0.4: fix SSR bugs and split placement from sidecar config - #1

Merged

pjeweb merged 9 commits into

mainfrom

Sep 12, 2026

Commits on Sep 12, 2026

Fix confirmed SSR bugs: header injection, cache-behind-breaker, and fail-open footguns.
pjeweb
committed
0bd9c34
Test process-local breaker half-open reset and immediate re-open.
pjeweb
committed
8ef96bd
Require absolute http(s) URLs on page meta and emit description tags.
pjeweb
committed
7dc99f5
Require psr/log and psr/simple-cache; add PHPStan as a dev dependency.
pjeweb
committed
9c6bfa5
Split sidecar config into SsrClient and make EmbedRequest placement-only.
pjeweb
committed
ffbcd7c
Add PHPStan, CI validation, deprecation failures, and a security policy.
pjeweb
committed
2612ce1
Document the 0.4 host API, trust boundaries, and Server-Timing.
pjeweb
committed
e52b422
Read stream response headers in the file_get_contents caller.
pjeweb
committed
94d73a3
Keep the deprecated http_response_header name off the PHP 8.5 class load.
pjeweb
committed
8cf37b8