Updated: Required sevenx-themes-media 1.5.14, so internal links in feature components and link macros reach the content instead of /ibexa.url.alias.

Updated: Updated four tests to the contracts the MongoDB driver and the feed export have now.

- The MongoDB collection stub answers listIndexes(), which the driver reads
  to find a collection's auto_increment key.
- query() translates the INSERT statements the kernel writes and stores the
  document; the test asserts that, and that untranslatable SQL still returns
  false.
- md5() hashes a quoted literal itself, since MongoDB has no MD5 function,
  and wraps only a column reference in MD5().
- The feed format list has Apple Podcasts (ITUNES) after the four existing
  values, which keep theirs.

773 tests pass on PHP 8.1, 8.3 and 8.5.

Fixed: Fixed the PHPUnit workflow failing at Install dependencies on every push since the extension pins were raised.

composer.ci-phpunit.json and composer.ci-phpunit.lock were committed by
mistake. They are the workflow's own per-run overlay: it copies composer.json
over the JSON and deletes both files when it finishes. With the lock in the
repository, every run started from the versions frozen on the day it was
committed and ran a partial update of phpunit/phpunit alone, so every package
whose pin had since moved (explayouts, the themes, sevenx_dse, eztags and 14
more) was refused as "fixed to the lock file version".

- Both overlay files are untracked and ignored; they stay on disk.
- Both jobs now resolve the overlay with a full composer update. Its
  require-dev differs per PHP version (PHPUnit 10.5, 11.5 or composer.json's
  own), so no single committed lock could fit every leg anyway.

Verified by reproducing the failure in a fresh clone, then installing and
running the suite with the new step on PHP 8.1, 8.3 and 8.5.

Updated: Required Exponential Velocity's engine v0.0.4.27: HTTPS that looks after itself, a worker pool that sizes itself, and no stale code after a file is rewritten.

se7enxweb/qbix-webserver ~0.0.4.26 to ~0.0.4.27. The release brings the
self-signed certificate chain with live swaps, certificate sources and
built-in Let's Encrypt, the dynamic worker pool, the Debian-style
configuration directory, GNU and BSD option spellings, and fixes for code
served stale after a rewrite and for the source transform under PHP 8.2 and
8.3's function JIT. Deployed and verified on alpha: Velocity reports
v0.0.4.27 and serves the site.

Updated: Updated the extension pins to the releases each now carries, so no range still admits a version that predates the API its neighbours call.

- se7enxweb/explayouts-ui and explayouts-ui-api: ~1.2.3 / ~1.2.4 to ~1.3.0.
  The old ranges stopped below 1.3.0 and so excluded the released versions.
- se7enxweb/explayouts-content-browser and -content-browser-ui: ~1.0.1.
- se7enxweb/expsite-api: ~1.0.1.
- se7enxweb/sevenx_dse: ~1.1.1 (one CSP nonce per request, and the DSE
  dashboard served more than once per persistent worker).
- se7enxweb/sevenx-themes-media: ~1.5.13 (links keep the siteaccess).

Removed: Removed qbix-settings.md from the repository; like qbix.md it is a private working note, not part of the project.

The file stays where it is on disk and is now ignored.

Removed: Removed qbix.md from the repository; it is a private working note that was never meant to be part of the project.

The file stays where it is on disk and is now ignored.