chore: sync .mokogitea/workflows/pr-check.yml from moko-platform [skip ci]

.mokogitea/manifest.xml

@@ -10,7 +10,7 @@
     <display-name>Package - MokoJoomHero</display-name>
     <org>MokoConsulting</org>
     <description>A Joomla Module designed to provide a random image from a folder with content on top as a Hero.</description>
-    <version>01.10.00</version>
+    <version>01.12.00</version>
     <license spdx="GPL-3.0-or-later">GNU General Public License v3</license>
   </identity>
   <governance>

.mokogitea/workflows/issue-branch.yml

@@ -5,7 +5,7 @@
 # FILE INFORMATION
 # DEFGROUP: Gitea.Workflow
 # INGROUP: moko-platform.Automation
-# VERSION: 01.10.00
+# VERSION: 01.12.00
 # BRIEF: Auto-create feature branch when an issue is opened
 
 name: "Universal: Issue Branch"

.mokogitea/workflows/pr-check.yml

@@ -147,6 +147,98 @@ jobs:
           echo "PHP lint: ${ERRORS} error(s)"
           [ "$ERRORS" -eq 0 ] || { echo "::error::PHP syntax errors found"; exit 1; }
 
+      - name: Joomla JEXEC guard check
+        if: steps.platform.outputs.platform == 'joomla'
+        run: |
+          ERRORS=0
+          while IFS= read -r -d '' file; do
+            # Skip vendor, node_modules, and index.html stub files
+            case "$file" in ./vendor/*|./node_modules/*) continue ;; esac
+            # Check first 10 lines for JEXEC or JPATH guard
+            if ! head -20 "$file" | grep -qE "defined\s*\(\s*['\"](_JEXEC|JPATH_BASE|\\\\JPATH_PLATFORM)['\"]"; then
+              echo "::error file=${file}::Missing JEXEC guard: ${file}"
+              ERRORS=$((ERRORS + 1))
+            fi
+          done < <(find . -name "*.php" -path "*/src/*" -not -path "./.git/*" -not -path "./vendor/*" -print0)
+          if [ "$ERRORS" -gt 0 ]; then
+            echo "::error::${ERRORS} PHP file(s) missing defined('_JEXEC') or die guard"
+            echo "## JEXEC Guard Check: Failed" >> $GITHUB_STEP_SUMMARY
+            echo "${ERRORS} file(s) in src/ are missing the Joomla execution guard." >> $GITHUB_STEP_SUMMARY
+            exit 1
+          fi
+          echo "JEXEC guard: OK"
+
+      - name: Joomla directory listing protection
+        if: steps.platform.outputs.platform == 'joomla'
+        run: |
+          MISSING=0
+          SOURCE_DIR="src"
+          [ ! -d "$SOURCE_DIR" ] && exit 0
+          while IFS= read -r dir; do
+            if [ ! -f "${dir}/index.html" ]; then
+              echo "::warning::Missing index.html in ${dir} (directory listing protection)"
+              MISSING=$((MISSING + 1))
+            fi
+          done < <(find "$SOURCE_DIR" -type d -not -path "./.git/*" -not -path "*/vendor/*" -not -path "*/node_modules/*")
+          if [ "$MISSING" -gt 0 ]; then
+            echo "## Directory Protection" >> $GITHUB_STEP_SUMMARY
+            echo "${MISSING} director(ies) missing index.html" >> $GITHUB_STEP_SUMMARY
+          fi
+          echo "Directory protection: ${MISSING} missing (advisory)"
+
+      - name: Joomla script file and asset checks
+        if: steps.platform.outputs.platform == 'joomla'
+        run: |
+          ERRORS=0
+          MANIFEST=$(find . -maxdepth 3 -name "*.xml" ! -path "./.git/*" -exec grep -l '<extension' {} \; 2>/dev/null | head -1)
+          [ -z "$MANIFEST" ] && exit 0
+          MANIFEST_DIR=$(dirname "$MANIFEST")
+
+          # Check scriptfile exists if declared
+          SCRIPTFILE=$(sed -n 's/.*<scriptfile>\([^<]*\)<\/scriptfile>.*/\1/p' "$MANIFEST" 2>/dev/null)
+          if [ -n "$SCRIPTFILE" ]; then
+            if [ ! -f "${MANIFEST_DIR}/${SCRIPTFILE}" ]; then
+              echo "::error::Manifest declares <scriptfile>${SCRIPTFILE}</scriptfile> but file not found at ${MANIFEST_DIR}/${SCRIPTFILE}"
+              ERRORS=$((ERRORS + 1))
+            else
+              echo "Script file: ${MANIFEST_DIR}/${SCRIPTFILE} (OK)"
+            fi
+          fi
+
+          # Require joomla.asset.json and validate it
+          ASSET_JSON=$(find "$MANIFEST_DIR" -name "joomla.asset.json" -not -path "./.git/*" 2>/dev/null | head -1)
+          if [ -z "$ASSET_JSON" ]; then
+            echo "::error::joomla.asset.json not found — Joomla asset system is required"
+            ERRORS=$((ERRORS + 1))
+          else
+            if command -v php &> /dev/null; then
+              php -r "json_decode(file_get_contents('$ASSET_JSON')); if(json_last_error()!==JSON_ERROR_NONE){echo json_last_error_msg();exit(1);}" 2>&1 || {
+                echo "::error::joomla.asset.json is not valid JSON"
+                ERRORS=$((ERRORS + 1))
+              }
+            fi
+            echo "joomla.asset.json: valid"
+          fi
+
+          # Validate all XML files in src/ are well-formed
+          XML_ERRORS=0
+          if command -v php &> /dev/null; then
+            while IFS= read -r -d '' xmlfile; do
+              if ! php -r "libxml_use_internal_errors(true); \$x = simplexml_load_file('$xmlfile'); if(!\$x){foreach(libxml_get_errors() as \$e) echo trim(\$e->message) . ' in $xmlfile'; exit(1);}" 2>&1; then
+                XML_ERRORS=$((XML_ERRORS + 1))
+              fi
+            done < <(find "$MANIFEST_DIR" -name "*.xml" -not -path "./.git/*" -print0)
+          fi
+          if [ "$XML_ERRORS" -gt 0 ]; then
+            echo "::error::${XML_ERRORS} XML file(s) are malformed"
+            ERRORS=$((ERRORS + 1))
+          else
+            echo "XML well-formedness: OK"
+          fi
+
+          [ "$ERRORS" -gt 0 ] && exit 1
+          echo "Joomla asset checks: OK"
+
       - name: Validate platform manifest
         run: |
           PLATFORM="${{ steps.platform.outputs.platform }}"
@@ -164,6 +256,13 @@ jobs:
               for ELEMENT in name version description; do
                 grep -q "<${ELEMENT}>" "$MANIFEST" || { echo "::error::Missing <${ELEMENT}> in manifest"; exit 1; }
               done
+              # Block legacy raw/branch update server URLs on MokoGitea
+              RAW_URLS=$(grep -n 'raw/branch' "$MANIFEST" | grep -i 'mokoconsulting\|mokogitea\|git\.mokoconsulting\.tech' || true)
+              if [ -n "$RAW_URLS" ]; then
+                echo "::error::Manifest contains legacy raw/branch update server URL on MokoGitea. Use the Gitea Pages URL instead (e.g. /{REPO}/updates.xml not /{REPO}/raw/branch/main/updates.xml)"
+                echo "$RAW_URLS"
+                exit 1
+              fi
               echo "Joomla manifest valid"
               ;;
             dolibarr)

