From ea1c288e8d92e472d9f5da1965f6553d52139dc4 Mon Sep 17 00:00:00 2001
From: Joe Huss <detain@interserver.net>
Date: Sun, 28 Jun 2026 13:14:23 -0400
Subject: [PATCH] chore(release): cut v0.11.0

Bump Version::VERSION to 0.11.0 and promote the [Unreleased] CHANGELOG
section to [0.11.0] - 2026-06-28, rolling up the four changes merged
since v0.10.1:

- #14 S1: harden RelayHttpRequest with path/method gate + forbidden-header
  helpers (isForbiddenHeader/withoutForbiddenHeaders/assertSafe)
- #15 JwtClaims: strict-aud variant (fromPayloadStrict) + verification/
  round-trip docs (S4+B4)
- #16 refactor(arr): extract AbstractArrClient to dedup the four *arr
  clients (F2a)
- #17 feat(arr): inject async HTTP transport via ArrTransportInterface
  (F2b/B1/P1)

composer.json carries no hardcoded version field (tags drive version),
so it is left unchanged. The git tag is applied by the coordinator
after merge.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 CHANGELOG.md    | 2 +-
 src/Version.php | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0eb37d6..263c8f6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,7 @@ All notable changes to `detain/phlix-shared` are documented here.
 
 This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [0.11.0] - 2026-06-28
 
 ### Added
 - **`Relay\RelayHttpRequest` security gate** (findings S1/F1) — the untrusted,
diff --git a/src/Version.php b/src/Version.php
index 7193d1a..1ef2183 100644
--- a/src/Version.php
+++ b/src/Version.php
@@ -24,7 +24,7 @@ final class Version
      *
      * @var non-empty-string
      */
-    public const VERSION = '0.10.1';
+    public const VERSION = '0.11.0';
 
     /**
      * Prevent instantiation — static marker only.