Prepare v2.0.7 release

Author: HecFranco

docs/CHANGELOG.md

@@ -9,18 +9,43 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
+- (Nothing yet.)
+
+### Changed
+
+- (Nothing yet.)
+
+### Fixed
+
+- (Nothing yet.)
+
+---
+
+## [2.0.7] - 2026-02-20
+
+### Added
+
 - **doctrine:encrypt:status:** For each entity, lists which properties are encrypted and their **config** (e.g. `email (config: personal_data)`). At the end, shows **configured encryptor configs** (config name, encryptor class Halite/Defuse, and which is default).
 - **doctrine:encrypt:rotate-keys:** New command to run the full key rotation: optional backup of key files (`--backup`), full decrypt, key change (generate new key files or prompt for .env update), then re-encrypt. Each step asks for confirmation unless `--no-interaction` is used. See [COMMANDS.md](COMMANDS.md#rotate-keys) and [KEY_ROTATION.md](KEY_ROTATION.md).
 - **doctrine:encrypt:generate-secret-key:** Option **`--force`** to overwrite existing key file(s) without asking.
 - **doctrine:decrypt:database** and **doctrine:encrypt:database:** Option **`--force`** to skip the confirmation prompt (useful when calling from scripts or from `rotate-keys` with `--no-interaction`).
+- **Configuration:** `nowo_doctrine_encrypt.batch_size` (default `5`) for the default batch size of encrypt/decrypt database commands; overridable per run via the `batchSize` argument.
+- **Documentation:** [INSTALLATION.md](INSTALLATION.md) — new section **FrankenPHP (runtime and worker mode)**: compatibility with FrankenPHP in both modes, no extra config; recommendations (e.g. limit requests per worker). README and DEMO.md reference FrankenPHP compatibility; demo Caddyfiles include a short comment.
 
 ### Changed
 
-- **Documentation:** COMMANDS.md documents status output (per-entity properties and configs, configured configs), rotate-keys command, and `--force` on generate-secret-key, decrypt and encrypt. KEY_ROTATION.md and SECURITY.md reference the new rotate-keys command. README and INSTALLATION next steps mention rotate keys. ROADMAP updated to reflect key rotation command and docs.
+- **doctrine:decrypt:database** and **doctrine:encrypt:database:** Use **raw SQL** for encrypt/decrypt (no Doctrine lifecycle events); default batch size is **5** (configurable via `nowo_doctrine_encrypt.batch_size`).
+- **Documentation:** COMMANDS.md documents status output (per-entity properties and configs, configured configs), rotate-keys command, and `--force` on generate-secret-key, decrypt and encrypt. KEY_ROTATION.md and SECURITY.md reference the new rotate-keys command. README and INSTALLATION next steps mention rotate keys. ROADMAP updated. DEMO.md has a FrankenPHP subsection; demo Caddyfiles reference INSTALLATION § FrankenPHP.
 
 ### Fixed
 
-- (No changes yet.)
+- **RotateKeysCommandTest:** Test for “no configs” now builds the command with `DoctrineEncryptSubscriber(null)` and `registry = null` so that an empty registry is never passed to the subscriber (which would call `getDefault()` and throw).
+
+### Tests
+
+- **Coverage:** Unit tests added for `RotateKeysCommand` (full rotation, backup with SQLite, backup-db-cmd, env configs, paused step, no configs), for `AbstractCommand` (`getEncryptedTableInfo`, `getColumnNameFromMetadata`, `getRowValue`), for decrypt/encrypt database commands (executeStatement path, row with null id, decrypt throw fallback), for `DoctrineEncryptStatusCommand` (registry null, configured configs, none), and for `GenerateSecretKeyCommand` (config argument with unsupported encryptor). Code coverage for **lines** is ≥ 95%.
+
+No upgrade steps required from 2.0.6. See [UPGRADING.md](UPGRADING.md#upgrading-to-207).
 
 ---
 

docs/RELEASE.md

@@ -32,10 +32,10 @@
 
 ---
 
-## v2.0.7 (unreleased)
+## v2.0.7 (2026-02-20)
 
-- **Scope:** (1) doctrine:encrypt:status: list encrypted properties and config per entity; show configured encryptor configs at end. (2) New command doctrine:encrypt:rotate-keys (optional backup, decrypt, change keys, re-encrypt; --backup, --no-interaction). (3) --force on generate-secret-key (overwrite without asking), decrypt:database and encrypt:database (skip confirmation). (4) Docs: COMMANDS, KEY_ROTATION, SECURITY, INSTALLATION, ROADMAP, CHANGELOG, UPGRADING updated.
-- **Checklist:** CHANGELOG and UPGRADING updated; tag `v2.0.7` when ready.
+- **Scope:** (1) doctrine:encrypt:status: list encrypted properties and config per entity; show configured encryptor configs at end. (2) New command doctrine:encrypt:rotate-keys (optional backup, decrypt, change keys, re-encrypt; --backup, --no-interaction). (3) --force on generate-secret-key (overwrite without asking), decrypt:database and encrypt:database (skip confirmation). (4) Encrypt/decrypt database use raw SQL; batch_size config (default 5). (5) FrankenPHP docs (INSTALLATION, README, DEMO); tests and coverage ≥ 95%. (6) Docs: COMMANDS, KEY_ROTATION, SECURITY, INSTALLATION, ROADMAP, CHANGELOG, UPGRADING updated.
+- **Checklist:** CHANGELOG and UPGRADING updated; tag `v2.0.7` created and pushed.
 
 ---
 

docs/UPGRADING.md

@@ -29,14 +29,15 @@ This guide explains how to upgrade the Doctrine Encrypt Bundle between versions.
 
 ---
 
-## Upgrading to 2.0.7 (unreleased)
+## Upgrading to 2.0.7
 
 No breaking changes. New features:
 
 - **doctrine:encrypt:status** now lists each encrypted property and its config per entity, and shows configured encryptor configs at the end.
 - **doctrine:encrypt:rotate-keys** runs the full key rotation (optional backup, decrypt, change keys, re-encrypt) with step-by-step confirmation; use `--backup` and/or `--no-interaction` as needed.
 - **doctrine:encrypt:generate-secret-key** accepts **`--force`** to overwrite existing key files without asking.
 - **doctrine:decrypt:database** and **doctrine:encrypt:database** accept **`--force`** to skip the confirmation prompt.
+- **Config:** Optional `nowo_doctrine_encrypt.batch_size` (default `5`) for encrypt/decrypt database batch size. FrankenPHP is supported (see INSTALLATION.md); no config changes needed.
 
 Update as usual: