Release 1.4.0

.docker/data/.gitignore

@@ -1,5 +1,5 @@
 # Ignore everything in this directory
 *
-# Except this file
+# Except
 !.gitignore
-!Readme.md
+!README.md

.docker/nginx.conf

@@ -17,9 +17,7 @@ http {
     include       /etc/nginx/mime.types;
     default_type  application/octet-stream;
 
-    set_real_ip_from 172.16.0.0/16;
-    real_ip_recursive on;
-    real_ip_header X-Forwarded-For;
+    # Note: set_real_ip_from is set in the server block
 
     log_format  main  '$http_x_real_ip - $remote_user [$time_local] "$request" '
                       '$status $body_bytes_sent "$http_referer" '

.docker/templates/default.conf.template

@@ -6,17 +6,24 @@ server {
 
     client_max_body_size ${NGINX_MAX_BODY_SIZE};
 
-    # This also needs to be set in the single server tag and not only in http.
     set_real_ip_from 172.16.0.0/16;
+    set_real_ip_from 192.168.39.0/24;
     real_ip_recursive on;
     real_ip_header X-Forwarded-For;
 
-    location / {
-        # We are co-hosting with the legacy EventDB, so this app is hosted under '/api/v2/' (.env::APP_PATH_PREFIX)
-        # This is configured for Symfony in both 'api_platform.prefix' and 'framework.assets.base_path'. However
-        # Symfony still installs assets in the root path so we need to rewrite the uri to remove '/api/v2/'.
-        rewrite ^${APP_PATH_PREFIX}/(.*) /$1 break;
+    location = /cron-metrics {
+        # Proxy to supercronic metrics
+        proxy_pass http://${NGINX_CRON_METRICS}/metrics;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
 
+    # Project-specific server config (.docker/templates/server.d/*.conf.template).
+    include /etc/nginx/conf.d/server.d/*.conf;
+
+    location / {
         # try to serve file directly, fallback to index.php
         try_files $uri /index.php$is_args$args;
     }

.docker/templates/server.d/app-path-prefix.conf.template

@@ -0,0 +1,4 @@
+# This app shares the domain with event-database-imports, so this app is served under '/api/v2/' (.env::APP_PATH_PREFIX).
+# This is configured for Symfony in both 'api_platform.prefix' and 'framework.assets.base_path'. However
+# Symfony still installs assets in the root path so we need to rewrite the uri to remove '/api/v2/'.
+rewrite ^${APP_PATH_PREFIX}/(.*) /$1 break;

.env

@@ -21,6 +21,7 @@ ITKDEV_TEMPLATE=symfony-6
 ###> symfony/framework-bundle ###
 APP_ENV=dev
 APP_SECRET=
+APP_SHARE_DIR=var/share
 ###< symfony/framework-bundle ###
 
 ###> app ###
@@ -53,3 +54,9 @@ INDEX_ORGANIZATION_ALIAS=organization
 ###> nelmio/cors-bundle ###
 CORS_ALLOW_ORIGIN='*'
 ###< nelmio/cors-bundle ###
+
+###> symfony/routing ###
+# Configure how to generate URLs in non-HTTP contexts, such as CLI commands.
+# See https://symfony.com/doc/current/routing.html#generating-urls-in-commands
+DEFAULT_URI=https://${COMPOSE_DOMAIN}
+###< symfony/routing ###

.github/workflows/api-spec.yml

@@ -31,14 +31,14 @@ jobs:
         uses: actions/cache@v5
         with:
           path: vendor
-          key: vendor-php8.4-${{ hashFiles('composer.lock') }}
-          restore-keys: vendor-php8.4-
+          key: vendor-php8.5-${{ hashFiles('composer.lock') }}
+          restore-keys: vendor-php8.5-
 
       - name: Install dependencies
         run: |
           docker network create frontend
           # The spec export only needs PHP — pull phpfpm alone and run it as a
-          # one-off (--no-deps skips mariadb/rabbit), not the whole stack.
+          # one-off (--no-deps skips mariadb), not the whole stack.
           docker compose pull --quiet phpfpm
           docker compose run --rm --no-deps phpfpm composer install --no-interaction
 

.github/workflows/changelog.yaml

@@ -14,8 +14,6 @@ on:
 jobs:
   changelog:
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
     steps:
       - name: Checkout
         uses: actions/checkout@v7
@@ -26,4 +24,6 @@ jobs:
         run: git fetch
 
       - name: Check that changelog has been updated.
-        run: git diff --exit-code origin/${{ github.base_ref }} -- CHANGELOG.md && exit 1 || exit 0
+        env:
+          BASE_REF: ${{ github.base_ref }}
+        run: git diff --exit-code "origin/$BASE_REF" -- CHANGELOG.md && exit 1 || exit 0

