Yii Framework Change Log ======================== Version 1.1.31 under development -------------------------------- - No changes yet Version 1.1.30 October 14, 2024 -------------------------------- - Bug #4547: PHP 8 compatibility: Fix deprecation in CCaptcha when using Imagick extension (apphp) - Bug #4541: PHP 8 compatibility: Fix deprecation in MarkdownParser (mdeweerd) - Bug #4544: PHP 8 compatibility: Fix deprecation in CLocale (apphp) - Bug #4566: PHP 8 compatibility: Fix passing null to string parameter parameter (apphp) - Bug #4563: CVE-2021-20086. Prevent prototype pollution in jquert-bbq (kevin-foster-uk) - Enh #4552: Added support for PHP 8.3 (sandippingle, ThePepster, marcovtwout) - Enh #4559: Added support for Redis ACL authentication with username for Redis 6+ (arfeen) - Enh #4568: Add missing hungarian translations (albertborsos) Version 1.1.29 November 14, 2023 -------------------------------- - Bug #4516: PHP 8 compatibility: Allow union types and intersection types in action declarations (wtommyw) - Bug #4523: Fixed translated in Greek class messages in framework requirements view, which they should not be translated (lourdas) - Bug #4534: PHP 8.2 compatibility: Fix deprecated dynamic properties in gii/components/Pear/Text/Diff (mdeweerd, marcovtwout) - Bug: CVE-2023-47130. Prevent RCE when deserializing untrusted user input (ma4ter222, marcovtwout) - Enh #4529: Exceptions thrown while loading fixture file rows now contain more details (eduardor2k) - Enh #4533: Various refactorings applied based on PHAN checks (marcovtwout) Version 1.1.28 February 28, 2023 -------------------------------- - Bug #4484: Set Last-Modified after sending cache control headers (jannis701, wtommyw) - Bug #4491: Fixed limit and Offset not working correctly with MSSQL version 11 (2012) and newer (shnoulle, wtommyw) - Bug #4497: PHP 8.1 compatibility: Fix unserialize null in CRedisCache (kenguest, wtommyw) - Bug #4499: PHP 8.1 compatibility: Fix deprecation warning in COciSchema (marcovtwout) - Bug #4500: PHP 8.1 compatibility: Fix deprecation warnings in CMysql classes (csears123) - Bug #4507: PHP 8.1 compatibility: Fix deprecation warning in CWebUser (marcovtwout, wtommyw) - Enh #4490: Added support for PostgreSQL 15 (sternix, marcovtwout) - Enh #4503: Update tests and code for PHP 8.1 compatibility, stop suppressing deprecation warnings in tests (wtommyw) - Enh #4505: Added support for PHP 8.2 (wtommyw) Version 1.1.27 November 21, 2022 -------------------------------- - Bug: PHP 8.1 compatibility: Fix CFileCache call of file_get_contents (Bregi) - Bug: CVE-2022-41922. Prevent RCE when deserializing untrusted user input (fi3wey, marcovtwout) Version 1.1.26 September 30, 2022 -------------------------------- - Bug #4453: Alpine Linux compatibility: Avoid using `GLOB_BRACE` in `CFileHelper::removeDirectory` (ivany4) - Enh #4386: Added support for PHP 8.1 (marcovtwout, JonathanArgentao, ivany4, csears123) - Enh #4386: Updated HTMLPurifier to version 4.15.0 for PHP 8.1 support (https://github.com/ezyang/htmlpurifier/blob/v4.15.0/NEWS) (marcovtwout) - Enh #4392: Added support for SSL to CRedisCache (andres101) Version 1.1.25 December 13, 2021 -------------------------------- - Bug #4226: Fix for Gii diff displaying "reset() expects parameter 1 to be array, integer given" (LeoZandvliet, marcovtwout) - Bug #4369: PHP 8.0 compatibility: Fix warning "Only the first byte will be assigned to the string offset" when generating code with Gii (marcovtwout) - Bug #4374: Fix for createUpdateCommand which did not accept just a table name when using MSSQL (c-schmitz) - Bug #4380: Prevent fatal errors while validating CSRF token of malformed requests (rob006) - Bug #4382: PHP 8.0 compatibility: Fix CFileLogRoute throwing TypeError when logfile cannot be opened (marcovtwout) Version 1.1.24 June 7, 2021 -------------------------------- - Bug #4339: "There is no active transaction" when transaction is autocommitted (twisted1919) - Bug #4343: Fix "driver does not support quoting" when using the driver pdo_odbc (xpohoc69) - Bug #4355: Fix errorhandler missing backtrace entries (georaldc, marcovtwout) - Enh #4349: Added CHtml option to omit type attribute from