update minimum requirement to PHP 8.2

According to https://stitcher.io/blog/php-version-stats-june-2025 most
people are running a newer version anyway. 8.2 still receives security
support til the en

update minimum requirement to PHP 8.2

According to https://stitcher.io/blog/php-version-stats-june-2025 most
people are running a newer version anyway. 8.2 still receives security
support til the end of the year and is the version included in Debian
old-stable (Bookworm).

This patch only increases the minumum version and updates the composer
dependencies. No code has been changed yet.

show more ...

�� Rector and PHPCS fixes

editor a11y: remove tabindex

these do more harm then good

add alt texts for size ctl images

Update session validation checks in auth.php

Refactor session validation to check for user and pass existence.

Translation update (es)

make JWT available in session

When a token authentication was successful, the token is now added to
the user session. This allows other plugins (like twofactor) make use of
it.

TreeBuilder: skip invalid pages and namespaces

This will hide namespace templates or weird folders from listings.
Can be disabled with a flag if needed.

reuse bcrypt default difficulty #2093

Instead of hardcoding our own default, we can use PHP's constant

add custom client_ip_header

set explicit referrer-policy

This emits a referrer policy header. It will instruct browsers to send
an abbreviated (host name only) referrer header on cross-origin
requests.

This fixes issues with

set explicit referrer-policy

This emits a referrer policy header. It will instruct browsers to send
an abbreviated (host name only) referrer header on cross-origin
requests.

This fixes issues with YouTube embeds reported at
splitbrain/dokuwiki-plugin-vshare#154

This setting is the default in many browsers, so it doesn't change
behavior for most people.

More info at:

* https://github.com/splitbrain/dokuwiki-plugin-vshare/issues/154
* https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Referrer-Policy

show more ...

lint(Ip32.php): fix spacing

still unsure about function names and order

```
./vendor/bin/phpcbf --standard=PSR12 ../inc/Ip32.php

------------------------------------------------
FILE

lint(Ip32.php): fix spacing

still unsure about function names and order

```
./vendor/bin/phpcbf --standard=PSR12 ../inc/Ip32.php

------------------------------------------------
FILE FIXED REMAINING
------------------------------------------------
dokuwiki/inc/Ip32.php 35 0
```

show more ...

fix: 32bit IP tests w/string of decimal representation, overflows

Math in PHP is hard!
sprintf("%.0f",0x7FFFFFFFFFFFFFFF) == sprintf("%.0f",0x7FFFFFFFFFFFFF00)

Changes
* 32bit gets own version o

fix: 32bit IP tests w/string of decimal representation, overflows

Math in PHP is hard!
sprintf("%.0f",0x7FFFFFFFFFFFFFFF) == sprintf("%.0f",0x7FFFFFFFFFFFFF00)

Changes
* 32bit gets own version of tests where expected values are strings
* decimalToBinary32 to replace `sprintf("%032b%032b"...)`, avoids overflow
* overflow check in ipv4 too
* refactor
* partsTo64 for 32bit parts into dec value as str (bcmath)
* Ip32::$b32 as class constant
* condition always PHP_INT_SIZE == 4 for 32bit (instead of == 8 for 64)

show more ...

refactor(ip): PSR-12 functions

bitmask64_32 -> bitmask64On32
make_bitmask_32 -> makeBitmaskOn32
ipv6_upper_lower_32 -> ipv6UpperLowerOn32

also
* uncomment working 7FFF ipv6 test a

refactor(ip): PSR-12 functions

bitmask64_32 -> bitmask64On32
make_bitmask_32 -> makeBitmaskOn32
ipv6_upper_lower_32 -> ipv6UpperLowerOn32

also
* uncomment working 7FFF ipv6 test and
* fix README suggested podman to use `docker://wpstaging`

show more ...

�� Rector and PHPCS fixes

minor typo in install.html

Minor typo in install.html, changed "info available on it's own page" to "info available on its own page".

Translation update (ca)

Give explanation if no $conf could be loaded

Give explanation if no $conf could be loaded (i. e. DOKU_CONF pointing elsewhere)

eliminate warnings in OR search

update SearchIndex concept doc

SearchIndex: RID cache should not be static

A static var interferes when the same class is instantiated multiple
times

SearchIndex: more Term tests

fix type hint for exception (implicit null issue)

SearchIndex: TupleOps now work with frequencies of 1

We have indexes where we simply track that a relation between entity and
token exists, but there is no frequency. The frequency is always 1.
For

SearchIndex: TupleOps now work with frequencies of 1

We have indexes where we simply track that a relation between entity and
token exists, but there is no frequency. The frequency is always 1.
For those indexes we do not store *1 as frequency but omit it
completely.

The TupleOps class now can work with such indexes and will also store
frequencies of 1 like this.

show more ...

correctly check for session auth data. fixes #4547