0.19.9: Safer project dumps and more actionable fix workflows

Database dumps can now use TLS and support options for creating safer, independently registerable shop clones. Fix and validation workflows also provide more reliable baselines and actionable previews, alongside several extension packaging and validation fixes.

Added

• project dump --reset-identity removes shop-specific identity and app registration data. Use --clone-shop as shorthand for --clean --reset-identity; it can be combined with --anonymize, for example: shopware-cli project dump --clone-shop --anonymize --output clone.sql. #1767 (Pascal Zarrad (@pascal-zarrad))
• extension fix and project fix accept --dry-run to show findings and proposed changes without applying them. Fixers report remaining issues as structured findings and summarize changed files after a successful run. #1813 (Pascal Zarrad (@pascal-zarrad))
• Docker projects created with Shopware 6.6.4.0 or newer disable the browser-based admin worker and use the Docker queue worker instead. Older Shopware versions and non-Docker projects are unchanged. #1822 (Tomasz Turkowski (@tturkowski))
• SSH deployments can run a bounded, checksum-verified CacheTool step to reset OPcache. #1774 (Soner (@shyim))

Fixed

• MySQL connections now support TLS settings from Shopware DATABASE_SSL_* variables, the tls parameter in DATABASE_URL, and project dump options such as --ssl-mode and --ssl-ca. TLS remains off unless configured. #1785 (Soner (@shyim))
• extension validate --check-against now resolves the requested baseline without changing local dependencies; Rector dependency setup is isolated from extension vendor/ and Composer files. #1806, #1807 (Malte Janz (@MalteJanz))
• extension package --overwrite-app-backend-url now also rewrites admin module and main-module source URLs, while leaving modules without a source unchanged. #1848 (Amer Malik Mohammed (@amermmohammed))
• Extension icon validation accepts dimensions from 84 through 256 pixels, inclusive. #1816 (Pascal Zarrad (@pascal-zarrad))
• Extension checksums now ignore vendor-bin by default, and anonymized email addresses use safe domains to avoid accidentally targeting real addresses. #1812, #1854 (Soner (@shyim), Fabian Blechschmidt (@Schrank))
• The dev dashboard now checks actual hostname resolution and certificate trust rather than inferring success from configuration. #1823 (Tomasz Turkowski (@tturkowski))

Changed

• Command telemetry now adds diagnostic context for validation/fix/format failures, project-creation failures, and Docker startup failures, plus selected aggregate counts and CPU metrics. Dev dashboard sessions now have linked start/end events. These additions report metadata, not command output or source paths. #1803, #1805, #1819, #1824, #1826, #1846 (Lena (@moshimorschi), Tomasz Turkowski (@tturkowski))
• PHAR payloads can package embedded PHP files for execution through a remote PHP process. #1811 (Soner (@shyim))

Full Changelog: 0.19.8...0.19.9