XMF v1.2.33-beta3
Pre-release
Pre-release
What's Changed
- Pin all GitHub Actions to full commit SHA hashes to prevent supply-chain attacks
- Add SonarCloud analysis workflow (
sonarcloud.yml) with coverage reporting - Add Qodana static analysis workflow (
qodana.yml) pinned tojetbrains/qodana-php:2025.2 - Add Dependabot configuration for Composer and GitHub Actions updates
- Add Renovate configuration with auto-merge for patch updates and stability windows
- Add CodeRabbit AI code review configuration (
.coderabbit.yaml) - Add Codecov coverage upload to CI workflow
- Skip PHPStan on PHP 7.4/8.0 (baseline uses PHPStan 2.x format, incompatible with PHPStan 1.x)
- Fix PHP version comparison in CI from lexicographic
>= '8.1'to explicit!= '7.4' && != '8.0' - Fix SonarCloud token check from
env.SONAR_TOKENtosecrets.SONAR_TOKENfor fork PR compatibility - Add repository guards (
if: github.repository) to Qodana and SonarCloud workflows - Replace
phpcs.xml.distwithphpcs.xml; useseverity=0for line-length rule - Remove legacy
phpunit10.xml.dist(consolidated intophpunit.xml.dist) - Add
sonar-project.properties,qodana.yaml,renovate.jsonto.gitattributesexport-ignore - Streamline CI workflow: split test step into coverage/non-coverage, simplify matrix
Full Changelog: v1.2.33-beta2...v1.2.33-beta3