We are pleased to announce the release of Yii Framework version 2.0.55.

Please refer to the instructions at https://www.yiiframework.com/download/ to install or upgrade to this version.

In this release:

• Security fix for CVE-2026-39850: internal variables in View::renderPhpFile() and ErrorHandler::renderFile() are now isolated to prevent parameter collisions from overriding included file paths.
• Continued PHPStan/Psalm and PHPDoc annotation improvements, including generics, conditional types, and more accurate return and parameter types.
• yii\grid\GridView's default filterSelector can now be overridden and may use Closures.
• Better compatibility with newer PHP versions, including PHP 8.6-related test adjustments.
• Removal of obsolete code paths for PHP versions older than the current Yii 2 minimum.
• Bug fixes.

The Yii 2 basic and advanced application templates received refreshed CI, Docker, static analysis, documentation, and project template updates. Note that the framework itself still supports PHP 7.4+, while the updated application templates target newer PHP versions.

Thanks to all Yii community members who contribute to the framework, translators who keep documentation translations up to date, and community members who answer questions at forums.

Special thanks goes to Maksim Spirkov who continued taking care of the majority of annotation-related changes.

There are many active Yii communities, so if you need help or want to share your experience, feel free to join them.

A complete list of changes can be found in the CHANGELOG.