chore(release): Prepare 2.4.0

[soulevilx]

Summary

• Prepare JOOservices Client 2.4.0 from the latest develop changes.
• Publish the native synchronous ext-curl transport, portable request options, sync builder API, download resume support, and HEAD convenience methods.
• Align release-facing documentation and the changelog for the 2.4.0 release.

Impact

This backward-compatible minor release adds an optional native cURL transport and related portable HTTP-client capabilities. Existing Guzzle-based integrations remain supported.

Validation

• composer validate --strict
• composer check
• composer ci
• Release branch pre-commit and pre-push hooks

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 37355bfd-e3e7-4992-af7c-cca6ed30b217

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[qodo-code-review]

ⓘ Qodo reviews are paused because the subscription is no longer active. Ask your workspace admin to reactivate the subscription to resume reviews. Manage billing

[codacy-production]

Not up to standards ⛔

🟢 Coverage 99.15% diff coverage

Metric	Results
Coverage variation	Report missing for 13fe6ea1
Diff coverage	✅ 99.15% diff coverage

View coverage diff in Codacy

Coverage variation details

	Coverable lines	Covered lines	Coverage
Common ancestor commit (13fe6ea)	Report Missing	Report Missing	Report Missing
Head commit (2a15ec2)	3041	3032	99.70%

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details

	Coverable lines	Covered lines	Diff coverage
Pull request (#52)	937	929	99.15%

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

¹ Codacy didn't receive coverage data for the commit, or there was an error processing the received data. Check your integration for errors and validate that your coverage setup is correct.

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[codecov-commenter]

Codecov Report

❌ Patch coverage is 99.19679% with 8 lines in your changes missing coverage. Please review.
✅ Project coverage is 99.73%. Comparing base (13fe6ea) to head (2a15ec2).

Files with missing lines	Patch %	Lines
src/Adapters/Curl/CurlHttpClientAdapter.php	98.46%	4 Missing ⚠️
src/Adapters/Curl/CurlRequestConfigurator.php	98.71%	3 Missing ⚠️
src/Adapters/Guzzle/GuzzleHttpClientAdapter.php	98.86%	1 Missing ⚠️

Additional details and impacted files

@@             Coverage Diff              @@
##             master      #52      +/-   ##
============================================
+ Coverage     98.84%   99.73%   +0.89%     
- Complexity     1023     1473     +450     
============================================
  Files            76       88      +12     
  Lines          2430     3460    +1030     
============================================
+ Hits           2402     3451    +1049     
+ Misses           28        9      -19     

Flag	Coverage Δ
unittests	99.73% <99.19%> (+0.89%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

Prepares the JOOservices Client 2.4.0 release by introducing an optional native synchronous ext-curl transport (with a shared portable-options catalog), adding download safety/resume features, extending the HTTP client API with HEAD helpers, and aligning tests/benchmarks/docs/CI for the release.

Changes:

• Add native ext-curl transport + portable request option catalog, including redirect hardening and errno-to-exception mapping.
• Add portable download features (max_size, resume) across transports, plus HEAD/HEAD-async convenience APIs.
• Update tests, docs, benchmarks, and GitHub workflows for the 2.4.0 release surface and security tooling.

