Changes from 1.6.0 to 1.6.1

Aggregated from releases across the o3-shop GitHub organisation since shop-ce v1.6.0 (2026-05-07). Last updated: 2026-06-04 14:42 UTC.

shop-ce (v1.6.1)

• docs+feat(#140): close §17/§18, archive change, auto-detect nested working trees by @ralftrapp in shop-ce#131

• chore(#148): drop unused symfony/expression-language dep by @ralftrapp in shop-ce#135

• feat(#145): auto-bump theme.php version line at release time by @ralftrapp in shop-ce#132

• feat(#137): fail quality gate when coverage drops below 90% by @ralftrapp in shop-ce#133

• perf(#112): speed up admin order overview (SQL index-friendliness + skip stats on detail view) by @ralftrapp in shop-ce#138

• fix(#125): Config::reinitialize must clear in-memory params before re-init by @ralftrapp in shop-ce#139

• feat(#143): bin/oe-console oe:user:change-password + oe:user:create –role={admin|customer} by @ralftrapp in shop-ce#134

• fix(#140): bump CI composer pin 2.2.21 → 2.2.28 (GHSA-f9f8-rm49-7jv2) by @ralftrapp in shop-ce#141

• Delete .github/workflows/tests.yml by @nlo-tronet in shop-ce#142

• test(#127): regression guard for docker.sh exit-code propagation by @ralftrapp in shop-ce#137

• 124 make unit tests theme agnostic flip test fixture default to o3 theme by @nlo-tronet in shop-ce#147

• feat: multi-worktree Docker — shared MariaDB, per-worktree shop instances with isolated ports and databases by @nlo-tronet in shop-ce#148

• B 1.6 claude and scripts by @nlo-tronet in shop-ce#151

• Configurable log level for unknown-controller requests (bot probe noise) by @nlo-tronet in shop-ce#150

• feat: add oe:module:rebuild-configuration command (#132) by @nlo-tronet in shop-ce#146

• fix(#157): silence Composer autoload warning on --no-dev install by @nlo-tronet in shop-ce#149

• 109 test suite detects exceptions by scraping shared oxideshoplog error only substring exception fragile order dependent destructive by @nlo-tronet in shop-ce#105

• sec: symfony/dom-crawler and symfony/yaml CVEs investigated — not exploitable in O3-Shop, see report-cve-2026-05-26.md by @nlo-tronet in shop-ce#152

• chore: metapackage update resolves composer/composer advisories — re-baseline audit reports by @nlo-tronet in shop-ce#154

• bc: Basket::getPaymentId() is now a required basket contract in OrderController::getPayment() by @nlo-tronet in shop-ce#153

• fix: ensure consistent log directory path handling in Config by @nlo-tronet in shop-ce#155

• 166 sourcebootstrapphp rewrite hard references exithandler breaks composer install for any 13x 16x upgrade with a non empty vendor by @nlo-tronet in shop-ce#156

• Adjust bin/release for the metapackage fold-out by @ralftrapp in shop-ce#157

• fix(#166): guard ExitHandler registration with interface_exists() by @ralftrapp in shop-ce#158

• refactor(#169): tag shop-metapackage-ce at –to verbatim (drop the –bump workaround) by @ralftrapp in shop-ce#159

• German language inactive by default — should ship active by @ralftrapp in shop-ce#160

• fix: export SHOP_CONTAINER for playwright suite after #148 rename by @ralftrapp in shop-ce#161

• Security review: symfony/yaml & symfony/polyfill-intl-idn CVEs (Low) — not exploitable in O3-Shop; yaml fix deferred to Symfony stack migration by @nlo-tronet in shop-ce#162

• fix: update initial_data.sql for o3-Theme v1.4.0 color settings by @egate-media-Frank in shop-ce#165

New Contributors

• @egate-media-Frank made their first contribution in shop-ce#165

• fix: use INSERT IGNORE for o3-theme oxconfigdisplay block in initial_… by @egate-media-Frank in shop-ce#166

