Skip to content

XMF v1.2.33-beta3

Pre-release
Pre-release

Choose a tag to compare

@mambax7 mambax7 released this 08 Feb 18:24
· 69 commits to master since this release
18ce552

What's Changed

  • Pin all GitHub Actions to full commit SHA hashes to prevent supply-chain attacks
  • Add SonarCloud analysis workflow (sonarcloud.yml) with coverage reporting
  • Add Qodana static analysis workflow (qodana.yml) pinned to jetbrains/qodana-php:2025.2
  • Add Dependabot configuration for Composer and GitHub Actions updates
  • Add Renovate configuration with auto-merge for patch updates and stability windows
  • Add CodeRabbit AI code review configuration (.coderabbit.yaml)
  • Add Codecov coverage upload to CI workflow
  • Skip PHPStan on PHP 7.4/8.0 (baseline uses PHPStan 2.x format, incompatible with PHPStan 1.x)
  • Fix PHP version comparison in CI from lexicographic >= '8.1' to explicit != '7.4' && != '8.0'
  • Fix SonarCloud token check from env.SONAR_TOKEN to secrets.SONAR_TOKEN for fork PR compatibility
  • Add repository guards (if: github.repository) to Qodana and SonarCloud workflows
  • Replace phpcs.xml.dist with phpcs.xml; use severity=0 for line-length rule
  • Remove legacy phpunit10.xml.dist (consolidated into phpunit.xml.dist)
  • Add sonar-project.properties, qodana.yaml, renovate.json to .gitattributes export-ignore
  • Streamline CI workflow: split test step into coverage/non-coverage, simplify matrix

Full Changelog: v1.2.33-beta2...v1.2.33-beta3