DevTools 4.0.4

DevTools 4.0.4

DevTools 4.0.4 fixes Composer dependency preparation when DevTools builds itself in automated workflows.

Fixed

• Keep DevTools' locked Composer packages available as build assets without treating them as virions during its own build.
• Accept full-SHA-pinned first-party GitHub Actions while requiring checkout credentials to remain disabled.

Compatibility

• Existing commands, manifests, workflow inputs and public runtime APIs are unchanged.
• PHP 8.4 remains the minimum supported version. CI covers PHP 8.4 and 8.5.

Upgrading

• Projects using Composer-prepared BedrockNexus workflows should update to this release to build DevTools correctly.
• Other projects do not need configuration changes.

The release tag and checksum manifest are signed with the maintainer's GPG key. Verify SHA256SUMS.txt.asc before checking the downloaded assets against SHA256SUMS.txt.

DevTools 4.0.3

DevTools 4.0.3

DevTools 4.0.3 hardens path validation, background build failures and localized diagnostics without changing the public command or manifest contracts.

Fixed

• Preserve worker identifiers and typed responses when background jobs fail.
• Keep source paths, Windows roots, locale identifiers and Composer PHP constraints intact across build and validation flows.
• Reject unsafe virion paths, reserved Windows device names, duplicate manifest sections and external project paths.
• Improve namespace reference detection for dynamic strings, reflection properties and compound function guards.
• Preserve extracted files during rollback and create valid empty ZIP archives.
• Localize diagnostics consistently across the CLI, workers, runtime loader and all 14 supported locales.
• Clarify validation failures for PHPStan, YAML linting and unsupported PHP constraints.

Compatibility

• Existing commands, manifests, workflow inputs and public runtime APIs are unchanged.
• PHP 8.4 remains the minimum supported version. CI covers PHP 8.4 and 8.5.

Upgrading

• Replace plugins/DevTools.phar and restart the server.
• No manifest or workflow changes are required for supported projects.
• Projects using the existing DevTools workflows do not need configuration changes.

The release tag and checksum manifest are signed with the maintainer's GPG key. Verify SHA256SUMS.txt.asc before checking the downloaded assets against SHA256SUMS.txt.

DevTools 4.0.2

DevTools 4.0.2

DevTools 4.0.2 hardens YAML and archive processing and closes runtime, extraction and localization edge cases.

Security

• Disable PHP object decoding when parsing YAML.
• Reject archives with more than 10,000 entries, any entry larger than 64 MiB, or more than 256 MiB of uncompressed content.

Fixed

• Preserve background job results when errors contain invalid UTF-8.
• Report the resolved plugin or virion type during extraction.
• Tighten dynamic class annotation checks used by PHAR namespace shading.
• Complete runtime, virion, queue and extraction messages in all 14 locales.

Compatibility

• Existing commands, manifests and workflow inputs are unchanged.
• PHP 8.4 remains the minimum supported version. CI covers PHP 8.4 and 8.5.
• Archives above the new processing limits are rejected.

Upgrading

• Replace plugins/DevTools.phar and restart the server.
• No manifest or workflow changes are required for supported projects.
• Reduce archives that exceed the documented processing limits before building or extracting them.

The release tag and checksum manifest are signed with the maintainer's GPG key. Verify SHA256SUMS.txt.asc before checking the downloaded assets against SHA256SUMS.txt.

DevTools 4.0.1

DevTools 4.0.1

DevTools 4.0.1 makes repeated plugin and virion PHAR builds reproducible when staged files and the build toolchain are unchanged.

Changes

• Use stable archive entry ordering and normalized metadata for plugin and virion PHAR builds.
• Retain SHA-256 PHAR signatures after archive metadata normalization.
• Declare the ZIP extension required by the PHAR build path.

Compatibility

• Plugin commands, manifest formats, namespace contracts, and runtime APIs are unchanged.
• PHP 8.4 remains the minimum supported version. CI covers PHP 8.4 and 8.5.
• Build environments must provide the ZIP extension.

Upgrading

• Replace plugins/DevTools.phar and restart the server.
• No source migration is required for plugin or virion consumers.

The release tag and checksum manifest are signed with the maintainer's GPG key. Verify SHA256SUMS.txt.asc before checking the downloaded assets against SHA256SUMS.txt.

DevTools 4.0.0

DevTools 4.0.0

DevTools 4.0.0 reorganizes dependency selection, runtime loading and artifact building. Direct PHP integrations need the migration described below. Plugin commands, workflow inputs, manifest formats and CLI JSON schema remain unchanged.

Changes

• Keep startup dependency errors scoped to the affected folder plugin.
• Separate candidate selection and graph checks from class-loader registration while preserving folder precedence, compatible cycles and ordered diagnostics.
• Share artifact replacement and rollback across plugin, virion and dual builds.
• Share prepared-content verification and project doctor checks, and retain preflight data when a CLI build fails.

Upgrading

• Replace plugins/DevTools.phar and restart the server.
• Use AxolotlBucketLabs/DevTools@v4 or the corresponding reusable workflow reference for the 4.x channel. v3 remains on the 3.x series. latest follows stable releases across major versions.
• Direct PHP callers must update the dual builder, CLI and folder-loader construction described in the migration guide.
• PHP 8.4 remains the minimum. Quality checks cover PHP 8.4 and 8.5. Real-server smoke tests use Axolotl-PM 5.51.1 on PHP 8.4.27.

