From f4653aa3a181aba582207783d6e252ca7c289fb9 Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 23 Jul 2026 19:36:52 +0000 Subject: [PATCH] docs: weekly sync for commits landed on main 2026-07-17 to 2026-07-23 - git-hooks.md: check 4 (core.extension.yml) now also excludes paths under tests/ from forbidden-module detection (9a3e73d) - drupal-settings.md: document that both devmode and perfmode now disable OpenTelemetry locally (d9bb965) Co-Authored-By: Claude --- docs/drupal-settings.md | 2 +- docs/git-hooks.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/drupal-settings.md b/docs/drupal-settings.md index 0ab77dd..3819510 100644 --- a/docs/drupal-settings.md +++ b/docs/drupal-settings.md @@ -12,7 +12,7 @@ Both files share most of their baseline overrides: - Overrides the Search API Solr connector to use the local `solr` service (`http://solr:8983/`, core `dev`). - Overrides SMTP settings to point at `localhost:1025` (a local mail-capture tool such as Mailhog), with blank credentials. - Defaults `file_private_path` to `../private` if not already set. -- Disables Shield, TFA, IP restriction (`restrict_ip`), and clears the Fastly API key/site ID — security/CDN modules that shouldn't be active locally. +- Disables Shield, TFA, IP restriction (`restrict_ip`), OpenTelemetry (`opentelemetry.settings.disable`), and clears the Fastly API key/site ID — security/CDN/observability modules that shouldn't be active locally. - Sets `rebuild_access = TRUE` and `skip_permissions_hardening = TRUE`. - Excludes `devel`, `devel_a11y`, `devel_php`, `stage_file_proxy`, `twig_vardumper`, `upgrade_status`, and `drush_endpoint` from configuration sync (`config_exclude_modules`), so these dev-only modules never leak into exported config. - Includes an optional `settings.project.php` (in the same directory) if present, for project-specific overrides. diff --git a/docs/git-hooks.md b/docs/git-hooks.md index 38da5c4..2189efe 100644 --- a/docs/git-hooks.md +++ b/docs/git-hooks.md @@ -19,7 +19,7 @@ A multi-check guard over staged files. Any failing check blocks the commit (exit 1. Rejects staged `system.performance.yml` containing `preprocess: false` (CSS/JS aggregation disabled). 2. Rejects staged `system.performance.yml` (excluding paths under `tests/`) containing `max_age: 0` (browser caching disabled). 3. Rejects staged `system.performance.yml` (excluding `tests/`) containing `gzip: true` (AdvAgg GZIP enabled). -4. Rejects staged `core.extension.yml` enabling forbidden modules: `devel: 0`, `devel_php: 0`, `drush_endpoint: 0` (Drupal's YAML convention where `: 0` means "enabled"). If `.ddev/.env.anner` exists and `DDEV_UPSTREAM_PROVIDER` is `platform` or `upsun`, it additionally forbids enabling ` page_cache: 0` (the leading space is intentional, to avoid matching `dynamic_page_cache`). +4. Rejects staged `core.extension.yml` (excluding paths under `tests/`) enabling forbidden modules: `devel: 0`, `devel_php: 0`, `drush_endpoint: 0` (Drupal's YAML convention where `: 0` means "enabled"). If `.ddev/.env.anner` exists and `DDEV_UPSTREAM_PROVIDER` is `platform` or `upsun`, it additionally forbids enabling ` page_cache: 0` (the leading space is intentional, to avoid matching `dynamic_page_cache`). 5. Checks for a CDN module (Fastly or Cloudflare) enabled in `config/sync/core.extension.yml` while `.platform/routes.yaml` exists; if a CDN is enabled but the routes file doesn't disable Upsun's route cache (`enabled: false` under cache), it blocks with a warning that route cache must be disabled behind a CDN. 6. Rejects commits with staged files under a `devel_php/` folder. 7. If `.ddev/addon-metadata/annertech-ddev/manifest.yaml` is staged with no/empty `version:` field, blocks — this implies a dev/unpublished version of the addon is in use.