.github/workflows/composer.yaml

@@ -26,20 +26,23 @@
 name: Composer
 
 env:
-  COMPOSE_USER: root
+  COMPOSE_USER: runner
 
 on:
   pull_request:
+    paths: &paths
+      - "composer.json"
+      - "composer.lock"
+      - "docker-compose.yml"
   push:
     branches:
       - main
       - develop
+    paths: *paths
 
 jobs:
   composer-validate:
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
     steps:
       - uses: actions/checkout@v7
 
@@ -52,8 +55,6 @@ jobs:
 
   composer-normalized:
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
     steps:
       - uses: actions/checkout@v7
 
@@ -67,8 +68,6 @@ jobs:
 
   composer-audit:
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
     steps:
       - uses: actions/checkout@v7
 

.github/workflows/markdown.yaml

@@ -22,16 +22,17 @@ name: Markdown
 
 on:
   pull_request:
+    paths: &paths
+      - "**/*.md"
   push:
     branches:
       - main
       - develop
+    paths: *paths
 
 jobs:
   markdown-lint:
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
     steps:
       - name: Checkout
         uses: actions/checkout@v7

.github/workflows/php.yaml

@@ -34,14 +34,20 @@
 name: Symfony PHP
 
 env:
-  COMPOSE_USER: root
+  COMPOSE_USER: runner
 
 on:
   pull_request:
+    paths: &paths
+      - "**/*.php"
+      - "composer.json"
+      - "composer.lock"
+      - "docker-compose.yml"
   push:
     branches:
       - main
       - develop
+    paths: *paths
 
 jobs:
   coding-standards:

.github/workflows/pr.yaml

@@ -17,14 +17,14 @@ jobs:
         uses: actions/cache@v5
         with:
           path: vendor
-          key: vendor-php8.4-${{ hashFiles('composer.lock') }}
-          restore-keys: vendor-php8.4-
+          key: vendor-php8.5-${{ hashFiles('composer.lock') }}
+          restore-keys: vendor-php8.5-
 
       - name: Start docker compose setup and install site
         run: |
           docker network create frontend
-          # API tests need PHP + Elasticsearch only (not mariadb/rabbit/nginx/mail);
-          # --no-deps keeps phpfpm's mariadb/rabbit dependencies from starting.
+          # API tests need PHP + Elasticsearch only (not mariadb/nginx/mail);
+          # --no-deps keeps phpfpm's mariadb dependency from starting.
           docker compose pull --quiet phpfpm elasticsearch
           docker compose up --detach --wait --no-deps phpfpm elasticsearch
           docker compose exec -T phpfpm composer install --no-interaction
@@ -57,8 +57,8 @@ jobs:
         uses: actions/cache@v5
         with:
           path: vendor
-          key: vendor-php8.4-${{ hashFiles('composer.lock') }}
-          restore-keys: vendor-php8.4-
+          key: vendor-php8.5-${{ hashFiles('composer.lock') }}
+          restore-keys: vendor-php8.5-
 
       - name: Install dependencies
         run: |
@@ -81,8 +81,8 @@ jobs:
         uses: actions/cache@v5
         with:
           path: vendor
-          key: vendor-php8.4-${{ hashFiles('composer.lock') }}
-          restore-keys: vendor-php8.4-
+          key: vendor-php8.5-${{ hashFiles('composer.lock') }}
+          restore-keys: vendor-php8.5-
 
       - name: Install dependencies
         run: |

.github/workflows/twig.yaml

@@ -24,20 +24,24 @@
 name: Twig
 
 env:
-  COMPOSE_USER: root
+  COMPOSE_USER: runner
 
 on:
   pull_request:
+    paths: &paths
+      - "**/*.twig"
+      - "composer.json"
+      - "composer.lock"
+      - "docker-compose.yml"
   push:
     branches:
       - main
       - develop
+    paths: *paths
 
 jobs:
   twig-lint:
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
     steps:
       - name: Checkout
         uses: actions/checkout@v7

.github/workflows/yaml.yaml

@@ -22,10 +22,14 @@ name: YAML
 
 on:
   pull_request:
+    paths: &paths
+      - "**/*.yml"
+      - "**/*.yaml"
   push:
     branches:
       - main
       - develop
+    paths: *paths
 
 jobs:
   yaml-lint:
@@ -38,4 +42,4 @@ jobs:
           docker network create frontend
 
       - run: |
-          docker compose run --rm prettier '**/*.{yml,yaml}' --check
+          docker compose run --rm prettier --no-editorconfig '**/*.{yml,yaml}' --check

.gitignore

@@ -28,6 +28,7 @@
 ###< symfony/phpunit-bridge ###
 
 ###> vincentlanglet/twig-cs-fixer ###
+/.twig-cs-fixer.php
 /.twig-cs-fixer.cache
 ###< vincentlanglet/twig-cs-fixer ###
 

.markdownlintignore

@@ -5,6 +5,8 @@
 vendor/
 node_modules/
 LICENSE.md
+# Python
+.venv/
 # Drupal
 web/*.md
 web/core/

.php-cs-fixer.dist.php

@@ -1,4 +1,5 @@
 <?php
+
 // This file is copied from config/symfony/php/.php-cs-fixer.dist.php in https://github.com/itk-dev/devops_itkdev-docker.
 // Feel free to edit the file, but consider making a pull request if you find a general issue with the file.
 
