Release: merge development into beta

.github/dependabot.yml

@@ -26,6 +26,16 @@ updates:
     ignore:
       - dependency-name: "typescript"
         update-types: ["version-update:semver-major"]
+      # vue-router 5 peers `vite: ^7.3.0 || ^8.0.0` and expects a Vite
+      # toolchain. Measured, not assumed, and the result is SPLIT: integriq and
+      # zaakafhandelapp fail their build on `Can't resolve 'vue-router'`, while
+      # openregister and learniq build clean on 5.3.0. Held because a bump that
+      # breaks some apps and not others cannot be merged unattended, and the
+      # difference is not yet understood. Adopting it fleet-wide is a
+      # Vite migration, not a bump. versioniq is already on Vite and is the
+      # natural pilot.
+      - dependency-name: "vue-router"
+        update-types: ["version-update:semver-major"]
       - dependency-name: "webpack-cli"
         update-types: ["version-update:semver-major"]
       - dependency-name: "@babel/core"

appinfo/info.xml

@@ -40,7 +40,7 @@ Open Register drijft apps zoals OpenCatalogi, Procest, Pipelinq en Software Cata
 
 Vrij en open source onder de EUPL-licentie.
     ]]></description>
-    <version>1.1.15-unstable.20260830153944</version>
+    <version>2.0.5-unstable.20260831053109</version>
     <licence>EUPL-1.2</licence>
     <author mail="info@conduction.nl" homepage="https://www.conduction.nl/">Conduction</author>
     <namespace>OpenRegister</namespace>

composer.json

@@ -109,7 +109,7 @@
 		"elasticsearch/elasticsearch": "^v9.5.0",
 		"guzzlehttp/guzzle": "^7.0",
 		"jwadhams/json-logic-php": "^1.5",
-		"minishlink/web-push": "^9.0",
+		"minishlink/web-push": "^11.0",
 		"opis/json-schema": "^2.3",
 		"phpoffice/phpspreadsheet": "^5.0",
 		"phpoffice/phpword": "^1.2",

lib/BackgroundJob/TenantDeprovisionJob.php

@@ -74,7 +74,10 @@ protected function run(mixed $argument): void {
 		$this->logger->info('[TenantDeprovisionJob] Starting deprovisioning check');
 
 		try {
-			$organisations = $this->organisationMapper->findAll(
+			// Tenant-scoped read, not findAll: a federated counterparty is an
+			// organisation in this table but NOT a tenant of this installation, and
+			// selecting on status alone would sweep it up with the tenants.
+			$organisations = $this->organisationMapper->findLocalTenants(
 				filters: ['status' => TenantLifecycleService::STATUS_DEPROVISIONING]
 			);
 		} catch (\Exception $e) {

lib/BackgroundJob/TenantPurgeJob.php

@@ -92,7 +92,10 @@ protected function run(mixed $argument): void {
 		$cutoffDate->sub(new DateInterval("P{$retentionDays}D"));
 
 		try {
-			$organisations = $this->organisationMapper->findAll(
+			// Tenant-scoped read, not findAll: a federated counterparty is an
+			// organisation in this table but NOT a tenant of this installation, and
+			// selecting on status alone would sweep it up with the tenants.
+			$organisations = $this->organisationMapper->findLocalTenants(
 				filters: ['status' => TenantLifecycleService::STATUS_ARCHIVED]
 			);
 		} catch (\Exception $e) {

lib/BackgroundJob/TenantUsageSyncJob.php

@@ -82,7 +82,10 @@ protected function run(mixed $argument): void {
 		$this->logger->debug('[TenantUsageSyncJob] Starting usage sync');
 
 		try {
-			$organisations = $this->organisationMapper->findAll(
+			// Tenant-scoped read, not findAll: a federated counterparty is an
+			// organisation in this table but NOT a tenant of this installation, and
+			// selecting on status alone would sweep it up with the tenants.
+			$organisations = $this->organisationMapper->findLocalTenants(
 				filters: ['status' => TenantLifecycleService::STATUS_ACTIVE]
 			);
 		} catch (\Exception $e) {