diff --git a/CHANGELOG.md b/CHANGELOG.md
index c9a2b9b..bb25e80 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## 0.1.2 Under development
 
+- fix: remove `phpunit.xml` from `.gitignore` and update `composer-require-checker.json` structure.
+
 ## 0.1.1 May 06, 2026
 
 - fix: enable `[extend] useDefault = true` in `.github/linters/.gitleaks.toml` so consumers load gitleaks default rules instead of disabling the secret scan.
diff --git a/metadata/.gitignore b/metadata/.gitignore
index b38f935..2400549 100644
--- a/metadata/.gitignore
+++ b/metadata/.gitignore
@@ -39,7 +39,6 @@ package-lock.json
 # phpunit (if present)
 .phpunit.cache
 .phpunit.result.cache
-phpunit.xml
 
 # vagrant (if present)
 .vagrant
diff --git a/metadata/composer-require-checker.json b/metadata/composer-require-checker.json
index 66b091b..af5da6d 100644
--- a/metadata/composer-require-checker.json
+++ b/metadata/composer-require-checker.json
@@ -1,3 +1,16 @@
 {
-    "symbol-whitelist": []
+    "symbol-whitelist": [],
+    "php-core-extensions": [
+        "Core",
+        "date",
+        "json",
+        "hash",
+        "pcre",
+        "Phar",
+        "Reflection",
+        "SPL",
+        "random",
+        "standard"
+    ],
+    "scan-files": []
 }