Skip to content

Release v1.24.2

Choose a tag to compare

View all tags
@HecFranco HecFranco released this 29 Aug 08:45
· 13 commits to main since this release
v1.24.2
a7f0681

docs(release): cut v1.24.2 changelog, upgrading, and roadmap.

HotReloadBundle 1.5.1 shared_worker, CSP inline nonce stamp, Redis AUTH outside local, and E2E slide-to-confirm PointerEvents.

Changelog

Changed

  • Hot reload via HotReloadBundle 1.5.1: host config uses auto_inject: true, client_mode: shared_worker (bundle-served /_nowo/hot-reload/*), Idiomorph + WDT/Twig Inspector preserve selectors. See FRANKENPHP-HOT-RELOAD.md.
  • CSP: stamps vendor inline <script> tags with _beacon_csp_nonce before setting the header; optional app.csp.connect_src_extra / app.csp.script_src_extra append after Mercure origin. KitInlineConfigScriptSubscriber unchanged.
  • Shared Redis AUTH (REQ-INFRA-SHARED-003): REDIS_PASSWORD in .env.dist / .env.e2e.dist / compose.infra.yaml (optional local; required outside dev/test). SiteBackupSecurityDefaultsGuard refuses boot when Redis has no AUTH (REDIS_PASSWORD empty and no pass in REDIS_URL). Never interpolate an empty password (redis://:@host). See SHARED-SERVER.md and PRODUCTION.md.

Fixed

  • E2E: slide-to-confirm confirmed with in-page PointerEvents (CI-friendly drag) instead of brittle host pointer injection.

Notes for integrators

  • No Doctrine migrations.
  • After pull: composer install (pins nowo-tech/hot-reload-bundle 1.5.1 require-dev). Outside dev/test, set REDIS_PASSWORD and put the same password in REDIS_URL / MESSENGER_TRANSPORT_DSN (never redis://:@host). Dev: optional bin/console nowo:hot-reload:check after make up.
  • See UPGRADING.md Upgrading from 1.24.1 to 1.24.2.
Assets 2
Loading