The release tag and checksum manifest are signed with the maintainer's GPG key. Verify SHA256SUMS.txt.asc before checking the downloaded assets against SHA256SUMS.txt.

DevTools 3.3.1

DevTools 3.3.1

DevTools 3.3.1 completes the localization and documentation follow-up for the v3 workflow while aligning the source tree with PocketMine-MP formatting conventions.

Highlights

• Complete the runtime message catalogs for all 14 supported Axolotl-PM locales.
• Localize the remaining user-facing CLI and runtime diagnostics while keeping machine-readable JSON output stable.
• Clarify runtime startup phases and align the CLI, ecosystem and GitHub Actions documentation with the current v3 interfaces.
• Use PocketMine-MP-compatible PHP formatting rules for the source, tests, tools and examples.
• Add a dedicated GitHub Actions check for PHP code style.

Compatibility and upgrade notes

• This is a patch release for the existing v3 workflow channel.
• Existing plugin and virion projects do not need a migration.
• The CLI JSON schema and PHAR build or extraction formats are unchanged.

DevTools 3.3.0

DevTools 3.3.0

DevTools 3.3.0 makes Composer dependencies easier to use during local plugin development while preserving strict, reproducible PHAR builds.

Highlights

• Load a matching local virion source folder from virions/ when a plugin's composer.lock declares that Composer package.
• Prefer a verified Composer-prepared package when one is available, while supporting mixed prepared and local dependency graphs.
• Keep version constraints and shared dependency conflicts strict. Local package metadata, autoloading, antigen, source layout and PHP compatibility must match the lock.
• Add virions.allow-local-composer to disable local Composer source folders and require prepared packages at server startup.
• Keep PHAR builds and doctor checks strict: dependencies must still be prepared with verified provenance.
• Translate local Composer-source diagnostics and shared-virion loading summaries across all 14 supported Axolotl-PM locales.

Compatibility and upgrade notes

• This is an additive release for the existing v3 workflow channel. Existing non-Composer local virions continue to work.
• Local Composer source loading is enabled by default for server development. Set virions.allow-local-composer: false to require prepared packages.
• No dependency is downloaded during server startup. CI and release builds continue to use prepared, lock-verified dependencies.
• The CLI JSON schema and PHAR build or extraction formats are unchanged.

DevTools 3.2.0

DevTools 3.2.0

DevTools 3.2.0 adds multilingual human-facing output for server commands and the CLI.

Highlights

• Include translated catalogs for 14 Axolotl-PM locales: bul, chs, deu, eng, fra, ita, jpn, kor, lav, nld, rus, spa, tur and vie.
• Follow the server language with language: auto, or select a locale explicitly in config.yml.
• Select a CLI language with --lang=CODE or the DEVTOOLS_LANG environment variable.
• Localize lifecycle messages, command summaries, common build and extraction results and CLI help.
• Keep detailed validator and builder diagnostics in English so paths, package names and error details remain exact.

Compatibility and upgrade notes

• This is an additive, backward-compatible release for the existing v3 workflow channel.
• Existing server configurations continue to use automatic server-language selection unless language is changed.
• The CLI JSON schema and build, extraction and dependency behavior are unchanged.
• PHAR creation still requires PHP to run with phar.readonly=0. Loading an existing PHAR does not.

DevTools 3.1.0

DevTools 3.1.0

DevTools 3.1.0 adds opt-in DEBUG diagnostics for development loading and build workflows.

Highlights

• Enable server diagnostics with logging.debug: true in DevTools' config.yml.
• Add --debug to CLI commands for lifecycle, discovery, dependency-selection and artifact diagnostics.
• Keep DEBUG disabled by default and keep CLI JSON output on stdout without diagnostic noise.
• Add diagnostics across folder plugin discovery, shared virion resolution, PHAR builds, extraction and background worker jobs.
• Refresh the locked Symfony Filesystem dependency to v6.4.50 to include its upstream security fix.

Compatibility and upgrade notes

• This is an additive, backward-compatible release for the existing v3 workflow channel.
• Existing server configurations continue to run with DEBUG disabled.
• The CLI JSON schema and normal server command output are unchanged.
• PHAR creation still requires PHP to run with phar.readonly=0. Loading an existing PHAR does not.

DevTools 3.0.0

DevTools 3.0.0

This major release moves DevTools to the AxolotlBucketLabs organization and renames its PHP namespace to AxolotlBucketLabs\DevTools.

Breaking changes

• Update GitHub Actions references from NhanAZ/DevTools to AxolotlBucketLabs/DevTools.
• Update direct PHP imports from NhanAZ\DevTools to AxolotlBucketLabs\DevTools.
• The maintained workflow channel is now v3. The v2 channel remains available at its prior release for consumers that need a staged migration.

Compatibility

• CLI and GitHub Actions builds remain synchronous, with the v3 workflow contract matching the v2 build inputs and outputs.
• PHAR creation still requires PHP to run with phar.readonly=0. Loading an existing PHAR does not.