Reviewed changes

Copilot reviewed 76 out of 77 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
tests/Unit/Support/FinalCoverageTest.php	Adjust pipeline stack construction to use MockHandler/typed stacks.
tests/Unit/Support/CoverageBoostTest.php	Add broad unit coverage for new/edge-path behaviors (downloads, logging, curl helpers).
tests/Unit/Signing/HmacSha256SignerTest.php	Add tests for chunked hashing + stream rewind behavior.
tests/Unit/Middleware/MiddlewarePipelineTest.php	Use helper to inject malformed handlers for guard-path testing.
tests/Unit/Middleware/MiddlewarePipelineCoverageTest.php	Extend pipeline coverage (same-name insert behavior, stack creation adjustments).
tests/Unit/Middleware/CacheMiddlewareTest.php	Add test ensuring cache bypass when sink is present.
tests/Unit/Client/HttpClientTest.php	Tighten assertions around options shape for transfer stats hook.
tests/Unit/Client/HttpClientHeadTest.php	Add unit tests for new head() / headAsync() helpers.
tests/Unit/Client/HttpClientDownloadTest.php	Add tests for max_size normalization, resume Range header, and guard helpers.
tests/Unit/Client/HttpClientDownloadMaxSizeIntegrationTest.php	Add integration-style test validating max-size abort before writing bytes.
tests/Unit/Client/ClientBuilderTest.php	Expand builder tests for custom adapters + middleware composition + UA casing behavior.
tests/Unit/Adapters/MiddlewareTransportAdapterTest.php	Add unit coverage for middleware-wrapping transport adapter behavior.
tests/Unit/Adapters/CurlRequestBodyBuilderTest.php	Add unit tests for curl body-building across json/form/multipart/body cases.
tests/Unit/Adapters/CurlHttpClientAdapterTest.php	Add unit tests for curl adapter option validation and header safety.
tests/Unit/Adapters/CurlErrorMapperTest.php	Add unit tests for curl errno mapping + message sanitization.
tests/TestCase.php	Add shared helper to force malformed Guzzle handler injection for tests.
tests/Integration/Adapters/fixtures/router.php	Add local PHP server router to support curl transport integration tests.
tests/Integration/Adapters/fixtures/functions.php	Add tiny helpers for integration test server env access.
tests/Integration/Adapters/CurlHttpClientAdapterIntegrationTest.php	Add end-to-end integration suite for curl transport behavior via local server.
tests/Benchmark/CoreBench.php	Switch benchmark handler to MockHandler with prefilled responses.
src/Support/PortableRequestOptions.php	Introduce shared portable/unsupported request-option catalogs for curl parity.
src/Support/DownloadSizeGuard.php	Add normalization + transport-specific hooks for portable max_size.
src/Signing/HmacSha256Signer.php	Switch signer to streaming HMAC (chunked) and preserve stream position.
src/Middleware/MiddlewarePipeline.php	Fix same-name insert corruption + add synchronous pipeline builder.
src/Middleware/LoggingMiddleware.php	Minor coverage-ignore annotation adjustment.
src/Middleware/CacheMiddleware.php	Bypass cache when sink is used; minor coverage-ignore annotation adjustment.
src/Logging/RequestLogDocumentBuilder.php	Refine coverage-ignore annotations and unreachable fallbacks.
src/Logging/LogSanitizer.php	Add coverage-ignore guard around unexpected preg_replace outcome.
src/Exceptions/TransportBusyException.php	Add exception for re-entrancy on single-inflight transports (curl).
src/Exceptions/DownloadSizeExceededException.php	Add exception for max-size download enforcement.
src/Exceptions/AsyncTransportNotSupportedException.php	Add exception for async usage on sync-only transports.
src/Contracts/HttpClientInterface.php	Add head() to sync client contract.
src/Contracts/AsyncHttpClientInterface.php	Add headAsync() to async client contract.
src/Client/HttpClient.php	Add HEAD helpers; centralize download option prep (sink/max_size/resume).
src/Client/ClientBuilder.php	Add curl transport selection + sync build; enable middleware with custom adapters via wrapper.
src/Cache/FilesystemCache.php	Minor coverage-ignore annotation adjustment around filesystem edge cases.
src/Adapters/MiddlewareTransportAdapter.php	Add adapter wrapper to apply sync middleware pipeline to injected transports.
src/Adapters/Guzzle/GuzzleHttpClientAdapter.php	Add resume sink handling, max-size header checks, and better exception rethrowing.
