Release v1.7.6: composer audit CI

Author: HecFranco

.github/workflows/ci.yml

@@ -85,6 +85,9 @@ jobs:
             --no-interaction --no-update
           composer update symfony/* --with-all-dependencies --no-interaction --prefer-dist --no-progress
 
+      - name: Composer audit (Critical/High)
+        run: composer audit --locked
+
       - name: Run tests
         env:
           SYMFONY_DEPRECATIONS_HELPER: max[direct]=0

docs/CHANGELOG.md

@@ -7,6 +7,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 ## Table of contents
 
 - [[Unreleased]](#unreleased)
+- [[1.7.6] - 2026-08-20](#176-2026-08-20)
 - [[1.7.5] - 2026-08-19](#175-2026-08-19)
 - [[1.7.4] - 2026-08-18](#174-2026-08-18)
 - [[1.7.3] - 2026-08-16](#173-2026-08-16)
@@ -95,6 +96,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [1.7.6] - 2026-08-20
+
+### Security
+
+- **CI:** run `composer audit --locked` after dependency install (REQ-SEC / P3).
+
 ## [1.7.5] - 2026-08-19
 
 Improve test coverage for trace, fatal, and console code paths (REQ-TEST-003).

docs/UPGRADING.md

@@ -47,6 +47,7 @@
 - [Upgrading from 1.6.8 to 1.6.9](#upgrading-from-168-to-169)
 - [Upgrading from 1.6.9 to 1.6.10](#upgrading-from-169-to-1610)
 - [Upgrading from 1.6.10 to 1.6.11](#upgrading-from-1610-to-1611)
+- [Upgrading from 1.7.5 to 1.7.6](#upgrading-from-175-to-176)
 - [Upgrading from 1.7.4 to 1.7.5](#upgrading-from-174-to-175)
 - [Upgrading from 1.7.3 to 1.7.4](#upgrading-from-173-to-174)
 - [Upgrading from 1.7.2 to 1.7.3](#upgrading-from-172-to-173)
@@ -392,6 +393,14 @@ Maintainer / CI / demo tooling only. **No consumer API or config changes.**
 - `composer.lock` again pins `require-dev` Symfony packages (including `symfony/scheduler`) to **7.4** so PHP 8.2 CI `composer install` succeeds. Run `make composer-sync` after adding Symfony `require-dev` packages.
 - Demo smoke / `make up` installs Composer deps before starting the FrankenPHP worker (needed for clean GitHub Actions checkouts).
 
+## Upgrading from 1.7.5 to 1.7.6
+
+No application upgrade steps.
+
+```bash
+composer update nowo-tech/beacon-bundle
+```
+
 ## Upgrading from 1.7.4 to 1.7.5
 
 Patch release with test-only changes. **No application upgrade steps.**