v5.3.0

5.3.0 (2026-09-08)

Features

• Release/batch (#122) (5096401)
• app: Add path-scoped CSRF middleware based on slim/csrf-guard (bb1e6a3)
• admin: Add the CSRF middleware on common Admin login and password endpoints (dc909b2)

Bug Fixes

• app: Add unit tests for CsrfMiddleware and its service registration (10a9594)
• app: Fail loudly on invalid CsrfMiddleware path patterns, document it (15ceb1f)
• chore: Do not log deprecated errors from script (9d9a1a9)
• admin: Use Guzzle for reCAPTCHA (5bbf855)
• image: Use sys_get_temp_dir() instead of hardcoded /tmp (9060df0)
• chore: Fix issues flagged by PHPStan (6759137)
• chore: Add PHPStan, once, to CI (cdf9bbd)
• chore: Fix tests and add tests to PHPStan ci (073a07a)
• chore: More fixes from PHPStan (6abe07e)
• chore: Replace deprecated FILTER_SANITIZE_STRING with a compatible Sanitizer utility (7d23819)
• chore: Sanitize remaining unfiltered request inputs (3bd5835)
• chore: Fix PHPCS (4a47093)
• chore: Suppress AWS SDK's PHP <8.1 deprecation warning in S3 client (a3fe136)