Merge branch '7.x' into forms-disable-search-indexing-by-default

Author: RCheesley

.all-contributorsrc

@@ -1589,6 +1589,15 @@
       "contributions": [
         "userTesting"
       ]
+    },
+    {
+      "login": "stone-creator",
+      "name": "Stone-creator",
+      "avatar_url": "https://avatars.githubusercontent.com/u/1327019?v=4",
+      "profile": "https://github.com/stone-creator",
+      "contributions": [
+        "userTesting"
+      ]
     }
   ],
   "contributorsPerLine": 7,

.github/prompts/write-test.prompt.md

@@ -0,0 +1,32 @@
+---
+mode: 'agent'
+tools: ['testFailure', 'usages']
+description: 'Generate a functional test for highlighted code'
+---
+Generate a new or update an existing functional test for the highlighted code. The test should cover the following aspects:
+
+A good test should be:
+- **Isolated**: It should not depend on other tests or external systems.
+- **Fast**: It should run quickly to allow for rapid feedback during development.
+- **Deterministic**: It should produce the same result every time it runs, regardless of the environment.
+- **Readable**: It should be easy to understand and maintain.
+- **Descriptive**: It should clearly indicate what it is testing and why.
+- **Comprehensive**: It should cover a wide range of scenarios, including edge cases.
+- **Independent**: It should not rely on the state of the application or database, ensuring that it can run in any order without affecting other tests.
+- **Behavior-focused**: It should test output for specific input rather than internal implementation, except when verifying performance-critical operations like expensive method calls.
+
+Good practices:
+- Never mock objects that have no PHP service dependencies like event or entity classes. Use the real object instead.
+- The best way to write a functional test is to use the actual endpoint. Either call a route or a command. The next best thing is to call a subscriber via EventDispatcher. If that is still too broad call a service.
+- Make all new classes final by default. Including tests.
+- Provide property, param and return types. If not possible to use native types you can always specify the types in the docblock. Mautic uses PHPSTAN so be sure to add types so the PHPSTAN won't fail.
+- Use `$this->assertResponseIsSuccessful();` to assert successful requests.
+- Use PHPUNIT's data providers to test multiple scenarios in a single test method.
+
+Suggestions for AI:
+- Do not modify the production code unless requested. Always just modify the test code.
+- Make the simplest test possible. The human will suggest improvements if needed.
+
+You can take an inspiration of existing functional tests. They all extend the `MysqlFunctionalTestCase` class and are located in the `app/bundles/*Bundle/Tests` or `plugins/*Bundle/Tests` directory. The tests are written in PHPUNIT. You can read the version in the `composer.json` file.
+
+To execute a test you have to run it in DDEV. Example: `ddev exec composer test app/bundles/ExampleBundle/tests/ExampleTest.php`.

.github/workflows/transifex.yml

@@ -13,20 +13,22 @@ permissions:
 
 jobs:
   push-to-transifex:
-    if: github.repository == 'mautic/mautic'
+    # Run only in the 'mautic/mautic' repository and on the default branch (or manually triggered via UI)
+    if: github.repository == 'mautic/mautic' && (github.ref_name == github.event.repository.default_branch || github.event_name == 'workflow_dispatch')
     name: Push translations to Transifex
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
+    - name: Checkout
+      uses: actions/checkout@v4
 
-    - name: Setup PHP, with composer and extensions
+    - name: Setup PHP with extensions
       uses: shivammathur/setup-php@v2
       with:
         php-version: 8.3
         extensions: mbstring, xml, ctype, iconv, intl, pdo_sqlite, mysql, pdo_mysql
 
-    - name: Install dependencies
+    - name: Install Composer dependencies
       uses: "ramsey/composer-install@v3"
 
