1.0.1

🚀 UPC 1.0.1

Patch release fixing a live notifier incident (PRE-3614) hit while diagnosing production webhook
handling, plus a Unified API operation-status polling fallback developed alongside it.

🐛 Fixes

• 🔁 execCode "0001" no longer misread as a final failure — PayPlug's notifier was
  observed in production firing a webhook carrying execCode "0001" ("Authentification 3DSecure
  requise", categorized "Acceptation", not an error) before the real, final notification for the
  same operation. Under the old two-way mapping this was read as terminal FAILED and, via
  IPaymentRepository::isTreated(), permanently blocked the correct final notification from ever
  applying. ExecCodeMapper::toPaymentOutcome() now maps "0001" to the existing
  PaymentOutcome::THREE_DS_PENDING instead.
• 🔓 Webhook signature verification fails open when no secret is configured —
  WebhookNotificationHelper::verifySignature() previously rejected every notification
  unconditionally, since no merchant/account currently has any way to configure a webhook secret.
  It now accepts the notification unverified when no expected Authorization header value is set.
  This is a deliberate, temporary tradeoff — any unauthenticated request to a plugin's webhook
  endpoint is accepted today — pending a product decision on how webhook secret configuration will
  be exposed; revisit once that lands.

✨ Added

• 📡 Operation-status polling — UnifiedApiPaymentService::getOperation() GETs the public
  /processing-operations/operations/public/{id} endpoint, returning the same webhook-shaped
  payload WebhookNotificationHelper::parse() already reads — a fallback for a delayed or lost
  webhook. A sibling UnifiedApiOperationService::getOperation() targets the private endpoint but
  returns 403 for a merchant's own client credentials in staging; treat it as unverified until a
  follow-up decides whether to keep or remove it.

✅ Quality

PHPStan level 8, PHP-CS-Fixer, PHPUnit, and CI verifying PHP 7.1–8.2 compatibility — all clean on
this release branch.

📋 Requirements

• PHP ≥7.4 to install/develop (build-tooling floor only — shipped source runs on PHP 7.1)
• Runtime dependency: giggsey/libphonenumber-for-php

🔗 Full Changelog: 1.0.0...1.0.1