Another Yii3 family package was released. This time it is profiler. The package provides an ability to record performance profiles:

$profiler->begin('test');
//...some code
    $profiler->begin('test');
    //...some code
    $profiler->end('test');
//...some code
$profiler->end('test');

$messages = $profiler->getMessages(); 
print_r($messages);

A minor version of Html package was tagged. In this version there are two additions:

1. \Stringable is now supported as content for tags.
2. Script::getContent() and Style::getContent() were added.

A minor version of Html package was tagged. In this version there are two additions:

1. Br tag.
2. Table markup related tags.

An update was made to yiisoft/var-dumper package.

Starting with this version it can export closures and objects with closures.

First stable version of Html package was tagged. The package could be used both along with Yii 3 or separately.

It is a handy library to generate HTML dynamically:

<?= Html::p()->class('float-right')->content(
    'Powered by ',
    Html::a(
        'Yii Framework',
        'https://www.yiiframework.com/',
        ['rel' => 'external']
    )
) ?>

Test support package version 1.3.0 was released.

New version adds implementation of PSR logger that accumulates all the logged messages and can return these as array:

$logger = new Yiisoft\Test\Support\Log\SimpleLogger();

$logger->emergency('Emergency message', ['key' => 'value']);
$logger->alert('Alert message', ['key' => 'value']);
$logger->critical('Critical message', ['key' => 'value']);
$logger->error('Error message', ['key' => 'value']);
$logger->warning('Warning message', ['key' => 'value']);
$logger->notice('Notice message', ['key' => 'value']);
$logger->info('Info message', ['key' => 'value']);
$logger->debug('Debug message', ['key' => 'value']);

$messages = $logger->getMessages();

Test support package version 1.2.1 was released.

New version makes it compatible with PSR-11 Container v1.1 and v2.0.

• psr/container 1.1 adds argument type hints.
• psr/container 2.0 adds return type hints (but only to the has() method).

The change is fully backwards compatible so update should not break anything.

Injector package version 1.0.4 was released.

New version makes it compatible with PSR-11 Container v1.1 and v2.0.

• psr/container 1.1 adds argument type hints.
• psr/container 2.0 adds return type hints (but only to the has() method).

The change is fully backwards compatible so update should not break anything.

First version of network utilities package was tagged.

It has two helper classes, IpHelper to work with IPs and network masks, and DnsHelper to check DNS records.

The package does not depend on Yii and can be used by requiring it via Composer:

composer require yiisoft/network-utilities

Code is well-covered with tests, types and has 100% mutation score.

We are very pleased to announce the release of Yii Framework version 2.0.41. Please refer to the instructions at https://www.yiiframework.com/download/ to install or upgrade to this version.

Notable changes in this release:

• Hardened security by invalidating all active sessions and "remember me" cookies on authKey change. Note that it requires properly implemented getAuthKey() and validateAuthKey() methods of yii\web\IdentityInterface. Check upgrade guide for details.
• Ability to create URLs for non-GET-verb rules.
• Faster request parsing for REST UrlRule with prefix handling.

Thanks to all Yii community members who contribute to the framework, translators who keep documentation translations up to date and community members who answer questions at forums.

There are many active Yii communities so if you need help or want to share your experience, feel free to join them.

A complete list of changes can be found in the CHANGELOG.

First release of CSRF package was tagged. The package provides PSR-15 middleware for CSRF protection:

• It supports two algorithms out of the box:
  • Synchronizer CSRF token with customizable token generation and storage. By default, it uses random data and session.
  • HMAC based token with customizable identity generation. Uses session by default.
• It has ability to apply masking to CSRF token string to make BREACH attack impossible.

Extensive documentation is available.

Two minor versions of test support package were tagged. Both are about event dispatcher:

• 1.1.0 adds SimpleEventDispatcher::clearEvents() that clear all events in event dispatcher.
• 1.2.0 adds SimpleEventDispatcher::getEventClasses() that return classes of dispatched events.

First version of event dispatcher package was tagged. The dispatcher provides an ability to dispatch events and listen to events dispatched. It is:

• PSR-14 compatible.
• Simple and lightweight.
• Encourages designing event hierarchy.
• Can combine multiple event listener providers.

Usage description and examples are available in the package readme.

First verisons of yiisoft/log and some of the drivers called "targets" were released.

Log is PSR-3 compatible so using it in your apps is easy:

final class MyClass
{
    private \Psr\Log\LoggerInterface $logger;
    
    public function __construct(\Psr\Log\LoggerInterface $logger)
    {
    	$this->logger = $logger;
    }
    
    public function doIt(): void
    {
    	$this->logger->info('Doing it!');
        
        // ...
    }
}

First version of yiisoft/auth-jwt package was released. The package provides JWT authentication method for Yii Auth.

Configuration instructions are provided in the readme of the package.

First stable version of yiisoft/var-dumper package was released.

It enhances functionality of var_dump() and var_export() by dealing with recursive references, syntax highlighting and closures export.

It also provides convenient d() and dd() functions that may be used for quick dump-and-die style debugging.

More details are available in the package readme.

First versions of yiisoft/files package was released. The package provides useful methods to manage files and directories.

More details could be found in package readme.

A major version of strings package was released. The changes are about \Yiisoft\Strings\WildcardPattern. ** was introduced and the class was overall simplified.

It is not backwards compatible with 1.x.x versions so check upgrade guide if you decide to upgrade.

More details could be found in the package CHANGELOG.

First version of request body parser package was released. The package is a PSR-15 middleware that allows parsing PSR-7 server request body selecting the parser according to the server request mime type.

Out of the box it parses application/json requests where JSON is in the body. More parsers for mime types could be added by implementing a very simple ParserInterface.

Check README for details.

First versions of cache package and its drivers were released.

Main library is to be used as a wrapper around PSR-16 compatible caching libraries. We call these drivers. It adds an ability to set default TTL and key prefix per cache instance, provides a built-in behavior to cache stampede prevention, and adds cache invalidation dependencies on top of PSR-16. Check the details in README.

The following drivers were released along with main package: