Release 1.19.0

.claude/skills/easyadmin/SKILL.md

@@ -17,7 +17,7 @@ description: >-
 license: MIT
 metadata:
   author: EasyCorp
-  easyadmin-version: '5.6.1'
+  easyadmin-version: '5.7.0'
   installed-by: 'easyadmin:ai:install'
 ---
 

.claude/skills/easyadmin/references/api.md

@@ -1067,6 +1067,7 @@ collapsible(bool $collapsible = true): self
 renderCollapsed(bool $collapsed = true): self
 setBadge(Stringable|bool|callable|float|int|string|null $content, string $style = 'secondary', array $htmlAttributes = []): self
 setIcon(string $iconCssClass): self
+setTabId(string $id): self
 ```
 
 Also accepts every FieldTrait method (see [Field\FieldTrait](#fieldfieldtrait)).

CHANGELOG.md

@@ -7,6 +7,31 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.19.0] - 2026-10-26
+
+- [#170](https://github.com/itk-dev/devops_itksites/pull/170)
+  Update the docker compose files from the itkdev-docker templates, which
+  use the maintained `nginx/nginx-unprivileged` image
+- [#169](https://github.com/itk-dev/devops_itksites/pull/169)
+  Mark advisories as not affected per git repo, so they stop counting towards
+  a site's advisories, and sort sites by their open advisories
+- [#168](https://github.com/itk-dev/devops_itksites/pull/168)
+  Rewrite the fixtures to cover all content with made-up data shaped like
+  production
+- [#167](https://github.com/itk-dev/devops_itksites/pull/167)
+  Let the latest dir result decide which sites exist, so replays no longer
+  revive removed sites or delete live ones, and purge detection results not
+  seen for 30 days every night
+- [#166](https://github.com/itk-dev/devops_itksites/pull/166)
+  Update EasyAdmin to 5.7, which adds the UI Kit at `/admin/_ea_ui_kit` in
+  debug mode
+- [#165](https://github.com/itk-dev/devops_itksites/pull/165)
+  Update Composer packages, including `symfony/expression-language` for
+  CVE-2026-109449
+- [#164](https://github.com/itk-dev/devops_itksites/pull/164)
+  Clear two Doctrine deprecations: pass `SortDirection` to `orderBy()`, and
+  run migrations without a transaction, which MariaDB never honoured
+
 ## [1.18.0] - 2026-10-19
 
 - [#162](https://github.com/itk-dev/devops_itksites/pull/162)
@@ -439,7 +464,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [1.0.0] - 2022-09-15
 
-[Unreleased]: https://github.com/itk-dev/devops_itksites/compare/1.18.0...HEAD
+[Unreleased]: https://github.com/itk-dev/devops_itksites/compare/1.19.0...HEAD
+[1.19.0]: https://github.com/itk-dev/devops_itksites/compare/1.18.0...1.19.0
 [1.18.0]: https://github.com/itk-dev/devops_itksites/compare/1.17.0...1.18.0
 [1.17.0]: https://github.com/itk-dev/devops_itksites/compare/1.16.0...1.17.0
 [1.16.0]: https://github.com/itk-dev/devops_itksites/compare/1.15.1...1.16.0

CLAUDE.md

@@ -213,7 +213,7 @@ Pull requests run these checks:
 - API specs (`public/api-spec-v1.yaml` and `.json`) must be regenerated and committed when API changes
 
 <easyadmin-guidelines>
-This project uses EasyAdmin 5.6.1.
+This project uses EasyAdmin 5.7.0.
 
 Before creating or modifying admin dashboards, CRUD controllers, fields, actions,
 filters or their tests, read and follow the `easyadmin` skill at `.claude/skills/easyadmin/SKILL.md`.

README.md

@@ -201,7 +201,7 @@ docker compose exec phpfpm composer queues
 or
 
 ```shell
-docker compose exec phpfpm bin/console messenger:consume async --failure-limit=1 -vvv
+docker compose exec phpfpm bin/console messenger:consume async -vvv
 ```
 
 ### Assets

Taskfile.yml

@@ -59,7 +59,7 @@ tasks:
         cmds:
             - task: console
               vars:
-                  CONSOLE_ARGS: messenger:consume async --failure-limit=1 -vvv
+                  CONSOLE_ARGS: messenger:consume async -vvv
 
     composer:
         desc: "Run `composer` command. Example: task composer -- normalize"

assets/admin.js

@@ -21,6 +21,16 @@ const tomSelectHandler = () => {
 window.addEventListener("DOMContentLoaded", tomSelectHandler);
 document.addEventListener("ea.collection.item-added", tomSelectHandler);
 
+// Disable the buttons of a [data-submit-once] form once it submits, so a
+// slow page load does not invite a second click.
+document.addEventListener("submit", (event) => {
+  if (event.target.matches("[data-submit-once]")) {
+    event.target
+      .querySelectorAll("button")
+      .forEach((button) => (button.disabled = true));
+  }
+});
+
 // Copy the text of a [data-copy-text] button to the clipboard, and show a
 // check mark for a moment, like GitHub's copy buttons.
 document.addEventListener("click", async (event) => {

composer.json

@@ -13,7 +13,7 @@
         "doctrine/doctrine-bundle": "^3.2",
         "doctrine/doctrine-migrations-bundle": "^4.0",
         "doctrine/orm": "^3.0",
-        "easycorp/easyadmin-bundle": "^5.0",
+        "easycorp/easyadmin-bundle": "^5.7",
         "itk-dev/openid-connect-bundle": "^6.1",
         "itk-dev/vault-bundle": "^1.0.0",
         "nelmio/cors-bundle": "^2.2",
@@ -139,7 +139,7 @@
             "bin/console hautelook:fixtures:load --no-interaction"
         ],
         "queues": [
-            "bin/console messenger:consume async scheduler_drupal_releases --failure-limit=1 -vvv"
+            "bin/console messenger:consume async scheduler_default -vvv"
         ],
         "tests": [
             "bin/console --env=test doctrine:database:drop --if-exists --force --quiet",