CHANGELOG.md

@@ -1,19 +1,12 @@
 # Changelog
 ## [Unreleased]
 
+## [01.12.00] --- 2026-06-04
+
+## [01.11.00] --- 2026-06-04
+
 ## [01.10.00] --- 2026-06-04
 
 ## [01.09.00] --- 2026-06-04
 
 ## [01.08.00] --- 2026-06-04
-
-
-## [01.07.00] --- 2026-05-30
-
-
-All notable changes to this project will be documented in this file.
-
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
-Version format: `XX.YY.ZZ` (zero-padded semver).
-
-## [01.06.00] --- 2026-05-30

CODE_OF_CONDUCT.md

@@ -14,7 +14,7 @@
 	DEFGROUP:
 	INGROUP: Project.Documentation
 	REPO:
-	VERSION: 01.10.00
+	VERSION: 01.12.00
 	PATH: ./CODE_OF_CONDUCT.md
 	BRIEF: Reference + packaging repo for Moko Consulting Developer GPT Other Default
 -->

README.md

@@ -7,7 +7,7 @@
  # FILE INFORMATION
  REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoJoomHero
  FILE: ./README.md
- VERSION: 01.10.00
+ VERSION: 01.12.00
  BRIEF: MokoJoomHero - Joomla Module
  -->
 

