Exponential Platform Nexus Files

v1.2.0.1 did not install as released: on PHP 8.2 and 8.3 the lock file could not be installed (it was resolved on PHP 8.5), and on PHP 8.5 the cache could not be built. v1.2.0.2 fixes that and the errors a fresh install showed after it:

• Updated: the lock installs on every PHP the line supports, 8.2 to 8.5 (config.platform.php 8.2; doctrine/instantiator, google/recaptcha, zipstream-php and the JWT stack — lcobucci/jwt 4.3, lcobucci/clock 2.2 — on versions that accept 8.2 and 8.5).
• Updated: security updates within the line's major versions (Symfony stays 5.4): composer audit 55 → 10 advisories.
• Updated: TRUSTED_PROXIES is read as a string, so the cache builds on Symfony 5.4.
• Added: yarn.lock; the front-end build installs on Node.js 18 again.
• Updated: the installer reindexes SQLite in one process (only 50 of 290 objects were indexed: "database is locked").
• Added: the legacy kernel's own tables (shop, workflow, collaboration, notifications, RSS, sessions …) in the SQLite demo schema and their stock rows.
• Removed: nglayouts and ngremotemedia from the legacy ActiveExtensions (not installed on this line).
• Updated (locked packages): admin-ui-bundle v4.0.1 (jQuery.ez on ngadminui pages, icons sprite) and the 4.x Legacy Bridge (an image.ini group for every image variation).

Known: 10 advisories remain. league/flysystem CVE-2026-102601 needs Flysystem 3, which Ibexa 4.6 cannot use. phpoffice/phpspreadsheet 1.30.0 has 9: every patched 1.x release refuses PHP 8.5, the version this line recommends, and netgen/information-collection-bundle 3.x allows only PhpSpreadsheet 1.x.

Verified with a fresh install from these commits on PHP 8.2 and 8.5: every documented step exits 0; front pages, adminui sign-in and the Layouts admin pass; ngadminui and legacy_admin sign-in with jQuery.ez working; image, variation and file storage checks pass; no web errors in the logs.