     - name: Push translations to Transifex

.htaccess

@@ -99,6 +99,11 @@
 
 # Apache 2.4+
 <IfModule authz_core_module>
+    # Deny access via HTTP requests to all .env files.
+    <FilesMatch "^\.env.*$">
+        Require all denied
+    </FilesMatch>
+
     # Deny access via HTTP requests to all PHP files.
     <FilesMatch "\.php$">
         Require all denied
@@ -117,6 +122,12 @@
 
 # Fallback for Apache < 2.4
 <IfModule !authz_core_module>
+    # Deny access via HTTP requests to all .env files.
+    <FilesMatch "^\.env.*$">
+        Order deny,allow
+        Deny from all
+    </FilesMatch>
+
     # Deny access via HTTP requests to all PHP files.
     <FilesMatch "\.php$">
         Order deny,allow

.php-cs-fixer.php

@@ -11,7 +11,6 @@
     ->in(__DIR__.'/plugins')
     ->in(__DIR__.'/.github/workflows/mautic-asset-upload')
     ->append([
-        __DIR__.'/app/AppCache.php',
         __DIR__.'/app/AppKernel.php',
         __DIR__.'/app/AppTestKernel.php',
         __DIR__.'/rector.php',

README.md

@@ -348,6 +348,9 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/PedroLoureiro1"><img src="https://avatars.githubusercontent.com/u/116733776?v=4?s=100" width="100px;" alt="PedroLoureiro1"/><br /><sub><b>PedroLoureiro1</b></sub></a><br /><a href="https://github.com/mautic/mautic/commits?author=PedroLoureiro1" title="Code">💻</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/OlgaMarchuk"><img src="https://avatars.githubusercontent.com/u/219189660?v=4?s=100" width="100px;" alt="OlgaMarchuk"/><br /><sub><b>OlgaMarchuk</b></sub></a><br /><a href="#userTesting-OlgaMarchuk" title="User Testing">📓</a></td>
     </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/stone-creator"><img src="https://avatars.githubusercontent.com/u/1327019?v=4?s=100" width="100px;" alt="Stone-creator"/><br /><sub><b>Stone-creator</b></sub></a><br /><a href="#userTesting-stone-creator" title="User Testing">📓</a></td>
+    </tr>
   </tbody>
 </table>
 

