Release 5.1.4

.github/workflows/ci-db-tests.yml

@@ -35,7 +35,7 @@ jobs:
       - name: Run tests
         run: composer test:db:${{ inputs.platform }}
       - name: Upload code coverage
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         if: ${{ matrix.php-version == '8.4' && inputs.platform == 'sqlite:ci' }}
         with:
           name: coverage-db

.github/workflows/ci-tests.yml

@@ -32,7 +32,7 @@ jobs:
         if: ${{ inputs.test-group == 'api' }}
         run: ./vendor/bin/rr get --no-interaction --no-config --location bin/ && chmod +x bin/rr
       - run: composer test:${{ inputs.test-group }}:ci
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v7
         if: ${{ matrix.php-version == '8.4' }}
         with:
           name: coverage-${{ inputs.test-group }}

.github/workflows/ci.yml

@@ -77,7 +77,7 @@ jobs:
         with:
           php-version: ${{ matrix.php-version }}
           extensions-cache-key: tests-extensions-${{ matrix.php-version }}
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v8
         with:
           path: build
       - run: mv build/coverage-unit/coverage-unit.cov build/coverage-unit.cov
@@ -95,7 +95,7 @@ jobs:
       - upload-coverage
     runs-on: ubuntu-24.04
     steps:
-      - uses: geekyeggo/delete-artifact@v5
+      - uses: geekyeggo/delete-artifact@v6
         with:
           name: |
             coverage-*

.github/workflows/publish-release.yml

@@ -19,7 +19,7 @@ jobs:
           extensions-cache-key: publish-swagger-spec-extensions-${{ matrix.php-version }}
           install-deps: 'no'
       - run: ./build.sh ${GITHUB_REF#refs/tags/v}
-      - uses: actions/upload-artifact@v5
+      - uses: actions/upload-artifact@v7
         with:
           name: dist-files-${{ matrix.php-version }}
           path: build
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/download-artifact@v6
+      - uses: actions/download-artifact@v8
         with:
           path: build
       - name: Publish release with assets
@@ -45,6 +45,6 @@ jobs:
     needs: ['publish']
     runs-on: ubuntu-24.04
     steps:
-      - uses: geekyeggo/delete-artifact@v5
+      - uses: geekyeggo/delete-artifact@v6
         with:
           name: dist-files-*

CHANGELOG.md

@@ -4,6 +4,23 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com), and this project adheres to [Semantic Versioning](https://semver.org).
 
+## [5.1.4] - 2026-06-18
+### Added
+* *Nothing*
+
+### Changed
+* *Nothing*
+
+### Deprecated
+* *Nothing*
+
+### Removed
+* *Nothing*
+
+### Fixed
+* [#2625](https://github.com/shlinkio/shlink/issues/2625) Fix MySQL connections failing with `[3159] Connections using insecure transport are prohibited` when `DB_USE_ENCRYPTION=true` against a server requiring TLS.
+
+
 ## [5.1.3] - 2026-06-16
 ### Added
 * *Nothing*

config/autoload/entity-manager.global.php

@@ -33,11 +33,17 @@
     };
     $driverOptions = match ($driver) {
         'mssql' => ['TrustServerCertificate' => 'true'],
-        'maria', 'mysql' => !$useEncryption
-            ? []
-            : [
+        'maria', 'mysql' => match (true) {
+            !$useEncryption => [],
+            PHP_VERSION_ID < 80_500 => [
+                1007 => true, // PDO::MYSQL_ATTR_SSL_KEY: Require using SSL
                 1014 => false, // PDO::MYSQL_ATTR_SSL_VERIFY_SERVER_CERT: Trust any certificate
             ],
+            default => [
+                1008 => '', // Pdo\Mysql::ATTR_SSL_CA: Require connections to be encrypted
+                1013 => false, // Pdo\Mysql::ATTR_SSL_VERIFY_SERVER_CERT: Trust any certificate
+            ],
+        },
         'postgres' => !$useEncryption
             ? []
             : [