@@ -16,8 +17,8 @@
 $config->setFinder($finder);
 
 $config->setRules([
-  '@Symfony' => true,
-  'phpdoc_align' => false,
+    '@Symfony' => true,
+    'phpdoc_align' => false,
 ]);
 
 return $config;

.prettierrc.yaml

@@ -3,6 +3,13 @@
 
 # https://prettier.io/docs/configuration
 overrides:
+  # https://taskfile.dev/docs/styleguide
+  - files:
+      - "Taskfile.{yml,yaml}"
+    options:
+      tabWidth: 2
+      singleQuote: true
+
   # Symfony config
   - files:
       - "config/**/*.{yml,yaml}"

CHANGELOG.md

@@ -8,6 +8,27 @@ See [keep a changelog] for information about writing changes to this log.
 
 ## [Unreleased]
 
+## [1.4.0] - 2026-11-08
+
+- [PR-78](https://github.com/itk-dev/event-database-api/pull/78)
+  Add PHPStan deprecation rules (ignore the API Platform 4.4 `#[ApiFilter]` deprecations)
+- [PR-77](https://github.com/itk-dev/event-database-api/pull/77)
+  Update Symfony Flex recipes
+- [PR-76](https://github.com/itk-dev/event-database-api/pull/76)
+  Update API Platform to 4.4 (OpenAPI 3.2.0, no `charset` in the `application/ld+json` content type)
+- [PR-75](https://github.com/itk-dev/event-database-api/pull/75)
+  Update Rector (2.8) and PHPStan (2.3) and apply the new Rector rules
+- [PR-74](https://github.com/itk-dev/event-database-api/pull/74)
+  Update dependencies in-constraint (Symfony 7.4.23 security release, API Platform 4.3.21, PHPUnit 13.4)
+- [PR-73](https://github.com/itk-dev/event-database-api/pull/73)
+  Require all directly used packages in `composer.json`, checked by PHPStan (`pb30/phpstan-composer-analysis`)
+- [PR-72](https://github.com/itk-dev/event-database-api/pull/72)
+  Update Elasticsearch to 8.19.23 and remove the unused RabbitMQ service
+- [PR-71](https://github.com/itk-dev/event-database-api/pull/71)
+  Require PHP 8.5 and apply the Rector PHP 8.5 rules
+- [PR-70](https://github.com/itk-dev/event-database-api/pull/70)
+  Update the docker compose template (itk-version 3.2.4) and the PHP 8.5 image
+
 ## [1.3.0] - 2026-11-04
 
 - [PR-62](https://github.com/itk-dev/event-database-api/pull/62)
@@ -179,7 +200,8 @@ See [keep a changelog] for information about writing changes to this log.
 - Added multi-value filtering for Lactions and Organizations
 
 [keep a changelog]: https://keepachangelog.com/en/1.1.0/
-[Unreleased]: https://github.com/itk-dev/event-database-api/compare/1.3.0...HEAD
+[Unreleased]: https://github.com/itk-dev/event-database-api/compare/1.4.0...HEAD
+[1.4.0]: https://github.com/itk-dev/event-database-api/compare/1.3.0...1.4.0
 [1.3.0]: https://github.com/itk-dev/event-database-api/compare/1.2.6...1.3.0
 [1.2.6]: https://github.com/itk-dev/event-database-api/compare/1.2.5...1.2.6
 [1.2.5]: https://github.com/itk-dev/event-database-api/compare/1.2.4...1.2.5

CLAUDE.md

@@ -10,8 +10,8 @@ API platform front-end for the Danish event database used by the municipality of
 `docker-compose.yml` is part of the standard ITK Dev Symfony image but is **not used for domain data** (the
 `migrations/` and `src/Entity/` directories are empty).
 
-Stack: PHP 8.3+, Symfony 7.4, API Platform 4.3, Elasticsearch 8.x. Runs entirely in Docker via
-`itkdev/php8.4-fpm` + nginx.
+Stack: PHP 8.5+, Symfony 7.4, API Platform 4.3, Elasticsearch 8.x. Runs entirely in Docker via
+`itkdev/php8.5-fpm` + nginx.
 
 ## Common commands