Add #[Locked] attributes to prevent client-side property tampering (#549

)

This hardens the Modal component against Livewire hydration attacks
(CVE-2025-54068). While the vulnerability was fixed in Livewire 3.6.4,
adding #[Locked] to $activeComponent and $components provides
defense-in-depth by preventing any client-side manipulation of these
properties via the updates mechanism.

The test was updated to use proper server-side methods instead of
directly setting properties, which is exactly what #[Locked] prevents.

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Add #[Locked] attributes to prevent client-side property tampering (#549

)

This hardens the Modal component against Livewire hydration attacks
(CVE-2025-54068). While the vulnerability was fixed in Livewire 3.6.4,
adding #[Locked] to $activeComponent and $components provides
defense-in-depth by preventing any client-side manipulation of these
properties via the updates mechanism.

The test was updated to use proper server-side methods instead of
directly setting properties, which is exactly what #[Locked] prevents.

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Add Livewire v4 compatibility (#544)

Fix overlay in Tailwind v4 (#523)

Tailwind v4

Tailwind v4

Bump 2.0.13

Update modal.blade.php

Bump 2.0.11

fix missing ")" on query selector (#432)