Document sort input validation and recommend Sort::only()

[samdark]

Sort::any() accepts unconfigured field names, but the sorting guide could imply that its configuration limits the allowed fields. Recommend Sort::only() by default, show its use with user input, and explain that applications must validate untrusted field names when using Sort::any() to avoid SQL injection with database-backed readers.

Update the English and Portuguese guides, API comments, and changelog.

Q	A
Is bugfix?	❌
New feature?	❌
Breaks BC?	❌

Checked PHP syntax and git diff --check; all 22 SortTest tests pass (29 assertions).

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 940b53c7-7920-4e7a-8915-598796d43cd7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

Copilot review overview

🟢 Approval recommended

The documentation matches sorting behavior, and the paginator simplification preserves existing semantics.

Review effort: Balanced
Findings: None

What changed in this PR

Clarifies safe sorting practices by recommending Sort::only() for user input and explaining validation requirements for Sort::any().

Changes:

• Updates English and Portuguese guides with safe usage examples.
• Adds validation warnings to API comments and records the guidance in the changelog.
• Simplifies paginator initialization without changing behavior.

File	Description
src/​Reader/​Sort.php	Adds input-validation guidance to API comments.
src/​Paginator/​KeysetPaginator.php	Uses null-coalescing assignment for initialization.
README.md	Recommends safe sorting defaults and explains risks.
docs/​guide/​pt-BR/​README.md	Adds equivalent Portuguese guidance.
CHANGELOG.md	Records the documentation update.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.