XMF 1.3.0-beta1

What's Changed

• add option for firebase/php-jwt 7.* by @mambax7 in #139
• Bump actions/cache from 4.3.0 to 5.0.3 by @dependabot[bot] in #136
• Bump actions/checkout from 5.0.1 to 6.0.2 by @dependabot[bot] in #137
• Bump JetBrains/qodana-action from 2025.2.4 to 2025.3.1 by @dependabot[bot] in #138
• update to PHP 8.2 as minimum by @mambax7 in #140
• classes for RTL by @mambax7 in #120
• Bump changelog to 1.3.0-beta1, add new features by @mambax7 in #141
• Serializer by @mambax7 in #121

New Contributors

• @dependabot[bot] made their first contribution in #136

Full Changelog: v1.2.33-beta3...v1.3.0-beta1

XMF v1.2.33-beta3

What's Changed

• Pin all GitHub Actions to full commit SHA hashes to prevent supply-chain attacks
• Add SonarCloud analysis workflow (sonarcloud.yml) with coverage reporting
• Add Qodana static analysis workflow (qodana.yml) pinned to jetbrains/qodana-php:2025.2
• Add Dependabot configuration for Composer and GitHub Actions updates
• Add Renovate configuration with auto-merge for patch updates and stability windows
• Add CodeRabbit AI code review configuration (.coderabbit.yaml)
• Add Codecov coverage upload to CI workflow
• Skip PHPStan on PHP 7.4/8.0 (baseline uses PHPStan 2.x format, incompatible with PHPStan 1.x)
• Fix PHP version comparison in CI from lexicographic >= '8.1' to explicit != '7.4' && != '8.0'
• Fix SonarCloud token check from env.SONAR_TOKEN to secrets.SONAR_TOKEN for fork PR compatibility
• Add repository guards (if: github.repository) to Qodana and SonarCloud workflows
• Replace phpcs.xml.dist with phpcs.xml; use severity=0 for line-length rule
• Remove legacy phpunit10.xml.dist (consolidated into phpunit.xml.dist)
• Add sonar-project.properties, qodana.yaml, renovate.json to .gitattributes export-ignore
• Streamline CI workflow: split test step into coverage/non-coverage, simplify matrix

Full Changelog: v1.2.33-beta2...v1.2.33-beta3

v1.2.33-beta2

XMF v1.2.33-beta2

Includes all changes from Phases 1–6 (PRs #124–#129).

Bug Fixes

• Fix Request::getInt(), getFloat(), getBool() return types via explicit casts
• Fix Language using unqualified XOOPS_ROOT_PATH constant; add defined() guard
• Fix Migrate::getTargetDefinitions() checking null instead of false for Yaml::read() failure
• Fix Tables::executeQueue() passing potentially non-string $ddl to execSql()
• Fix Tables::fetch() collapsing query-failure and no-rows into same outcome
• Fix JsonWebToken::create() passing ArrayObject to JWT::encode()
• Fix FilterInput hex entity decode producing null bytes on PHP 7+
• Fix Metagen::html2text() discarding numeric entity callback result
• Fix IPAddress::normalize() passing false to inet_ntop()
• Fix Request::setVar() writing to literal 'name' for ENV/SERVER

Security

• Harden Key\FileStorage::save() with var_export() instead of string interpolation
• Add allowed_classes => false to unserialize() in Session::get()
• Harden Language::loadFile() with realpath() and directory boundary validation
• Add 2MB file size limit to Yaml::read() and Yaml::readWrapped()
• Preserve Jwt\JsonWebToken::decode() object|false API contract
• Remove dead get_magic_quotes_gpc() calls from Request

Infrastructure

• Add PHPStan at level max with ~546 baseline errors for incremental cleanup
• Add PHPStan stub files for XOOPS framework classes, constants, and functions
• Add GitHub Actions CI: PHPStan, PHPCS, and code coverage jobs
• Simplify .scrutinizer.yml to analysis-only with dependency_paths for stubs
• Add composer baseline script with backup/restore safety
• Modernize README with badges, feature table, and component overview
• Add GitHub Copilot custom instructions and reusable XOOPS template
• Add CHANGELOG.md at repo root

Tests

• New unit tests for Request::setVar(), FilterInput entities, Metagen::html2text(), IPAddress::normalize(), Yaml file size limits

Full Changelog: v1.2.33-beta1...v1.2.33-beta2

XMF XOOPS Module Framework

What's Changed

• updating copyright by @mambax7 in #114
• update composer.json by @mambax7 in #115
• add php_codesniffer and phpstan by @mambax7 in #116
• add SendmailRunner by @mambax7 in #117

Full Changelog: v1.2.32...v1.2.33-beta1

XMF XOOPS Module Framework

XOOPS Module Framework is a selection of classes and supporting files intended to help simplify many of the routine tasks commonly needed in XOOPS module development.

Release v1.2.32 includes:

• firebase/php-jwt 6.11.0

XMF XOOPS Module Framework

XOOPS Module Framework is a selection of classes and supporting files intended to help simplify many of the routine tasks commonly needed in XOOPS module development.

Release v1.2.31 includes:

Updates to library dependencies for XOOPS 2.5.12 and PHP 8.4

XMF XOOPS Module Framework

XOOPS Module Framework is a selection of classes and supporting files intended to help simplify many of the routine tasks commonly needed in XOOPS module development.

Release v1.2.30 includes:

• Updates to library dependencies for XOOPS 2.5.12

XMF XOOPS Module Framework

XOOPS Module Framework is a selection of classes and supporting files intended to help simplify many of the routine tasks commonly needed in module development.

Release v1.2.29 includes:

• Updates to library dependencies
• refine ULID spport
• cosmetic and code improvements

XMF XOOPS Module Framework

XOOPS Module Framework is a selection of classes and supporting files intended to help simplify many of the routine tasks commonly needed in module development.

Release v1.2.28 includes:

• Updates to library dependencies
• PHP 8.0 Error Suppression operator issues
• Handle case of no permissionHandler found
• Adds ULID spport
• cosmetic and code improvements

XMF XOOPS Module Framework

XOOPS Module Framework is a selection of classes and supporting files intended to help simplify many of the routine tasks commonly needed in module development.

Release v1.2.27 includes:

• Update to firebase/php-jwt 6.0.0