Release: merge development into beta

.gitignore

@@ -1,44 +1,62 @@
-# Dependencies
-/node_modules/
-/node_modules/*
-node_modules/
-/vendor/
-/vendor/*
-vendor/
-
-# Build artifacts
-/js/
-/docs/node_modules/
-/docs/build/
-/docs/.docusaurus/
-/docusaurus/
+# IDE
+/.idea/
+/*.iml
+*.Identifier
+.vscode/
 
-# Development
+# OS
 .DS_Store
 Thumbs.db
+
+# Editor swap / temp files
 *.swp
 *.swo
 *~
-.idea/
-.vscode/
 *.log
 
-# PHP
-/composer.phar
+# Claude Code
+.claude/worktrees/
+
+# Dependencies
+/vendor/
+/node_modules/
+
+# Build artifacts
+/js/
+
+# Documentation
+/docs/node_modules/
+/docs/build/
+/docs/.docusaurus/
+/docusaurus/node_modules/
+/docusaurus/build/
+/docusaurus/.docusaurus/
 
-# Testing
+# Testing & Quality
 /phpunit.xml
+/.php-cs-fixer.cache
+/tests/.phpunit.cache
+/.phpunit.cache/
+.phpunit.cache/
+.phpunit.result.cache
 /coverage/
+/coverage-frontend/
+/phpmetrics/
 /phpqa/
+/quality-reports/
 
-.phpunit.cache/
-phpmetrics/
+# PHP
+/composer.phar
 
 # Environment
 .env
 .env.local
-node_modules
 
-# Test/build artifacts
-.phpunit.cache
-.phpunit.result.cache
+# Nextcloud (when running from a checkout inside a Nextcloud server tree)
+/custom_apps/
+/config/
+
+# SBOM is published as release asset (see SECURITY.md), not stored in repo
+sbom.cdx.json
+bom-php.cdx.json
+bom-npm.cdx.json

.license-overrides.json

@@ -1,3 +1,4 @@
 {
-  "mydash": "Own package - EUPL-1.2 licensed — approved 2026-03-15"
+  "mydash": "Own package - EUPL-1.2 licensed — approved 2026-03-15",
+  "apexcharts": "MIT — license-checker misreports as 'Custom: …apexcharts-logo.png' from a stray HTTP URL in the package's README. Upstream project is MIT-licensed (https://github.com/apexcharts/apexcharts.js/blob/main/LICENSE). Approved 2026-05-01."
 }