• issue #185 by @egate-media-Frank in shop-ce#167

• b-1.5 => main by @nlo-tronet in shop-ce#99

• feat(#140): bin/release CLI + metapackage fold-in prerequisites by @ralftrapp in shop-ce#121

• feat(#140): post-#121 fixes from 12.1 live dry-run + UX by @ralftrapp in shop-ce#123

• docs(#140): close §13 (wiki) and §14 (branch normalization) by @ralftrapp in shop-ce#124

• docs(#140): extend §14 to cover 5 missed release-eligible repos by @ralftrapp in shop-ce#125

• feat(#140): wire live execution in ReleaseCommand (§15) by @ralftrapp in shop-ce#126

• feat(#140): zero-config repo discovery + auto-clone + UpToDateGate (§16) by @ralftrapp in shop-ce#127

• feat(#140): ComposerInstallGate refinements + –no-audit CLI flag by @ralftrapp in shop-ce#128

• fix(#140): use bundled composer in ComposerInstallGate by @ralftrapp in shop-ce#129

• fix(#140): drop –no-audit; bundled composer 2.2.x predates audit feature by @ralftrapp in shop-ce#130

o3-shop (v1.6.1)

o3-shop/gdpr-optin-module

• feat: exclude .next-bump from dist archives by @ralftrapp in gdpr-optin-module#1

New Contributors

• @ralftrapp made their first contribution in gdpr-optin-module#1

o3-shop/shop-facts

• feat: exclude .next-bump from dist archives by @ralftrapp in shop-facts#1

o3-shop/shop-doctrine-migration-wrapper

o3-shop/shop-db-views-generator

• feat: exclude .next-bump from dist archives by @ralftrapp in shop-db-views-generator#1

• @ralftrapp made their first contribution in shop-db-views-generator#1

o3-shop/shop-demodata-installer

• feat: exclude .next-bump from dist archives by @ralftrapp in shop-demodata-installer#1

• @ralftrapp made their first contribution in shop-demodata-installer#1

o3-shop/shop-composer-plugin

• feat: exclude .next-bump from dist archives by @ralftrapp in shop-composer-plugin#4

• fix: upgrade bootstrap.php overwrite notification to warning by @nlo-tronet in shop-composer-plugin#5

• @ralftrapp made their first contribution in shop-composer-plugin#4

• @nlo-tronet made their first contribution in shop-composer-plugin#5

o3-shop/mink-selenium-driver

• feat: exclude .next-bump from dist archives by @ralftrapp in MinkSeleniumDriver#1

• @ralftrapp made their first contribution in MinkSeleniumDriver#1

o3-shop/codeception-page-objects

• feat: exclude .next-bump from dist archives by @ralftrapp in codeception-page-objects#1

• @ralftrapp made their first contribution in codeception-page-objects#1

o3-shop/shop-ce

• b-1.5 => main by @nlo-tronet in shop-ce#99

o3-shop/o3-theme

• feat: exclude .next-bump from dist archives by @ralftrapp in o3-Theme#22

• docs(#131): rewrite README — audience, fix broken clone URL, drop obsolete steps by @ralftrapp in o3-Theme#25

• fix(#145): bump theme.php version to current tag (1.3.1) by @ralftrapp in o3-Theme#24

• fix: update brace-expansion to version 5.0.6 in package-lock.json by @nlo-tronet in o3-Theme#26

• feat: v1.4.0 — new color/layout settings and template improvements (f… by @egate-media-Frank in o3-Theme#28

• @nlo-tronet made their first contribution in o3-Theme#26

o3-shop/shop-demodata-ce

• feat: exclude .next-bump from dist archives by @ralftrapp in shop-demodata-ce#9

o3-shop/tinymce-editor

• feat: exclude .next-bump from dist archives by @ralftrapp in tinymce-editor#1

• fix: editor-inserted images use root-relative URLs (o3-shop/o3-shop#151) by @ralftrapp in tinymce-editor#2

