chore: merge development into beta for beta release

# Conflicts:
#	.forgejo/workflows/release-beta.yml

Author: rubenvdlinde

.forgejo/workflows/pre-merge-check-strict.yaml

@@ -1,8 +1,14 @@
-# Pre-merge quality gate — runs composer check:strict + all 19 Hydra gates on every PR.
-# Configured as a required status check in branch protection on `development`
-# to keep the merge button disabled until this workflow passes.
+# Pre-merge quality gate — enforced lint + phpcs + all Hydra gates on every PR.
+# Required status check on protected branches.
 #
-# Diff-scoped per ADR-020 so legacy debt never blocks a PR — only new failures fail.
+# Runner/container mirror the proven release-semrel workflow: codeberg-medium +
+# official php:8.3-cli + a base-tooling step. The old code.forgejo.org/oci/ci-php:8.3
+# image 404s ("manifest unknown"), which fast-failed every run at container-pull.
+#
+# The gate runs `composer lint` + `composer phpcs` directly: check:strict's
+# psalm/phpstan/phpmd/test:all are wrapped in `|| echo skipping` so they never
+# affect pass/fail (ADR-022 parks static analysis), and running them on the medium
+# runner OOMs it. lint+phpcs is the identical enforced gate, fast and deterministic.
 
 name: pre-merge-check-strict
 
@@ -15,27 +21,41 @@ on:
 
 jobs:
   quality-gates:
-    runs-on: codeberg-small
+    runs-on: codeberg-medium
     container:
-      image: code.forgejo.org/oci/ci-php:8.3
+      image: php:8.3-cli
+    timeout-minutes: 15
     steps:
+      - name: Install base tooling
+        run: |
+          apt-get update
+          apt-get install -y --no-install-recommends \
+            git curl ca-certificates gnupg jq unzip zip \
+            libzip-dev libpng-dev python3
+          docker-php-ext-install -j"$(nproc)" zip gd
+          curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer
+
       - name: Checkout PR
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://github.com/actions/checkout@v4
+        with:
+          fetch-depth: 0
 
       - name: Install composer deps
-        run: composer install --no-interaction --no-progress --prefer-dist
+        run: composer install --no-interaction --no-progress --prefer-dist --ignore-platform-reqs
 
-      - name: Run composer check:strict
-        run: composer check:strict
+      - name: Run lint + phpcs (the enforced gate)
+        run: |
+          composer lint
+          composer phpcs
 
       - name: Clone Hydra (for gate runner)
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://github.com/actions/checkout@v4
         with:
           repository: Conduction/hydra
           ref: development
           path: .hydra
 
-      - name: Run all 19 Hydra gates (diff-scoped per ADR-020)
+      - name: Run all Hydra gates (diff-scoped per ADR-020)
         run: |
           git fetch origin ${{ github.base_ref }}:${{ github.base_ref }} || true
           bash .hydra/scripts/run-hydra-gates.sh --scope-to-diff --base origin/${{ github.base_ref }} .

.forgejo/workflows/tests.yml

@@ -65,33 +65,42 @@ jobs:
   # ---------------------------------------------------------------------------
   phpunit-unit:
     name: PHPUnit unit (${{ inputs.app-id }})
-    runs-on: codeberg-small
+    runs-on: codeberg-medium
     container:
-      image: code.forgejo.org/oci/ci-php:8.3
+      image: php:8.3-cli
     steps:
+      - name: Install base tooling
+        run: |
+          apt-get update
+          apt-get install -y --no-install-recommends \
+            git curl ca-certificates gnupg jq unzip zip \
+            libzip-dev libpng-dev python3
+          docker-php-ext-install -j"$(nproc)" zip gd
+          curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer
+
       - name: Checkout
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://github.com/actions/checkout@v4
 
       - name: Install composer deps
-        run: composer install --no-interaction --no-progress --prefer-dist
+        run: composer install --no-interaction --no-progress --prefer-dist --ignore-platform-reqs
 
       - name: Run unit suite (phpunit-unit.xml)
         # unit-gating=false reports failures without failing the job, for apps
         # carrying pre-existing tests/Unit debt (see TESTING-CI-ROLLOUT.md).
-        continue-on-error: ${{ inputs.unit-gating == false }}
+        continue-on-error: false
         run: ./vendor/bin/phpunit --configuration phpunit-unit.xml --no-coverage --colors=never
 
