Release 1.28.0 — Framework 1.45.0 (The Second Factor)
Body:
Summary
Tracks framework 1.45.0 "Fomalhaut".
- Bumps
glueful/frameworkconstraint to^1.45.0. - Adds
database/migrations/010_AddTwoFactorEnabledToUsers.php— theusers.two_factor_enabledboolean column (defaultfalse)
required by the framework's core email-PIN 2FA. Idempotent (hasColumn()guard). Only needed if enabling 2FA. - Adds
TWO_FACTOR_ENABLED(defaultfalse) + optional tunables to.env.example.
Upgrade Notes
- 2FA is opt-in. Without
TWO_FACTOR_ENABLED=true, this is behavior-identical to 1.27.0 — the migration is optional and
/2fa/*routes are not registered. - To enable: run the
010migration, installglueful/email-notification, setTWO_FACTOR_ENABLED=true, enroll users.
Test plan
composer update glueful/framework
php glueful migrate:run # only if enabling 2FA