• @ralftrapp made their first contribution in tinymce-editor#1

o3-shop/usercentrics

• feat: exclude .next-bump from dist archives by @ralftrapp in usercentrics#1

• @ralftrapp made their first contribution in usercentrics#1

o3-shop/wave-theme

• feat: exclude .next-bump from dist archives by @ralftrapp in wave-theme#4

• fix(#145): bump theme.php version to current tag (1.2.1) by @ralftrapp in wave-theme#5

o3-shop/shop-metapackage-ce

Unchanged in this release

• o3-shop/smarty continues at ~2.6.34

• o3-shop/shop-unified-namespace-generator continues at ^1.0.0

• o3-shop/php-selenium continues at ~1.0.0

• o3-shop/codeception-modules continues at ^1.0.0

• o3-shop/developer-tools continues at ^1.0.0

• o3-shop/testing-library continues at ^1.2.0

• o3-shop/shop-ide-helper continues at ^1.0.0

• feat(#140): bin/release CLI + metapackage fold-in prerequisites by @ralftrapp in shop-ce#121

• feat(#140): post-#121 fixes from 12.1 live dry-run + UX by @ralftrapp in shop-ce#123

• docs(#140): close §13 (wiki) and §14 (branch normalization) by @ralftrapp in shop-ce#124

• docs(#140): extend §14 to cover 5 missed release-eligible repos by @ralftrapp in shop-ce#125

• feat(#140): wire live execution in ReleaseCommand (§15) by @ralftrapp in shop-ce#126

• feat(#140): zero-config repo discovery + auto-clone + UpToDateGate (§16) by @ralftrapp in shop-ce#127

• feat(#140): ComposerInstallGate refinements + –no-audit CLI flag by @ralftrapp in shop-ce#128

• fix(#140): use bundled composer in ComposerInstallGate by @ralftrapp in shop-ce#129

• fix(#140): drop –no-audit; bundled composer 2.2.x predates audit feature by @ralftrapp in shop-ce#130

• docs+feat(#140): close §17/§18, archive change, auto-detect nested working trees by @ralftrapp in shop-ce#131

• chore(#148): drop unused symfony/expression-language dep by @ralftrapp in shop-ce#135

• feat(#145): auto-bump theme.php version line at release time by @ralftrapp in shop-ce#132

• feat(#137): fail quality gate when coverage drops below 90% by @ralftrapp in shop-ce#133

• perf(#112): speed up admin order overview (SQL index-friendliness + skip stats on detail view) by @ralftrapp in shop-ce#138

• fix(#125): Config::reinitialize must clear in-memory params before re-init by @ralftrapp in shop-ce#139

• feat(#143): bin/oe-console oe:user:change-password + oe:user:create –role={admin|customer} by @ralftrapp in shop-ce#134

• fix(#140): bump CI composer pin 2.2.21 → 2.2.28 (GHSA-f9f8-rm49-7jv2) by @ralftrapp in shop-ce#141

• Delete .github/workflows/tests.yml by @nlo-tronet in shop-ce#142

• test(#127): regression guard for docker.sh exit-code propagation by @ralftrapp in shop-ce#137

• 124 make unit tests theme agnostic flip test fixture default to o3 theme by @nlo-tronet in shop-ce#147

• feat: multi-worktree Docker — shared MariaDB, per-worktree shop instances with isolated ports and databases by @nlo-tronet in shop-ce#148

• B 1.6 claude and scripts by @nlo-tronet in shop-ce#151

• Configurable log level for unknown-controller requests (bot probe noise) by @nlo-tronet in shop-ce#150

• feat: add oe:module:rebuild-configuration command (#132) by @nlo-tronet in shop-ce#146

• fix(#157): silence Composer autoload warning on --no-dev install by @nlo-tronet in shop-ce#149

• 109 test suite detects exceptions by scraping shared oxideshoplog error only substring exception fragile order dependent destructive by @nlo-tronet in shop-ce#105

• sec: symfony/dom-crawler and symfony/yaml CVEs investigated — not exploitable in O3-Shop, see report-cve-2026-05-26.md by @nlo-tronet in shop-ce#152

• chore: metapackage update resolves composer/composer advisories — re-baseline audit reports by @nlo-tronet in shop-ce#154

