𐂷 Holdfast

v5.0 - 12 Aug 2026

Added

• Test suite now runs through Alchemy, with CI

Fixed

• Dot notation works at any depth: deepGetDot, deepSetDot and deepUnsetDot handle a.b.c.d instead of stopping at two levels
• Array sanitization replaces keys in place, so a sanitized key no longer leaves a duplicate entry behind

Changed

• Tokens from generateToken() are now random bytes signed with HMAC-SHA256 using your secret
• A real secret is required for token generation: Anchor throws a clear exception instead of minting tokens without one
• Anchor now requires PHP 8.2+ and jumps from v1.6 to v5.0 to version alongside the rest of Leaf 5