v4.0.0

Changes

• feat(typo3)!: TYPO3 v14.3 LTS support and backend-module save fix (#100) (#101)
• test: correct billion-laughs entity-expansion bound (#99)
• ci: migrate to split typo3-extension template (#98)
• ci: adopt canonical typo3-extension template (#97)
• fix(ci): migrate release workflow to grouped release-typo3-extension caller (#96)
• fix(deps): update symfony packages to v8 (#95)
• Merge pull request #94 from netresearch/fix/phpstan-strict-design
• Merge pull request #92 from netresearch/docs/remove-fake-pagination-known-problem
• fix: remove empty secrets blocks and fix YAML syntax
• chore: remove explicit gitleaks call, now handled by org-wide default
• fix: add permissions to gitleaks job, remove stale secret from security job
• feat: add direct gitleaks call from netresearch/.github
• fix: use @main for .github reusable workflows, not SHA pin
• chore: migrate generic workflows from typo3-ci-workflows to .github
• chore: migrate to org-wide Renovate preset
• Merge pull request #91 from netresearch/fix/remove-redundant-dev-dependencies
• Merge pull request #90 from netresearch/renovate/infection-infection-0.x
• Merge pull request #89 from netresearch/refactor/comprehensive-quality-improvements
• Merge pull request #88 from netresearch/fix/harden-github-actions
• Merge pull request #87 from netresearch/fix/merge-group-trigger
• Merge pull request #86 from netresearch/chore/add-centralized-workflows
• ci: add PHP 8.5 to test matrix for TYPO3 v13
• chore: add Makefile with standard development targets
• chore: update caller workflows for centralized CI changes
• chore: migrate to centralized reusable CI workflows
• Merge pull request #85 from netresearch/renovate/step-security-harden-runner-2.x
• chore: replace generic email addresses with GitHub references
• Merge pull request #83 from netresearch/renovate/github-codeql-action-4.x
• Merge pull request #82 from netresearch/renovate/actions-dependency-review-action-4.x
• Merge pull request #81 from netresearch/ci/ext-emconf-version-validation
• Merge pull request #80 from netresearch/renovate/major-phpstan-packages
• Merge pull request #79 from netresearch/renovate/github-codeql-action-4.x
• Merge pull request #78 from netresearch/chore/openssf-scorecard
• Merge pull request #77 from netresearch/renovate/step-security-harden-runner-2.x
• Merge pull request #76 from netresearch/renovate/github-codeql-action-4.x
• Merge pull request #74 from netresearch/renovate/github-codeql-action-4.x
• Merge pull request #75 from netresearch/fix/php-cs-fixer-style
• chore: also automerge pin and digest updates
• fix: only automerge patch/minor updates, not majors
• chore: enable renovate automerge for patch/minor updates
• feat: add CodeQL security scanning for actions and JavaScript
• Merge pull request #71 from netresearch/renovate/actions-cache-5.x
• ci: add auto-merge workflow for dependency PRs
• chore: enable auto-merge for Renovate PRs
• docs: add complete GitHub integration for docs.typo3.org
• docs: change license to Creative Commons BY 4.0
• fix(docs): correct guides.xml schemaLocation and add theme attribute

Installation

composer require netresearch/nr-textdb

Publication status

• TER: extensions.typo3.org/extension/nr_textdb — 4.0.0 verified
• Packagist: packagist.org/packages/netresearch/nr-textdb — 4.0.0 verified
• Documentation: docs.typo3.org/p/netresearch/nr-textdb/4.0/en-us/ — render verified

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle nr-textdb-4.0.0.zip.sigstore.json \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  nr-textdb-4.0.0.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.