CakePHP: The Rapid Development Framework for PHP - Official Repository
The CakePHP core team is happy to announce the immediate availability of CakePHP 4.4.10. This release contain a security fix for the limit()
and offset()
methods of Cake\Database\Query
. If passed unfiltered request data, these methods would allow for SQL injection. If your application does not use CakePHP's Pagination wrappers and directly passes request data into one of these methods your application is vulnerable. We'd like to thank 'Tanaka' for reporting this issue.
The 4.4.10 release contains the aforementioned security fix as well as the following fixes. See the changelog for every commit.
Thank you to all the contributors that helped make this release happen:
As always, we would like to thank all the contributors that opened issues, created pull requests or updated the documentation.
As previously communicated the time has come for CakePHP 3.x support to end. It has been 36 months since the release of 4.0.0 on Dec 15 2019, and going forward the core team will not be maintaining the 3.x branch.
Going forward the CakePHP team will continue to support 4.x and develop 5.x. Once 5.0.0 is released, 4.x will receive bugfixes for 24 months, and security fixes for 36 months.
The 3.10.5 release contains a single bugfix:
IntegrationTestTrait
providing null
as the request body.As always, we would like to thank all the contributors that opened issues, created pull requests or updated the documentation.
The CakePHP core team is happy to announce the immediate availability of CakePHP 4.4.9. This is a maintenance release for the 4.4 branch that fixes several community reported issues.
You can expect the following changes in 4.4.9. See the changelog for every commit.
cake routes
.ShadowTranslate
strategy for TranslateBehavior
handle missing association records with translations consistently with EavStrategy
.Thank you to all the contributors that helped make this release happen:
As always, we would like to thank all the contributors that opened issues, created pull requests or updated the documentation.
The CakePHP core team is proud to announce the first beta release of CakePHP 5.0.0. This initial release contains most of the new features and breaking changes that 5.0 will contain. This release contains a minimal working application skeleton. It also features a new version of Chronos with several breaking changes. A focus of 5.0 has been to remove deprecated features and improve the adoption of native type-declarations where possible.
Our focus in the near future is to finish updating all of the CakePHP maintained plugins to be compatible with 5.0. We'll also be putting more work into backporting deprecations into the next 4.x release (4.5.0) so that upgrading can be done incrementally before 5.x is released.
Finally, the scope for 5.x isn't locked down so if you'd like to see a feature or breaking change made please open an issue.
The migration guide has a complete list of what's new in 5.0.0. We recommend you give that page a read when upgrading as it notes the various breaking changes present in 5.0.
You can help deliver 5.0 by contributing in one of many ways:
Thank you to all the contributors that have helped since the alpha1 release:
As always, a huge thanks to all the community members that helped make this release happen by reporting issues and sending pull requests.
The CakePHP core team is happy to announce the immediate availability of CakePHP 4.4.8. This is a maintenance release for the 4.4 branch that fixes several community reported issues.
You can expect the following changes in 4.4.8. See the changelog for every commit.
ServerRequest::scheme()
and Uri::getScheme()
on how they handle proxy headers.PaginatorInterface
alias.getAlias()
is called on it.assertMailSentWith
comparisons with array values.sortDefault
and directionDefault
not working with multiple pagination.Thank you to all the contributors that helped make this release happen:
As always, we would like to thank all the contributors that opened issues, created pull requests or updated the documentation.
The CakePHP core team is happy to announce the immediate availability of CakePHP 4.4.7. This is a maintenance release for the 4.4 branch that fixes several community reported issues.
You can expect the following changes in 4.4.7. See the changelog for every commit.
__debugInfo()
methods.cakephp/database
.FormHelper::radio()
and FormHelper::multiCheckbox()
.Thank you to all the contributors that helped make this release happen:
As always, we would like to thank all the contributors that opened issues, created pull requests or updated the documentation.
The CakePHP core team is happy to announce the immediate availability of CakePHP 4.4.6. This is a maintenance release for the 4.4 branch that fixes several community reported issues.
You can expect the following changes in 4.4.6. See the changelog for every commit.
ConsoleInputArgument
instances no longer consider each other equal based on their option values only.FormData
now accepts UploadedFileInterface
as a file.Thank you to all the contributors that helped make this release happen:
As always, we would like to thank all the contributors that opened issues, created pull requests or updated the documentation.
The CakePHP core team is happy to announce the immediate availability of CakePHP 4.4.5. This is a maintenance release for the 4.4 branch that fixes several community reported issues.
You can expect the following changes in 4.4.5. See the changelog for every commit.
diffForHumans()
not translating text based on the current locale.ValidatableInterface
is now deprecated.mockService()
for services that are provided by reflection based container delegates.Thank you to all the contributors that helped make this release happen:
As always, we would like to thank all the contributors that opened issues, created pull requests or updated the documentation.
The CakePHP core team is happy to announce the immediate availability of CakePHP 4.4.4. This is a maintenance release for the 4.4 branch that fixes several community reported issues.
You can expect the following changes in 4.4.4. See the changelog for every commit.
0
being cast to an int.Thank you to all the contributors that helped make this release happen:
As always, we would like to thank all the contributors that opened issues, created pull requests or updated the documentation.
The CakePHP core team is happy to announce the immediate availability of CakePHP 4.4.3. This is a maintenance release for the 4.4 branch that fixes several community reported issues.
You can expect the following changes in 4.4.3. See the changelog for every commit.
TableLocator::get()
no longer throws an error if a table is configured with options and then mocked.Folder::create()
where umask
was not correctly set.FileEngine
are now URL encoded. This aligns the characters valid in cache keys with other engines. It could cause cache misses for applications that were previously using characters outside of the alpha-numeric ranges.ResultSet
indexes being mutated by exceptions thrown within a loop while xdebug is enabled.TableLocator
now handles getting tables by namespaced class name better.Database\Query
were deprecated.Thank you to all the contributors that helped make this release happen:
As always, we would like to thank all the contributors that opened issues, created pull requests or updated the documentation.