• bc: Basket::getPaymentId() is now a required basket contract in OrderController::getPayment() by @nlo-tronet in shop-ce#153

• fix: ensure consistent log directory path handling in Config by @nlo-tronet in shop-ce#155

• 166 sourcebootstrapphp rewrite hard references exithandler breaks composer install for any 13x 16x upgrade with a non empty vendor by @nlo-tronet in shop-ce#156

• Feature/issue 27 new color settings by @egate-media-Frank in o3-Theme#29

• Adjust bin/release for the metapackage fold-out by @ralftrapp in shop-ce#157

• fix(#166): guard ExitHandler registration with interface_exists() by @ralftrapp in shop-ce#158

• refactor(#169): tag shop-metapackage-ce at –to verbatim (drop the –bump workaround) by @ralftrapp in shop-ce#159

• German language inactive by default — should ship active by @ralftrapp in shop-ce#160

• fix: export SHOP_CONTAINER for playwright suite after #148 rename by @ralftrapp in shop-ce#161

• Security review: symfony/yaml & symfony/polyfill-intl-idn CVEs (Low) — not exploitable in O3-Shop; yaml fix deferred to Symfony stack migration by @nlo-tronet in shop-ce#162

• fix: update initial_data.sql for o3-Theme v1.4.0 color settings by @egate-media-Frank in shop-ce#165

• @egate-media-Frank made their first contribution in shop-ce#165

• fix: uppercase sAccentColor default value (#FFFFFF) by @egate-media-Frank in o3-Theme#30

• fix: update demodata.sql for o3-Theme v1.4.0 color setting renames by @egate-media-Frank in shop-demodata-ce#10

• @egate-media-Frank made their first contribution in shop-demodata-ce#10

o3-shop/testing-library

• feat: exclude .next-bump from dist archives by @ralftrapp in testing-library#4

• @ralftrapp made their first contribution in testing-library#4

• fix: add s-prefix color settings to demodata.sql for o3-Theme v1.4.0 by @egate-media-Frank in shop-demodata-ce#11

o3-shop/smarty

• feat: exclude .next-bump from dist archives by @ralftrapp in smarty#1

• @ralftrapp made their first contribution in smarty#1

• Update main to v1.0.4 (#140 §14) by @ralftrapp in shop-facts#2

o3-shop/shop-unified-namespace-generator

• feat: exclude .next-bump from dist archives by @ralftrapp in shop-unified-namespace-generator#1

• @ralftrapp made their first contribution in shop-unified-namespace-generator#1

o3-shop/php-selenium

• feat: exclude .next-bump from dist archives by @ralftrapp in PHP-Selenium#1

• @ralftrapp made their first contribution in PHP-Selenium#1

o3-shop/codeception-modules

• feat: exclude .next-bump from dist archives by @ralftrapp in codeception-modules#1

• @ralftrapp made their first contribution in codeception-modules#1

o3-shop/developer-tools

• feat: exclude .next-bump from dist archives by @ralftrapp in developer-tools#1

• @ralftrapp made their first contribution in developer-tools#1

o3-shop/shop-ide-helper

• feat: exclude .next-bump from dist archives by @ralftrapp in shop-ide-helper#1

• @ralftrapp made their first contribution in shop-ide-helper#1

shop-composer-plugin (v1.2.1)

• feat: exclude .next-bump from dist archives by @ralftrapp in shop-composer-plugin#4

New Contributors

• @ralftrapp made their first contribution in shop-composer-plugin#4

shop-demodata-ce (v1.4.1)

• feat: exclude .next-bump from dist archives by @ralftrapp in shop-demodata-ce#9

o3-Theme (v1.3.1)

• feat: exclude .next-bump from dist archives by @ralftrapp in o3-Theme#22

wave-theme (v1.2.1)

• feat: exclude .next-bump from dist archives by @ralftrapp in wave-theme#4

testing-library (v1.2.1)

• feat: exclude .next-bump from dist archives by @ralftrapp in testing-library#4

New Contributors

• @ralftrapp made their first contribution in testing-library#4