v2.1.0

drupal-qa-setup. One command installs drupal-qa on a site: it pulls the site down from Pantheon if needed, installs the package with a matching drupal/core-dev, raises an old PHP platform pin, writes the workflow, creates or adopts the GitHub repository (never force-pushing), sets both secrets without echoing them, adds the SSH key to Pantheon, opens the first pull request and watches its run. --dry-run changes nothing.

bash <(curl -fsSL https://raw.githubusercontent.com/DanePete/drupal-qa/main/bin/drupal-qa-setup)

A broader baseline. New checks after every deploy: deploy hooks, the status report's errors, and PHP warnings logged while the tests run. New smoke tests: the newest page of each content type, the front page's CSS and JS, security and cache headers, password reset, registration, admin screens and add forms, and safe roles. Webform, search, sitemap and metatag tests run only where the module is enabled. Nothing submits a form.

Drupal 10. PHPStan 1 is accepted alongside 2, so drupal-qa installs next to drupal/core-dev 10.x, and PHPUnit says plainly when drupal/core-dev is missing instead of dying on a PHP fatal.

Fixes. The administrator scenarios use the site's admin role whatever it's called; the status report reads past Drush's multi-line log messages; registration-dependent permission checks.

Validated end to end on Pantheon multidevs: a Drupal 11 sandbox and a sanitized copy of a production Drupal 10 site.