Exponential Platform Nexus Files

Release of the 1.0.0.x branch (the 2.5 generation: eZ Platform 2.5, Symfony 3.4, Exponential legacy kernel). Changes since 1.0.0.9, the previous release of this branch.

About the number. 1.0.0.10 already exists, but it was cut from master, not from this branch. This release therefore takes the next free number, 1.0.0.11. Composer orders the 1.0.0.y tags as one series, so a constraint like ~1.0.0.7 now resolves to this release, which is 1.0.0.x branch code. Until today it resolved to 1.0.0.10, which is master code. Pin an exact version to be sure which branch you get.

Security and code fixes

• web/app.php takes the environment only from the server configuration. Up to 1.0.0.9 any request whose Host header contained dev. ran in the dev environment with debugging on (4598c1942).
• app/AppCache.php never makes a private or personal response public. It reads app/config/http_cache.yml and HTTP_CACHE_UNCACHED_HOSTNAMES (3fb8765dc).
• .gitignore keeps .env.php and the local .env files out of the repository (4246d1244).
• parameters.yml.dist and default_parameters.yml agree on tree root 168 (8ac75c15c). The comments on the SQLite path describe the override that works (e1f3c69a4).
• public/index_rest.php has a safe fallback (7117b3fff). The admin UI config sets defaults for content_tree_module (f8d9fcb85).
• Front-end build:
• .nvmrc (v20), passed to nvm install by the Makefile (85c15885e).
• The shell syntax of the site:parallel script is fixed (01cbdb183).
• Makefile:
• make clear-all-cache empties the configured cache pools (1422e093a).
• make ibexa-assets runs composer ezplatform-assets (d566c4398).

Documentation

• The book (doc/book/, a copy from master): it covers every release line, and the newest copy is on master.
• doc/INSTALL.md is now the short installation guide. The previous guide, with its wrong collation, symlink depth and five-part create-project version, is still in 1.0.0.9.
• Server examples:
• The Varnish page names the VCL files this branch ships.
• The nginx example uses a PHP 8 socket and APP_ENV prod.
• The Apache example describes APP_HTTP_CACHE correctly.
• The README links to the book.

Known: src/AppBundle/Resources/symlink/root_dev/.htaccess, which web/.htaccess links to on this branch, still turns on HTTP Basic authentication against a password file of the original demo server. Comment those lines out on your own server (book chapter 14.2).