Exponential Platform Nexus v1.1.0.12

Fixed

• Installs on PHP 8.0 with Composer's security blocking on.
• Before, there was no installable Twig on PHP 8.0. The project and se7enxweb/site-bundle 2.1.5.3 require twig/twig (^3.0, ^3.3) and twig/intl-extra. Every release that still runs on 8.0 is refused for advisories that upstream fixed only in releases needing PHP 8.1.
• Now: se7enxweb/twig ~3.19.1 on every PHP version.
  • It is Twig 3.19 with the fixes of Twig 3.26 and 3.27, and it includes the intl extension.
  • It replaces twig/twig and twig/intl-extra.
• A per-id advisory policy lists the 17 ids the fork's version falls into, each with its reason.
• conflict keeps unfixed Twig releases out.

Changed

• Twig is 3.19.1 on every PHP version, as on the 2.5 generation (se7enxweb/twig 2.16). Before, PHP 8.1 and later installed upstream Twig 3.30.
• The Tags Bundle comes from se7enxweb/tagsbundle 4.0.20, whose tag view loads /tags/id/{tagId} (before, it answered 500).

Verified with fresh installs of this commit from Packagist on PHP 8.0 and PHP 8.5 (SQLite, the steps of doc/INSTALL.md, security blocking on): every step exits 0; in the legacy admin, three runs of three rounds each (publish rich text with a link, upload an image, bookmarks, search) pass; every content version keeps all its attribute rows; all 133 legacy tables have the legacy primary key.