Here is my phpMyAdmin report for June 2019.

In June 2019 I worked on the main repository, on security hardening and bug fixes.

First week (23)

I fixed the "logout and try as another user" link, which no longer uses ajax mode, a case that shows up after a GRANT PROXY query. I also fixed the TIMESTAMP columns that could not be edited or exported when their default is CURRENT_TIMESTAMP on MySQL 8.0.13 (#15315), and a TypeError on substring (#10846, pull-request #15284).

Second week (24)

I hardened the HMAC secret by using the blowfish_secret and made it a secret for the user. I added unit tests for the session renewal, a key for HHVM, and removed the type hints that HHVM does not support. I also fixed the broken foreign key links: middle-click, Command+Click and the relational links in tables were not working anymore (#14270, #14363, #15225).

Third week (25)

I fixed the export of the GIS visualisation (#15334), after replacing $_REQUEST by $_GET and $_POST, and the weird error on an empty collation (#14987). I merged the phpstan level 3 fixes, which left 21 errors, and removed some excluded patterns from the configuration with a note to revert that once level 3 is complete. I also fixed the multi server setup number of results selector, the broken foreign key links and the Windows CI that exited with a failure because of the GPG agent.

Fourth week (26)

I replaced the session token with a hexadecimal one (#14918) and fixed most of the deprecated jQuery calls (#15355), the event shortcuts that jQuery 3 deprecates (#13173). I also fixed a column misalignment (#15230), improved the code of _getFieldVisibilityParams, merged the CodeTriage badge and added a FAQ entry about the country_code column.

Other projects

On the packaging side I updated the Homebrew formula of phpMyAdmin from 4.8.6 to 4.9.0.1 (homebrew-core #40809), added real name checking for the sign-off on phpmyadmin/scripts (#19), fixed the urls on octokit.js (#1401) and added support for contexts in sentry-php (#839).