v0.3.13
What's Changed
Security
- Raised the
twig/twigfloor to^3.27so consumers can't resolve a version affected by CVE-2026-46634 — a sandbox escape viatemplate_from_string(), fixed in twig 3.27.
Changed
- Adopted the shared parisek QA tooling:
composer audit+composer normalize+composer validateCI gates and a PHP-CS-Fixer (@PER-CS)cscheck (the codebase already followed the style; 10 files got minor normalisation). Added.editorconfig. Dev-only; no consumer impact.
Pull Requests
- #24 — qa: PER-CS code style + composer hygiene; floor twig at 3.27
Full Changelog: v0.3.12...v0.3.13