Release v2.11.0

Release v2.11.0: csrf_action_form() Twig function

Changelog

Added

• csrf_action_form() Twig function (Nowo\FormKitBundle\Twig\CsrfActionFormExtension): csrf_action_form(action, csrfTokenId, method = 'POST', named = true, csrfFieldName = '_token', fields = {}, fieldTypes = {}, fieldOptions = {}) returns a FormView built on CsrfOnlyFormFactory — nested csrf_only[_token] (named: true, default), flat token (named: false, e.g. kit csrfFieldName: '_csrf_token') or CSRF + flat typed fields (fields, always empty prefix). The method is upper-cased. Registered (tag twig.extension) only when Twig is installed and the new twig.csrf_action_form option is true (default). See CSRF.md.
• Config nowo_form_kit.twig.csrf_action_form (bool, default true). Twig does not throw on duplicate function names (the extension registered last wins), so hosts that still ship their own csrf_action_form keep working; set false to keep only the host one explicitly.

Changed

• Maintenance: nowo-tech/phpstan-frankenphp dev lock bumped to 1.3.0; Rector type-control cleanups in FormOptionsMerger (no behaviour change).

Full Changelog: v2.10.0...v2.11.0