[rennf93]

Summary

• Floors rise together: rennf93/guard-core-php ^4.3.0 and rennf93/psr15-guard ^1.3.0 (the safety-corpus train). Nothing in the Slim surface changes: SlimGuard composes the psr15-guard middleware, so the new engine surfaces ride config through the unchanged factory wiring.
• CI sibling version stamps move with the floors (engine 4.2.99 -> 4.3.99, psr15-guard 1.2.99 -> 1.3.99 in ci.yml, release.yml, static-analysis.yml, upstream-drift.yml, scheduled-lint.yml); composer.lock resolves both packages at their released v4.3.0 / v1.3.0.
• CHANGELOG: v1.3.0 section covering the floor raises plus the released-but-undocumented delta since v1.2.0: the Release Gate and lock fixes (PRs fix(ci): give the Release Gate the psr15-guard path sibling #18, ci: unred weekly scheduled lint #19), the process scaffold (PR chore(scaffold): community health files, phpstan static analysis, advanced app smoke #20: community health files, phpstan level 5 static analysis, live-smoke-advanced job, semgrep as the CodeQL substitute), and the 100% line coverage gate with the no-psr7 fallback suite (PR ci: enforce the 100% line coverage gate #21).

Verification

• Local gates on php 8.5.11: make lint exit 0, make test exit 0 (81/81 checks green), composer.lock resolves guard-core-php v4.3.0 and psr15-guard v1.3.0.

Test plan

• make lint exit 0
• make test exit 0
• CI green on the PR head

Labels: no-issue