config_guardian 1.1.0

Fidelity and safety release. Every preview, risk score, import, export and rollback is now computed from one change set, built the way Drupal core builds an import, and imports and rollbacks are applied by core's configuration importer: what Config Guardian shows is what happens.

1.0.5 could lose configuration or break a site in some cases: a rollback restored fields without their database tables, the Import Configuration form skipped core's validation and the configuration transformations, and a full rollback removed core.extension.yml from the sync directory. Upgrading is strongly recommended.

Upgrading

• Requires PHP 8.3, as Drupal 11 does, and Drupal ^11.1 || ^12.
• composer require drupal/config_guardian:^1.1, then run drush updatedb and drush cr before using the module. The update signs the snapshots taken before 1.1.0; a snapshot whose data no longer matches its hash is flagged as corrupt.

Highlights

• Rollbacks run through core's configuration importer: configuration events, import validators and Config Readonly apply, and fields come back with their tables. The preview lists exactly what the rollback does; configuration created after the snapshot is kept unless you choose to delete it.
• Snapshots capture every collection, translations included. They are signed, can be pinned, and have a retention policy per type.
• The Import and Export forms follow core's pipeline and honor Config Split, Config Ignore and $settings['config_exclude_modules'], as Drush does.
• Risk model 2: an explainable score per change, with core's refusals as blockers. Set risk_model to 1 to keep the 1.0.x score for one minor release.
• An activity log of every action.
• Drush 13 and 14. Tested on Drupal 11.1 to 11.4 and on the development versions of 11.5 and 12, with MySQL, PostgreSQL and SQLite.

Changes to review after updating

• view config snapshots and export config snapshots are now restricted permissions: check which roles hold them.
• Restoring a snapshot needs restore config snapshots; the Import Snapshot form only stores uploaded files.
• Risk scores and levels change.
• Changing the site's hash salt invalidates the signature of every snapshot.

Every change, with the details: CHANGELOG.md.