What's new since 25.10.0
Vortex now uses SemVer(Opens in a new tab/window) for versioning: it was used in the past untill version 1.22.0 and then we tried CalVer(Opens in a new tab/window), which worked well for Vortex, but will not work well for 1.x/2.x split and publishing of tooling packages. All CalVer versions since 1.22.0 were tagged incrementally, making this version 1.34.0.
Vortex 1.34.0 introduces several major improvements that enhance security, streamline dependency management, modernise the development workflow, and prepare the foundation for Vortex 2.0. We also started to name the releases using "Energy & Light" theme. So this release is 1.34-Flux.
This release adopts Composer’s new built-in security audit to ensure that consumer projects stay protected from known vulnerabilities. Dependency management has been improved by switching to version bumping (Opens in a new tab/window)on composer update, and Composer Patches has been upgraded to v2 for stronger supply-chain safety.
On the Drupal side, the template no longer relies on drupal/core-dev, used for core development. Instead, it now includes only the necessary development packages, removing unnecessary version constraints and enabling upgrades to PHPCS v4, Coder v9, and Solr 9.
The installer now supports immediate builds, allows choosing a versioning schema, provides module selection, and is compatible with PHP 8.2 for installation and updates on older environments.
Finally, Vortex’s own end-to-end testing system has moved from BATS to PHPUnit, making tests easier to maintain, debug and extend—while still retaining BATS for shell unit-tests with coverage.
Most importantly, this version removes the remaining blockers for Vortex 2.0. The roadmap is now defined, prioritised, and tracked in the project board(Opens in a new tab/window). Development of Vortex 2.0 is expected to take 2–3 months.
Highlights
- Composer security audit integrated into CI, ensuring consumer sites fail builds when vulnerable dependencies are detected.
- Composer Patches upgraded to v2, improving patch integrity and mitigating supply-chain risks when using patches from external MRs.
- Simplified Drupal dev dependencies, removing drupal/core-dev and enabling upgrades to PHPCS v4, Coder v9, and Solr v9.
- Dependency bumping automated with bump-after-update, ensuring consistent and reliable dependency updates for all projects.
- Installer improvements: immediate build support, module selection, versioning schema choice (SemVer/CalVer), and compatibility with PHP 8.2.
- Vortex own testing system migrated to PHPUnit, enhancing maintainability, debuggability, and extensibility while keeping BATS for shell script unit tests.
Full Changelog
https://github.com/drevops/vortex/releases/tag/1.34.0(Opens in a new tab/window)