chore(release): S-Cart 3.5.2 — require core 3.10.3, shop 3.8.1

S-Cart 3.5.2 — 2026-11-07
An improvement release worth installing now, especially for sites on Docker or behind a proxy / CDN.
Includes: core 3.10.3 · front 3.5.2 · shop 3.8.1 · mcp 2.0.1

✨ New

• TRUSTED_PROXIES alert — the System alerts page and gp247:doctor warn when the proxy setting trusts every visitor

🔧 Improvements

• Password-reset and e-mail verification links always point at the store's configured domain
• The visitor IP and domain are only taken from a declared proxy
• The Docker stack trusts no proxy by default (Docker)

⚠️ To do when updating

• Run composer update, then php artisan gp247:update
• Check that APP_URL in .env is your real domain (https://…) — e-mail links use it
• (Behind a proxy / CDN) the proxy must keep the Host header; GP247 no longer reads X-Forwarded-Host / X-Forwarded-Prefix
• (Docker behind nginx / Caddy / Traefik on the same server) composer update does not change your site files: take the new docker-compose*.yml and docker/nginx/default.conf, set TRUSTED_PROXIES=172.16.0.0/12 and SC_DOCKER_APP_PORT=127.0.0.1:8000 in .env, then run docker compose up -d
• (TRUSTED_PROXIES contains REMOTE_ADDR or *) replace it with your real proxy's IP ranges, or leave it empty
• (Sites using the CheckIP plugin) update CheckIP to 2.1.7 or later