v1.15.0

Highlights

• New security workflow covering gitleaks, dependency-review, and phpaudit (547435a).
• TYPO3 v14.3 LTS support documented, including the PHP 8.2-8.5 range note (ce93229).

Fixes

• v14 guidance restored the PHP-CS-Fixer and property-hooks trigger keywords that were dropped in an earlier edit (6ae615c).

CI / infrastructure

• eval-validate workflow added (167795f) and eval assertion structure fixed to pass validation (9a3894d).
• Harness-verify delegated to the reusable workflow from skill-repo-skill (cd86475), with trailing-blank-line cleanup on harness-verify.yml (e8dc9bc).
• pr-quality workflow switched to the reusable version from skill-repo-skill (301026b), with the pull_request_target SECURITY note restored on the caller (81e7a14).
• auto-merge-deps reusable workflow reference fixed (dcb1d1e).

Full Changelog: v1.14.0...v1.15.0

v1.14.0

What's Changed

• feat: add multi-version library adapter pattern reference by @CybotTM in #25
• feat: add docblock and PHPStan type-narrowing checkpoints by @CybotTM in #26
• Expand eval suite to 21 tests and enhance SKILL.md by @CybotTM in #27

Full Changelog: v1.11.0...v1.14.0

v1.11.0

Four new checkpoints targeting PHP 8.2+ and TYPO3 v14 modernization patterns discovered during extension review sessions.

PM-32 catches static properties in readonly classes — a hard incompatibility in PHP 8.2+ where readonly classes cannot declare static properties at all. PM-33 flags GeneralUtility::makeInstance() calls in classes that should use dependency injection, with an explicit exception for AbstractTask subclasses where DI is not available. PM-34 detects copy-on-write hazards with sodium_memzero() and similar destructive operations — a subtle bug where PHP's COW semantics mean the original variable may not actually be wiped. PM-35/PM-36 flag the deprecated SingletonInterface usage that TYPO3 v14 removes, guiding migration to proper DI scoping.

Full Changelog: v1.10.0...v1.11.0

v1.10.0

What's Changed

• feat(checkpoints): add DRY, copyright header, and trait namespace checks by @CybotTM in #22
• feat: add TYPO3-specific PSR and factory patterns reference by @CybotTM in #21
• Add PHP-CS-Fixer deprecation awareness and type annotation improvements by @CybotTM in #23

Full Changelog: v1.9.0...v1.10.0

v1.9.0

What's Changed

• fix: harden GitHub Actions against supply chain attacks by @CybotTM in #20

Full Changelog: v1.8.0...v1.9.0

v1.8.0

What's Changed

• fix: reduce false positives in checkpoints by @CybotTM in #18
• fix: accept transitive deps for PM-16 and PM-17 by @CybotTM in #19

Full Changelog: v1.7.6...v1.8.0

v1.7.6

What's Changed

• chore: Configure Renovate by @renovate[bot] in #16

New Contributors

• @renovate[bot] made their first contribution in #16

Full Changelog: v1.7.5...v1.7.6

v1.7.5

What's Changed

• docs: add PHPStan 2.x migration guide and baseline reduction strategy by @CybotTM in #9
• chore: replace generic emails with GitHub references by @CybotTM in #10
• fix: remove unsupported 'support' field from plugin.json by @CybotTM in #11
• chore: add .gitignore by @CybotTM in #12
• fix: standardize frontmatter and composer.json paths by @CybotTM in #13
• fix: standardize plugin.json author URL to company website by @CybotTM in #14
• feat: add skill validation CI job by @CybotTM in #15

Full Changelog: v1.7.4...v1.7.5

v1.7.4

Full Changelog: v1.7.3...v1.7.4

v1.7.3

What's Changed

• fix: align SKILL.md description with quality standard by @CybotTM in #6
• chore: add lint CI by @CybotTM in #7
• chore: add YAML linting to CI by @CybotTM in #8

Full Changelog: v1.7.2...v1.7.3