Skip to content

v0.2.0

Choose a tag to compare

View all tags
@CybotTM CybotTM released this 28 Feb 20:01
v0.2.0
This tag was signed with the committer’s verified signature.
CybotTM Sebastian Mendel
SSH Key Fingerprint: NOxv8dcZlMFz3wrLdHILVNSnF6xskqAjN3bnn0i7K30
Verified
Learn about vigilant mode.
8f8ca2e
This commit was signed with the committer’s verified signature.
CybotTM Sebastian Mendel
SSH Key Fingerprint: NOxv8dcZlMFz3wrLdHILVNSnF6xskqAjN3bnn0i7K30
Verified
Learn about vigilant mode.

Highlights

PHP 8.2+ and TYPO3 v13.4+ Compatibility

This release widens compatibility from PHP 8.4/TYPO3 v14-only to PHP 8.2+ and TYPO3 v13.4+, making the extension available to a much broader range of TYPO3 installations.

Key compatibility changes:

  • PHP constraint widened to ^8.2 (was ^8.4)
  • TYPO3 constraint widened to ^13.4 || ^14.0 (was ^14.0)
  • Removed PHP 8.3+ features (#[Override], typed class constants) for PHP 8.2 compatibility
  • Replaced TYPO3 v14-only APIs with v13-compatible equivalents
  • CI matrix expanded to PHP 8.2-8.5 and TYPO3 v13.4/v14

Testing & Quality

  • Comprehensive unit and functional tests for 80%+ coverage
  • Docker-based runTests.sh for reproducible test execution
  • Fuzz and mutation testing (Infection) with 70%+ MSI thresholds
  • CodeQL security scanning for actions and JavaScript
  • OpenSSF Scorecard compliance improvements

Infrastructure

  • Migrated CI to centralized workflows
  • Replaced DDEV with GitHub Services for E2E tests
  • SPDX copyright and license headers on all PHP files
  • DDEV: make up as single command for complete setup

Changes

  • chore: bump version to 0.2.0
  • chore: move phpunit.xml and phpstan-baseline.neon into Build/ (#71)
  • feat: widen compatibility to PHP 8.2+ and TYPO3 v13.4+ (#70)
  • test: add comprehensive unit and functional tests for 80%+ coverage (#34)
  • refactor(testing): implement Docker-based runTests.sh (#57)
  • feat: add CodeQL security scanning (#53)
  • chore: improve OpenSSF Scorecard compliance (#64)
  • chore: add SPDX copyright and license headers (#69)
  • fix(ci): replace DDEV with GitHub Services for E2E tests (#37)
  • fix(ddev): make up as ONE COMMAND for complete setup (#36)
  • chore(deps): upgrade nr-vault from dev-main to ^0.3.0 (#35)

Installation

composer require netresearch/nr-llm

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

# Install cosign
go install github.com/sigstore/cosign/v2/cmd/cosign@latest

# Verify artifact signature
cosign verify-blob \
  --bundle nr_llm-0.2.0.zip.bundle \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  nr_llm-0.2.0.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.

Full Changelog: v0.1.2...v0.2.0

Assets 14
Loading