v11.4.0 Add an Option to Skip Webhook Signature Verification

What's Changed

• Allow to skip signature verification by @habara-k in #741

With this release, developers can now optionally skip signature verification when parsing incoming webhook requests. This new capability is especially useful in scenarios where the channel secret may change, potentially causing temporary signature mismatches.

Example Usage:

$options = new EventRequestOptions(function () {
    return true;
});

$parsedEvents = EventRequestParser::parseEventRequest(
    $req->getBody(), $secret, $signature[0], $options
);

When signature verification is skipped, the signatureValidator will not be invoked. This allows webhook requests to be processed even if their signatures do not match the current channel secret used for verification.

This feature is particularly helpful in high-availability systems where avoiding downtime or message loss during configuration updates is critical.

Dependency updates

• chore(deps): update dependency squizlabs/php_codesniffer to v3.13.4 by @renovate[bot] in #734
• chore(deps): update actions/github-script action to v7.1.0 by @renovate[bot] in #735
• chore(deps): update actions/github-script action to v8 by @renovate[bot] in #736
• chore(deps): update actions/setup-node action to v5 by @renovate[bot] in #737
• chore(deps): update actions/stale action to v10 by @renovate[bot] in #738
• chore(deps): update dependency squizlabs/php_codesniffer to v4 by @renovate[bot] in #742
• chore(deps): update shivammathur/setup-php action to v2.35.5 by @renovate[bot] in #744
• chore(deps): update actions/cache action to v4.3.0 by @renovate[bot] in #745
• chore(deps): update actions/stale action to v10.1.0 by @renovate[bot] in #747
• chore(deps): update actions/setup-node action to v6 by @renovate[bot] in #749

Other Changes

• Set minimumReleaseAge to 7 days to avoid merge renovate PR quickly by @Yang-33 in #739
• Use github actor id instead of bot name to avoid renaming issues by @Yang-33 in #740
• Prevent command injection when creating release notes by @Yang-33 in #748

New Contributors

• @habara-k made their first contribution in #741

Full Changelog: v11.3.0...v11.4.0