Skip to content

v7.0.0 — May 2026: Security Hardening, Dev Tooling & CI/CD

Latest
Latest

Choose a tag to compare

View all tags
@dev-lou dev-lou released this 24 May 15:10
v7.0.0
28ae1f0

v7.0.0 — May 2026

Release date: 2026-05-24

⚠️ Security

  • Redact secrets from repository — Stop tracking .env, add .env.example with placeholders, add pre-commit hook to prevent secret leaks
  • Add Gitleaks CI workflow for automated secret scanning
  • Add Socket Security workflow for npm supply chain protection

🏗️ Dev Tooling & CI/CD

  • Add complete dev tooling stack:
    • Commitlint — Enforce conventional commits (11 types, 17 project-specific scopes)
    • ESLint — Flat config for JavaScript linting
    • lint-staged — Auto-run Pint + ESLint on staged files
    • Renovate — Automated dependency updates
    • Husky — Git hooks (pre-commit → lint-staged, commit-msg → commitlint)
  • Add 5 GitHub Actions workflows:
    • CI — Pint → PHPUnit (SQLite in-memory) → Frontend Build (Vite)
    • Gitleaks — Secret scanning on every push/PR
    • Commitlint — PR commit message validation
    • Socket Security — npm supply chain audit
    • PR Agent — AI-powered code reviews via Qodo
  • Add TOOLING.md with comprehensive developer onboarding documentation
  • Add CODEOWNERS for repository governance

🧹 Codebase Cleanup

  • Remove 9 orphaned controllers and 1 debug console command
  • Delete temporary/backup files (tmp_update_homepage.ps1, PROJECT_DOCUMENTATION.md, .backup files)
  • Move documentation assets to docs/ directory
  • Remove debug console.log statements from admin views
  • Clean up routes — remove GeminiDiag and /debug-db temp endpoints
  • Fix 105 PHP code style violations across 157 files via Laravel Pint
  • Fix Duplicate lint-staged config in package.json

📁 Scripts Reorganization

  • Reorganize scripts/ into structured subdirectories:
    • scripts/deploy/ — Post-deployment cache busting
    • scripts/diagnostics/ — 10 diagnostic utilities (DB, config, Gemini checks)
    • scripts/examples/ — 7 example scripts for Gemini, Supabase, chat
  • Fix __DIR__ relative paths in all 15 moved scripts

🔧 CI Fixes

  • Fix composer install failure in CI — Add bootstrap/cache/.gitkeep for fresh checkouts
  • Migrate PHPUnit to SQLite in-memory — Remove PostgreSQL service container, eliminating cloud database risk
  • Create test directory structure — Fix "Test directory not found" PHPUnit errors
Assets 2
Loading