Enable default throttle auto-registration and polish docs/workflows/security defaults

Author: KolesnikovKirill

.env.example

@@ -15,6 +15,6 @@ SECURITY_CSRF_VERIFY_JSON=false
 SECURITY_CSRF_INPUT_KEY=_token
 
 SECURITY_THROTTLE_ENABLED=true
-SECURITY_THROTTLE_ADD_TO_KERNEL=false
+SECURITY_THROTTLE_ADD_TO_KERNEL=true
 SECURITY_THROTTLE_MAX_ATTEMPTS=60
 SECURITY_THROTTLE_DECAY_SECONDS=60

.github/workflows/release.yml

@@ -41,7 +41,7 @@ jobs:
                   awk "/^## \\[$VERSION\\]/ {flag=1; next} /^## \\[/ {flag=0} flag {print}" CHANGELOG.md > RELEASE_NOTES.md
 
                   if [ ! -s RELEASE_NOTES.md ]; then
-                    echo "⚠️ No changelog entry found, using default message"
+                    echo "No changelog entry found, using default message"
                     echo "Release $RAW_VERSION" > RELEASE_NOTES.md
                   fi
 

CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to this project will be documented in this file.
 
+## [1.3.0] - 2026-01-03
+
+### Changed
+
+-   Enabled throttle middleware auto-registration by default and synced `.env.example` default.
+-   Bumped `codemonster-ru/security` to `v1.1.0`.
+
 ## [1.2.0] - 2025-12-17
 
 ### Added
@@ -39,7 +46,7 @@ All notable changes to this project will be documented in this file.
 
 ### Initial Release
 
--   Introduced the **Annabel Skeleton** — starter project for the [Annabel PHP framework](https://github.com/codemonster-ru/annabel)
+-   Introduced the **Annabel Skeleton** - starter project for the [Annabel PHP framework](https://github.com/codemonster-ru/annabel)
 -   Included minimal but complete structure:
     -   `app/Controllers/HomeController.php`
     -   `bootstrap/app.php`, `public/index.php`

README.md

@@ -4,8 +4,8 @@
 [![Total Downloads](https://img.shields.io/packagist/dt/codemonster-ru/annabel-skeleton.svg?style=flat-square)](https://packagist.org/packages/codemonster-ru/annabel-skeleton)
 [![License](https://img.shields.io/packagist/l/codemonster-ru/annabel-skeleton.svg?style=flat-square)](https://packagist.org/packages/codemonster-ru/annabel-skeleton)
 
-Starter project for the **[Annabel PHP Framework](https://github.com/codemonster-ru/annabel)** —  
-a clean and modern foundation for building full-stack web applications.
+Starter project for the **[Annabel PHP Framework](https://github.com/codemonster-ru/annabel)**.
+A clean and modern foundation for building full-stack web applications.
 
 ## Quick Start
 
@@ -17,8 +17,27 @@ cd myapp
 composer start
 ```
 
-Then open [http://localhost:8000](http://localhost:8000) —  
-you’ll see your first page rendered by **Annabel**
+Open [http://localhost:8000](http://localhost:8000) to see your first page rendered by **Annabel**.
+
+## Security Defaults
+
+The `codemonster-ru/security` package is enabled by default.
+
+-   CSRF and throttling are auto-registered in the kernel.
+-   Use `.env` to disable or tune `SECURITY_*` settings.
+
+Default `SECURITY_*` values:
+
+```dotenv
+SECURITY_CSRF_ENABLED=true
+SECURITY_CSRF_ADD_TO_KERNEL=true
+SECURITY_CSRF_VERIFY_JSON=false
+SECURITY_CSRF_INPUT_KEY=_token
+SECURITY_THROTTLE_ENABLED=true
+SECURITY_THROTTLE_ADD_TO_KERNEL=true
+SECURITY_THROTTLE_MAX_ATTEMPTS=60
+SECURITY_THROTTLE_DECAY_SECONDS=60
+```
 
 ## Requirements
 

composer.json

@@ -14,15 +14,15 @@
     "authors": [
         {
             "name": "Kirill Kolesnikov",
-            "email": "admin@codemonster.ru",
+            "email": "admin@codemonster.net",
             "homepage": "https://github.com/KolesnikovKirill",
             "role": "Lead Developer"
         }
     ],
     "require": {
         "php": ">=8.2",
-        "codemonster-ru/annabel": "^1.12",
-        "codemonster-ru/security": "^1.0"
+        "codemonster-ru/annabel": "^1.14",
+        "codemonster-ru/security": "^1.1"
     },
     "autoload": {
         "psr-4": {