v3.1.1

A maintenance release: it aligns the nr-llm version requirement across the extension's manifests, hardens the CI pipeline, and addresses TYPO3 extension-assessment findings. No editor-facing changes.

Fixes

• Consistent nr-llm requirement. composer.json and ext_emconf.php now agree on the nr_llm constraint (>=0.3 <1.0); previously they could disagree, which risks a TER install being rejected or resolving a different version than Composer.
• Addressed TYPO3 extension-assessment findings.

Build & CI

• GitHub Actions are SHA-pinned, with Dependabot keeping the pins current.
• Adopts the shared extended-testing workflow from netresearch/typo3-ci-workflows and drops the redundant phpunit dev dependency it already provides.

Installation

composer require netresearch/t3-cowriter

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle t3-cowriter-3.1.1.zip.bundle \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  t3-cowriter-3.1.1.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.