src/Adapters/Curl/CurlRequestConfigurator.php	Add core curl option translation (timeouts, redirects, sink, max_size, resume, etc.).
src/Adapters/Curl/CurlRequestBodyBuilder.php	Add curl POSTFIELDS builder for portable body/json/form/multipart inputs.
src/Adapters/Curl/CurlProtocolRestrictor.php	Restrict protocols to HTTP(S) and validate redirect protocol allowlist.
src/Adapters/Curl/CurlNetworkOptionsConfigurator.php	Apply portable HTTP version + forced IP resolve options.
src/Adapters/Curl/CurlHttpClientAdapter.php	Add native synchronous curl transport implementation with portable-options validation.
src/Adapters/Curl/CurlHeaderBuilder.php	Add safe header merging + default UA + CRLF injection protection.
src/Adapters/Curl/CurlErrorMapper.php	Add errno mapping to package exceptions with sanitized messages.
src/Adapters/Curl/CurlClientCertificateConfigurator.php	Add portable cert/ssl_key option handling for mTLS.
src/Adapters/Curl/CurlAuthConfigurator.php	Add portable auth option handling with supported auth types.
README.md	Document curl transport usage and portability matrix; add Codacy badge.
phpstan-tests-baseline.neon	Remove no-longer-needed ignores after test refactors.
docs/05-maintenance/BACKLOG-POST-2.0.md	Update backlog notes for post-curl parity items.
docs/05-maintenance/03-external-ci-integrations.md	Document optional Codacy integration and excluded paths behavior.
docs/04-development/glossary.md	Update glossary entries for new transports/wrapper adapter.
docs/03-examples/README.md	List new curl transport example.
docs/03-examples/07-curl-transport.php	Add runnable example for curl transport + buildSync().
docs/02-user-guide/troubleshooting.md	Add troubleshooting guidance for curl option/async rejections and busy transport.
docs/02-user-guide/classes-reference.md	Update class reference for new builder/transport APIs.
docs/02-user-guide/api-reference.md	Add API docs for curl transport selection and buildSync().
docs/01-getting-started/installation.md	Note ext-curl as optional dependency for curl transport.
docs/01-getting-started/basic-concepts.md	Update library description and release target for 2.4.0.
docs/00-architecture/business-context-and-goals.md	Update deliberate limits to mention curl transport (needs correctness tweak).
docs/00-architecture/04-modules-and-domains.md	Update architecture module bullets for curl/custom transport options.
docs/00-architecture/01-project-overview.md	Update release target and adapter layer description to include curl.
CONTRIBUTING.md	Document PR title semantic rules/capitalization enforcement.
composer.json	Bump jooservices/exceptions constraint; document ext-curl suggestion.
CLAUDE.md	Update AI guidance to reflect curl transport and PR title rules.
CHANGELOG.md	Add 2.4.0 release notes detailing new transports/options/APIs.
AGENTS.md	Update repo instructions summary with curl transport + portable options note.
.github/workflows/semantic-pr.yml	Pin semantic PR action by SHA.
.github/workflows/secret-scanning.yml	Bump/pin checkout action SHA.
.github/workflows/scorecard.yml	Bump/pin actions SHAs for scorecard and SARIF upload.
.github/workflows/release.yml	Tighten permissions and pin actions; add composer validate/audit steps.
.github/workflows/pr-labeler.yml	Use base SHA checkout to prevent PR-controlled labeler config execution.
.github/workflows/fortify.yml	Add optional Fortify AST scan workflow with credential gating.
.github/workflows/codacy.yml	Add Codacy CLI SARIF scan workflow with upload normalization.
.github/workflows/ci.yml	Pin actions, add optional Codacy coverage upload, adjust artifact retention.
.codacy.yml	Add Codacy repository config excluding tests/vendor/coverage and size-based engines.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Pull request overview

Copilot reviewed 76 out of 77 changed files in this pull request and generated no new comments.

Suppressed comments (1)

src/Client/HttpClient.php:176

• When resume is enabled, this unconditionally adds a Range header without removing any user-supplied range/Range variants. Because request headers are merged case-sensitively elsewhere, callers can accidentally send duplicate Range headers (e.g. pre-existing range plus injected Range), which can lead to undefined server behavior.