# Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.

## [Unreleased]

## [v1.0.8] - 2026-03-10

### Security
- Removed hardcoded fallback Satis credentials. Credentials are now loaded exclusively from `auth.json` or application params (`params['satis.username']` / `params['satis.password']`). A `RuntimeException` is thrown if neither source provides credentials, preventing silent use of leaked values.

## [v1.0.7] - 2026-03-10

### Added
- Initial stable release with Composer package management via PHP API (no shell_exec).
- Support for install, update, delete, and list actions via Yii2 AccessControl.
- Satis v2 metadata-url package listing.