SECURITY.md

@@ -23,7 +23,7 @@ DEFGROUP: [PROJECT_NAME]
 INGROUP: [PROJECT_NAME].Documentation
 REPO: [REPOSITORY_URL]
 PATH: /SECURITY.md
-VERSION: 01.10.00
+VERSION: 01.12.00
 BRIEF: Security vulnerability reporting and handling policy
 -->
 

src/packages/mod_mokojoomhero/language/en-GB/mod_mokojoomhero.ini

@@ -6,7 +6,7 @@
 ; INGROUP: MokoJoomHero.Module
 ; REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoJoomHero
 ; PATH: /src/language/en-GB/mod_mokojoomhero.ini
-; VERSION: 01.10.00
+; VERSION: 01.12.00
 ; BRIEF: Language strings for MokoJoomHero module (frontend + admin form fields)
 
 MOD_MOKOJOOMHERO_NO_CONTENT="Add content to this module to display it over the hero image."

src/packages/mod_mokojoomhero/language/en-GB/mod_mokojoomhero.sys.ini

@@ -6,7 +6,7 @@
 ; INGROUP: MokoJoomHero.Module
 ; REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoJoomHero
 ; PATH: /src/language/en-GB/mod_mokojoomhero.sys.ini
-; VERSION: 01.10.00
+; VERSION: 01.12.00
 ; BRIEF: System language strings — used in admin Extension Manager and Module Manager
 
 MOD_MOKOJOOMHERO="Module - MokoJoomHero"

src/packages/mod_mokojoomhero/language/en-US/mod_mokojoomhero.ini

@@ -6,7 +6,7 @@
 ; INGROUP: MokoJoomHero.Module
 ; REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoJoomHero
 ; PATH: /src/language/en-US/mod_mokojoomhero.ini
-; VERSION: 01.10.00
+; VERSION: 01.12.00
 ; BRIEF: Language strings for MokoJoomHero module (en-US, frontend + admin form fields)
 
 MOD_MOKOJOOMHERO_NO_CONTENT="Add content to this module to display it over the hero image."

src/packages/mod_mokojoomhero/language/en-US/mod_mokojoomhero.sys.ini

@@ -6,7 +6,7 @@
 ; INGROUP: MokoJoomHero.Module
 ; REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoJoomHero
 ; PATH: /src/language/en-US/mod_mokojoomhero.sys.ini
-; VERSION: 01.10.00
+; VERSION: 01.12.00
 ; BRIEF: System language strings — used in admin Extension Manager and Module Manager (en-US)
 
 MOD_MOKOJOOMHERO="Module - MokoJoomHero"

src/packages/mod_mokojoomhero/media/css/mod_mokojoomhero.css

@@ -7,7 +7,7 @@
  * INGROUP: MokoJoomHero.Module
  * REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoJoomHero
  * PATH: /src/packages/mod_mokojoomhero/media/css/mod_mokojoomhero.css
- * VERSION: 01.10.00
+ * VERSION: 01.12.00
  * BRIEF: Hero module stylesheet — slideshow, video, colour/gradient, overlay, card, mute toggle, responsive
  */
 

src/packages/mod_mokojoomhero/media/js/mod_mokojoomhero.js

@@ -8,7 +8,7 @@
  * INGROUP: MokoJoomHero.Module
  * REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoJoomHero
  * PATH: /src/packages/mod_mokojoomhero/media/js/mod_mokojoomhero.js
- * VERSION: 01.10.00
+ * VERSION: 01.12.00
  * BRIEF: Hero module JavaScript — slideshow crossfade, video viewport control, mute toggle
  */
 

src/packages/mod_mokojoomhero/mod_mokojoomhero.xml

@@ -22,7 +22,7 @@
 	<authorUrl>https://mokoconsulting.tech</authorUrl>
 	<copyright>Copyright (C) 2026 Moko Consulting. All rights reserved.</copyright>
 	<license>GPL-3.0-or-later</license>
-	<version>01.10.00</version>
+	<version>01.12.00</version>
 	<description>Displays a random hero image slideshow or background video with content overlaid. Designed for MokoOnyx template. By Moko Consulting.</description>
 
 	<scriptfile>script.php</scriptfile>

src/packages/plg_system_mokojoomhero/mokojoomhero.xml

@@ -8,7 +8,7 @@
  -->
 <extension type="plugin" group="system" method="upgrade">
     <name>PLG_SYSTEM_MOKOJOOMHERO</name>
-    <version>01.10.00</version>
+    <version>01.12.00</version>
     <creationDate>2026-06-02</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>

src/pkg_mokojoomhero.xml

@@ -8,7 +8,7 @@
 <extension type="package" method="upgrade">
     <name>Package - MokoJoomHero</name>
     <packagename>mokojoomhero</packagename>
-    <version>01.10.00</version>
+    <version>01.12.00</version>
     <creationDate>2026-06-02</creationDate>
     <author>Moko Consulting</author>
     <authorEmail>hello@mokoconsulting.tech</authorEmail>