Pre-1.0.0-alpha10 hardening: pending-actions performance, security, robustness, docs and tests

Frank Mablyrequested to merge
issue/orchestra-3610407:3610407-pre-1.0.0-alpha10-hardening-pending-actions into 1.x

Pre-1.0.0-alpha10 hardening from a six-dimension audit (security, performance, code quality, docs, test coverage, release readiness) of the diff since alpha9.

  • Performance: memoize viewer tokens (AssignmentMatcher) and the task-type plugin (PendingActionsFinder); resolve the instances list in one token query (forInstances) instead of per row.
  • Security (defense-in-depth): escape the act_label template before FormattableMarkup; strip CR/LF from Easy Email subject tokens.
  • Robustness: graceful handling when an outcome set changes between render and submit (operation form, inbox task form, interaction operation controller); OperationGateway::stepUrl throws instead of a broken route.
  • Packaging: kessai in composer suggest; orchestra_payment experimental; normalize a test module core_version_requirement.
  • Docs + natural fr.po; new tests for OperationAccessCheck and the guarded-outcome bypass, and a discriminating no-retry assertion.

Deferred follow-ups: pending-actions pager/candidate index, explicit FatalException test, functional pull-operation UI test.

Issue: https://www.drupal.org/project/orchestra/issues/3610407

Merge request reports