Release v1.31.2

v1.31.2

Changelog

Controllers no longer autoconfigured (REQ-SF-004 rule 7, no route change); QR/logout form types are FormKit types (no markup change). See UPGRADING.

Changed

• All page form types are FormKit Types (REQ-TWIG-005 rule 11): QrLoginDenyType, QrLoginRetryType and LogoutFormType now carry #[FormKitConfig('auth_kit')] + FormOptionsTrait like the other auth forms. Form names, block prefixes, field names, methods and CSRF settings (csrf_protection: false; logout field _csrf_token, token id logout) are unchanged, and so is the rendered markup. A unit test asserts every src/Form/*Type.php is bound to the auth_kit profile.

Fixed

• Bundle routes stay opt-in (REQ-SF-004 rule 7): the controller services (all carrying #[Route]) are registered with autoconfigure: false and an explicit controller.service_arguments tag, so Symfony >= 7.3 never tags them routing.controller and a host's controllers: { resource: routing.controllers } cannot register the AuthKit routes; they only come from @NowoAuthKitBundle/Resources/config/routing.yaml (profile route loader). This replaces ControllerRouteAttributesPass, which removed the tag after autoconfiguration. Route names and paths are unchanged. Regression test with a kernel whose routing is only routing.controllers.

What's Changed

• fix(routing): keep bundle routes opt-in (REQ-SF-004 rule 7) by @HecFranco in #20
• feat(forms): FormKit types and profile for page forms (REQ-TWIG-005 rule 11) by @HecFranco in #21

Full Changelog: v1.31.1...v1.31.2