v5.0.2

Changes

• Merge pull request #183 from netresearch/release/5.0.2
• Merge pull request #182 from netresearch/fix/set-settings-definitions
• Merge pull request #181 from netresearch/chore/agents-md-sync
• Merge pull request #179 from netresearch/renovate/step-security-harden-runner-2.x
• Merge pull request #178 from netresearch/renovate/axe-core-playwright-4.x-lockfile
• Merge pull request #177 from netresearch/fix/codeowners-existing-team
• Merge pull request #175 from netresearch/fix/clear-text-logging-in-e2e-login
• chore(deps): update node.js to 24.19 (#176)
• Merge pull request #172 from netresearch/chore/sync-template-checks-r2
• Merge pull request #170 from netresearch/fix/168-datahandlerservice-querybuilder-table-and-typo
• Merge pull request #171 from netresearch/chore/sync-template-checks-gate
• Merge pull request #169 from netresearch/chore/dedupe-shared-dev-deps
• Merge pull request #167 from netresearch/fix/rector-shared-config
• Merge pull request #166 from netresearch/docs/signing-global-config
• Merge pull request #165 from netresearch/docs/commit-signing-policy
• fix: gate the debug output with a value, not an unparsable condition
• ci: sync labeler fork-PR fix from typo3-extension template
• chore(zizmor): drop the local policy copy, the reusable supplies it
• chore(deps): update dependency @playwright/test to v1.62.1 (#162)
• docs: sync the scanner wording from the template
• chore: untrack the DDEV-generated dbimage Dockerfile
• ci: drop the deprecated GITLEAKS_LICENSE secret mapping
• ci: add zizmor config exempting first-party reusables
• ci: add gitleaks and zizmor scanners to checks.yml

Installation

composer require netresearch/contexts

Publication status

• TER: extensions.typo3.org/extension/contexts — 5.0.2 verified
• Packagist: packagist.org/packages/netresearch/contexts — 5.0.2 verified
• Documentation: docs.typo3.org/p/netresearch/contexts/5.0/en-us/ — render verified

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle contexts-5.0.2.zip.sigstore.json \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  contexts-5.0.2.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.