tags() (quoting <TAG> values) and then passed the result into thold_expand_string(), which re-scans its input for |pipe| tokens - a <TAG> value containing a literal pipe token (e.g. a description of |host_hostname|) was expanded a second time with the real, unescaped device value spliced inside the tag's quoting. Introduce thold_defer_placeholder(): every substitution that needs shell quoting now inserts an opaque, non-token placeholder instead of its quoted value immediately, and records the real value in a map. Thread that map through thold_expand_string(), thold_substitute_custom_data(), thold_substitute_host_data(), and thold_replace_threshold_tags(); each resolves its own map internally when called standalone (preserving existing behavior/tests), or accepts a caller-supplied map by reference to defer resolution further. thold_command_execution() now expands pipe tokens first, then threshold tags, sharing one deferred map across both calls and resolving every placeholder in a single final strtr() only after all token scanning for the command is complete. Also stop thold_sample_persistence()'s stale-gap re-anchor warning from firing on every poll of a persistently stale source: it now only logs on the transition (prior lastread was still numeric), matching thold_log_unavailable_transition()'s own transition-only pattern. Renamed testStaleGapDoesNotAdvanceARateBearingPairButOtherCasesStillAdvance to testStaleGapReanchorsARateBearingPairAndAllOtherCasesStillAdvance, since the pair now always re-anchors. Added regression coverage for the cross-phase reorder within thold_expand_string(), the cross-function reorder in thold_command_execution(), and the transition-only re-anchor warning. * fix: preserve unavailable sentinel, prepared sample inserts, PHP 8.4 nullability thold_calculate_expression()'s pipe-token branch converted an empty (failed) thold_expand_string() result to '0' after the resolution attempt, so an unresolved |query_*| or host token became a manufactured valid zero instead of failing the expression closed like every other branch in this function. Drop that fallback; an empty operand now falls through the RPN loop's unsupported-field case and returns '' as intended. thold_polling_sample_row() built its sample row as a raw SQL value tuple string (id, tcheck, quoted lastread, FROM_UNIXTIME(lasttime), quoted oldvalue) for direct concatenation into an unprepared db_execute() call, unlike the status-only row it introduced alongside it. It now returns the same structured fields as the status row, and includes/polling.php builds '(?, ?, ?, FROM_UNIXTIME(?), ?)' placeholders with a flattened parameter list for db_execute_prepared(), matching the status-only path. rray & = null is an implicitly nullable parameter, deprecated in PHP 8.4; phpunit.xml enables failOnDeprecation, so loading this file could fail the PHP 8.4 CI job. Declared explicitly as ?array in all 4 functions that take it. Added a regression test for the unresolved-pipe-token fail-closed fix, and updated the sample-row assertions in TholdGetCurrentvalTest and PollerSchedulingTest for the new structured/prepared-statement shape. --------- Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> Co-authored-by: TheWitness <thewitness@cacti.net>	2026-09-21 04:03:48 -07:00
Thomas Vincent	6feed2574f	ci: pin integration tests to Cacti 1.2.31 (#776) ... * ci: pin integration tests to Cacti 1.2.31 * Guard optional PHPStan configuration * Guard optional Composer vendor binaries * Skip unavailable Composer quality scripts * ci: keep watching Cacti develop alongside the pinned release Pinning the checkout makes the suite exercise the compatibility contract the plugin declares, but it also means a regression in Cacti develop stops being visible here. One advisory job restores that signal: it builds against develop and is marked continue-on-error, so it reports without turning the plugin's own pull requests red. Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * ci: address workflow review feedback Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * ci: run plugin tests with Cacti Pest Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * test: pin Cacti harness expectations Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> --------- Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>	2026-08-17 17:05:41 -04:00
Thomas Vincent	4edd1331eb	fix(notify): drain only the notifications this run claimed (#804)	2026-08-17 13:01:03 -07:00