   # ---------------------------------------------------------------------------
   # HARD GATE 2 — l10n extraction-drift check (no NC needed; pure Node).
   # ---------------------------------------------------------------------------
   l10n-check:
     name: l10n extraction check (${{ inputs.app-id }})
-    runs-on: codeberg-small
+    runs-on: codeberg-medium
     container:
-      image: code.forgejo.org/oci/ci-node:${{ inputs.node-version }}
+      image: node:${{ inputs.node-version }}
     steps:
       - name: Checkout
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://github.com/actions/checkout@v4
 
       - name: Assert every t() source string is in l10n/en.json
         run: node tests/l10n/check-l10n.js
@@ -107,12 +116,12 @@ jobs:
   # ---------------------------------------------------------------------------
   frontend-unit:
     name: Frontend unit (Vitest — ${{ inputs.app-id }})
-    runs-on: codeberg-small
+    runs-on: codeberg-medium
     container:
-      image: code.forgejo.org/oci/ci-node:${{ inputs.node-version }}
+      image: node:${{ inputs.node-version }}
     steps:
       - name: Checkout
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://github.com/actions/checkout@v4
 
       - name: Install npm deps
         run: npm ci --legacy-peer-deps || npm install --legacy-peer-deps
@@ -129,13 +138,22 @@ jobs:
   # ---------------------------------------------------------------------------
   phpunit-coverage-ratchet:
     name: PHPUnit coverage ratchet (${{ inputs.app-id }})
-    runs-on: codeberg-small
+    runs-on: codeberg-medium
     container:
-      image: code.forgejo.org/oci/ci-php:8.3
-    continue-on-error: ${{ inputs.unit-gating == false }}
+      image: php:8.3-cli
+    continue-on-error: false
     steps:
+      - name: Install base tooling
+        run: |
+          apt-get update
+          apt-get install -y --no-install-recommends \
+            git curl ca-certificates gnupg jq unzip zip \
+            libzip-dev libpng-dev python3
+          docker-php-ext-install -j"$(nproc)" zip gd
+          curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer
+
       - name: Checkout
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://github.com/actions/checkout@v4
 
       - name: Ensure a coverage driver (PCOV)
         run: |
@@ -147,7 +165,7 @@ jobs:
             || echo "coverage driver: ABSENT (ratchet will no-op; see TESTING-CI-ROLLOUT.md)"
 
       - name: Install composer deps
-        run: composer install --no-interaction --no-progress --prefer-dist
+        run: composer install --no-interaction --no-progress --prefer-dist --ignore-platform-reqs
 
       - name: Run unit suite WITH coverage (clover)
         run: |
@@ -168,12 +186,12 @@ jobs:
   # ---------------------------------------------------------------------------
   frontend-coverage-ratchet:
     name: Frontend coverage ratchet (${{ inputs.app-id }})
-    runs-on: codeberg-small
+    runs-on: codeberg-medium
     container:
-      image: code.forgejo.org/oci/ci-node:${{ inputs.node-version }}
+      image: node:${{ inputs.node-version }}
     steps:
       - name: Checkout
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://github.com/actions/checkout@v4
 
       - name: Install npm deps (+ coverage-v8)
         run: |
@@ -216,7 +234,7 @@ jobs:
     runs-on: docker
     steps:
       - name: Checkout
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://github.com/actions/checkout@v4
 
       - name: TODO — boot seeded NC, then run deep e2e
         run: |
@@ -239,7 +257,7 @@ jobs:
     runs-on: docker
     steps:
       - name: Checkout
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://github.com/actions/checkout@v4
 
       - name: TODO — boot NC, then run Newman
         run: |

.gitignore

@@ -52,3 +52,4 @@ Thumbs.db
 .last-update
 /coverage-vitest/
 /coverage/
+.hydra/

.npmrc

@@ -4,7 +4,7 @@ legacy-peer-deps=true
 # 24h ago. Compromised first-party-Conduction packages are excluded via
 # Dependabot cooldown (.github/dependabot.yml); for fresh @conduction/*
 # releases, override per-install with `npm install --min-release-age=0`.
-min-release-age=1
+min-release-age=0
 
 # Audit gate: fail only on high/critical. The remaining low/moderate advisories
 # are in vue@2 and @nextcloud/vue — no upstream fix available without breaking

appinfo/info.xml

@@ -42,7 +42,7 @@ Vrij en open source onder de EUPL-licentie.
 
 **Ondersteuning:** Voor ondersteuning, neem contact op via support@conduction.nl. Voor een Service Level Agreement (SLA), neem contact op via sales@conduction.nl.
     ]]></description>
-    <version>0.2.10</version>
+    <version>0.2.11</version>
     <licence>agpl</licence>
     <author mail="info@conduction.nl" homepage="https://www.conduction.nl/">Conduction</author>
     <namespace>SoftwareCatalog</namespace>