feat: support MariaDB 10 and 11; default local to 11 LTS, matrix CI

[turegjorup]

Summary

Pins local dev to MariaDB 11.4 LTS (was the moving itkdev/mariadb:latest alias, whose underlying version was undeclared) and adds a 2-leg CI matrix so PHPUnit and the Doctrine schema-validate workflow each run on mariadb:10.11 LTS and mariadb:11.4 LTS.

Also fixes an existing inconsistency: .env claimed serverVersion=10.11.5-MariaDB while .env.test claimed the EOL mariadb-10.5.13. Both now interpolate ${MARIADB_VERSION} from a single source of truth in .env (default 11.4.4-MariaDB), and CI overrides per matrix leg.

Files Changed

• docker-compose.yml — image: ${MARIADB_IMAGE:-mariadb:11.4}. Drops the unused commented-out ENCRYPT=1 env (itkdev wrapper-only feature).
• .env — adds MARIADB_VERSION=11.4.4-MariaDB; DATABASE_URL interpolates it.
• .env.test — same interpolation; reuses MARIADB_VERSION from .env (or CI override).
• .github/workflows/phpunit.yaml — strategy.matrix over mariadb:10.11 + mariadb:11.4; fail-fast: false. Forwards MARIADB_VERSION into the phpfpm container via docker compose run -e MARIADB_VERSION.
• .github/workflows/doctrine.yaml — same matrix shape for the migrate-and-validate job.
• README.md — adds a ### Database (MariaDB) subsection under Development setup documenting the MARIADB_IMAGE / MARIADB_VERSION overrides with a copy-paste example for testing 10.11 locally.
• CHANGELOG.md — [Unreleased] entry.

Why upstream mariadb: and not itkdev/mariadb?

itkdev/mariadb on Docker Hub publishes only latest and 1.x.y wrapper tags (no major-version tags), so a clean matrix isn't expressible against it. The wrapper's only material extra is an opt-in ENCRYPT=1 that this repo's compose has commented out — MYSQL_* env vars and healthcheck.sh work the same on upstream.

Local verification (already run on 11.4)

Boot + migrate + full PHPUnit suite + schema-validate, all green against mariadb:11.4.10:

• 143 tests / 607 assertions pass
• 26 migrations apply cleanly
• doctrine:schema:validate reports schema in sync

10.11 leg verified by CI matrix once this PR runs.

Test Plan

• Local 10 LTS override:

  docker compose down -v
  MARIADB_IMAGE=mariadb:10.11 MARIADB_VERSION=10.11.13-MariaDB docker compose up -d mariadb
  docker compose exec mariadb mariadb --version    # expect 10.11.x
  MARIADB_VERSION=10.11.13-MariaDB docker compose run --rm phpfpm composer run test-setup
  MARIADB_VERSION=10.11.13-MariaDB docker compose run --rm phpfpm composer run test

• CI: confirm the Checks tab shows two PHP Unit tests jobs and two Validate Schema jobs (one per matrix leg), all green. With fail-fast: false, a 10-only or 11-only failure stays visible rather than being masked.

🤖 Generated with Claude Code