Release/4.0.0 - #27

Merged

listopad merged 25 commits into

Jul 29, 2026

Commits on Jul 25, 2026

ci: publish tagged releases to GitHub and Packagist
listopad
committed
e1c27eb
fix(api): bind fluent setter params to the calls that accept them
listopad
committed
fb84f9e
fix: validate IP allowlist entries and the facade domain
listopad
committed
982bbee
chore(qa): restore PHPMD thresholds and raise PHPStan to level 8
listopad
committed
b43e594
ci: add PHP 8.5 to the matrix and verify the release tag matches VERSION
listopad
committed
c5b9c68
docs: document the 3.1.0 behavior changes and bump VERSION
listopad
committed
be07b8b
chore(release): consolidate the unreleased 3.1.0 batch into 4.0.0
listopad
committed
e31b92d
feat(http)!: replace the string|false transport contract with a Response object
listopad
committed
3b20aea
feat(http): configurable timeouts and connect-phase retries
listopad
committed
28a4ea7
feat(webhook)!: reject replayed webhooks outside the tolerance window
listopad
committed
415f930
feat(telemetry): CMS/framework/module slots and an opt-out
listopad
committed
936a40f
docs: 4.0.0 changelog and migration guide
listopad
committed
7df1439
test(http): cover the default transport stack
listopad
committed
8ddf8b7
fix(http)!: never retry a failure the transport could not classify
listopad
committed
50cd5de
docs: warn against logging exception traces that carry the secret key
listopad
committed
f27326e

Commits on Jul 28, 2026

Commits on Jul 29, 2026

feat(model)!: remove the deprecated PaymentObject values
listopad
committed
2648433
docs: record the PaymentObject removal in 4.0.0
listopad
committed
5729b8a
feat(telemetry)!: replace the CMS/framework slots with a stack
listopad
committed
b37c090
docs: module and stack telemetry
listopad
committed
2e2f0f4
docs: correct the documented Unitpay-Client payload for 4.0.0
listopad
committed
c7ba847