UPGRADE-7.0.md

@@ -12,6 +12,36 @@
 ## Removed code
 
 - Deprecated class `Mautic\MessengerBundle\MessageHandler\TestHandler` removed with no replacement.
+- Deprecated class `Mautic\CoreBundle\Factory\MauticFactory` removed. Use dependency injection instead.
+- Deprecated class `Mautic\CampaignBundle\Service\Campaign` removed with no replacement.
+- Deprecated class `Mautic\CampaignBundle\Form\Type\CampaignEventLeadChangeType` removed with no replacement.
+- Deprecated class `Mautic\CoreBundle\Event\CustomFormEvent` removed with no replacement.
+- Deprecated class `Mautic\CoreBundle\Helper\UTF8Helper` removed with no replacement.
+- Deprecated class `Mautic\CoreBundle\Test\MauticSqliteTestCase` removed with no replacement.
+- Deprecated class `Mautic\CoreBundle\Twig\Extension\EmojiExtension` removed with no replacement.
+- Deprecated class `Mautic\EmailBundle\Form\Type\AbTestPropertiesType` removed with no replacement.
+- Deprecated class `Mautic\EmailBundle\Helper\RequestStorageHelper` removed with no replacement.
+- Deprecated class `Mautic\FormBundle\Tests\FormTestAbstract` removed with no replacement.
+- Deprecated class `Mautic\LeadBundle\Helper\PointEventHelper` removed with no replacement.
+- Deprecated class `Mautic\MarketplaceBundle\Exception\InstallException` removed with no replacement.
+- Deprecated class `Mautic\NotificationBundle\Event\NotificationClickEvent` removed with no replacement.
+- Deprecated class `Mautic\NotificationBundle\Event\SendingNotificationEvent` removed with no replacement.
+- Deprecated class `Mautic\NotificationBundle\Form\Type\ConfigType` removed with no replacement.
+- Deprecated class `Mautic\SmsBundle\Api\AbstractSmsApi` removed with no replacement.
+- Deprecated class `Mautic\SmsBundle\Api\TwilioApi` removed with no replacement.
+- Deprecated interface `Mautic\IntegrationsBundle\Auth\Provider\Oauth2ThreeLegged\AuthorizatorInterface` removed. Use `Mautic\IntegrationsBundle\Integration\Interfaces\AuthenticationInterface` instead.
+- Deprecated interface `Mautic\IntegrationsBundle\Auth\Provider\Oauth2ThreeLegged\CredentialsInterface` removed. Use `Mautic\IntegrationsBundle\Auth\Provider\AuthCredentialsInterface` instead.
+- Deprecated class `Mautic\IntegrationsBundle\Auth\Provider\Oauth2ThreeLegged\AbstractClientFactory` removed with no replacement.
+- Deprecated trait `Mautic\IntegrationsBundle\Integration\BC\BcIntegrationSettingsTrait` removed with no replacement.
+- Deprecated exception classes `Mautic\CampaignBundle\Executioner\Scheduler\Exception\ExecutionProhibitedException` and `NotTimeYetException` removed with no replacement.
+- Deprecated form data transformers removed:
+  - `Mautic\CoreBundle\Form\DataTransformer\DatetimeToStringTransformer`
+  - `Mautic\CoreBundle\Form\DataTransformer\EmojiToHtmlTransformer`  
+  - `Mautic\CoreBundle\Form\DataTransformer\NullToEmptyTransformer`
+- Deprecated plugin classes removed:
+  - `MauticFullContactBundle\Services\FullContact_API`
+  - `MauticSocialBundle\Form\Type\TwitterCustomType`
+- File `app/AppCache.php` removed as it was no longer used.
 
 ## Removed Composer dependencies
 - `symfony/yaml` see https://github.com/mautic/mautic/pull/14850
@@ -21,12 +51,14 @@
 - `noxlogic/ratelimit-bundle` see https://github.com/mautic/mautic/pull/14876
 - `symfony/amqp-messenger` see https://github.com/mautic/mautic/pull/14883
 - `php-amqplib/rabbitmq-bundle` see https://github.com/mautic/mautic/pull/14883
+- `bandwidth-throttle/token-bucket` see https://github.com/mautic/mautic/pull/15271
 
 ## BC breaks in the code
 
 ### PHP
 - Removed `Mautic\DashboardBundle\Dashboard\Widget::FORMAT_MYSQL` constant. Use `DateTimeHelper::FORMAT_DB_DATE_ONLY` instead.
 - Removed `Mautic\ApiBundle\Security\OAuth2\Firewall::OAuthListener` class as it was empty. Use `FOS\OAuthServerBundle\Security\Firewall\OAuthListener` instead.
+- Removed `Mautic\LeadBundle\Segment\Query\Filter\SegmentReferenceFilterQueryBuilder` as unused.
 
 ### Javascript
 - Removed `Mautic.insertTextInEditor` function. Use `Mautic.insertHtmlInEditor` instead.

app/AppCache.php

@@ -99,6 +99,11 @@
 
 # Apache 2.4+
 <IfModule authz_core_module>
+    # Deny access via HTTP requests to all .env files.
+    <FilesMatch "^\.env.*$">
+        Require all denied
+    </FilesMatch>
+
     # Deny access via HTTP requests to all PHP files.
     <FilesMatch "\.php$">
         Require all denied
@@ -117,6 +122,12 @@
 
 # Fallback for Apache < 2.4
 <IfModule !authz_core_module>
+    # Deny access via HTTP requests to all .env files.
+    <FilesMatch "^\.env.*$">
+        Order deny,allow
+        Deny from all
+    </FilesMatch>
+
     # Deny access via HTTP requests to all PHP files.
     <FilesMatch "\.php$">
         Order deny,allow