Minor version of Yii Runner RoadRunner package was released.

In this release:

• added temporal support;
• improved RoadRunnerGrpcApplicationRunner: added error handling, bootstrap loading, event checking, and DI container usage;
• raised required version of yiisoft/error-handler to ^4.0;
• changed PHP constraint in composer.json to 8.1 - 8.4;

Version 2.3 of Yii Validator package has been released.

The Uuid validation rule was added in this version.

We are pleased to announce the release of MongoDB extension version 3.0.3.

This version requires minimum of 1.20.1 version of MongoDB PHP Extension and fixes deprecation issue with UTCDateTime and BSON.

See the CHANGELOG for details.

Yii Error Handler package was updated with the following enhancements:

• Add Yiisoft\ErrorHandler\ThrowableResponseFactory that provides a response for Throwable object with renderer provider usage.
• Mark Yiisoft\ErrorHandler\Factory\ThrowableResponseFactory as deprecated.
• Set content type header in renderers.
• Fix dark mode argument display issues.

First stable release of yiisoft/bootstrap5 package was tagged. The package presents Bootstrap 5 UI framework in terms of Yii widgets allowing easy usage in PHP templates, theming and more.

<?php
use Yiisoft\Bootstrap5\Carousel;
use Yiisoft\Bootstrap5\CarouselItem;
use Yiisoft\Html\Tag\Div;
use Yiisoft\Html\Tag\H2;
use Yiisoft\Html\Tag\P;
?>

<?= Carousel::widget()
    ->id('carouselExampleOnlyText')
    ->items(
        CarouselItem::to(
            Div::tag()
                ->addClass('bg-primary text-white p-5 text-center')
                ->addContent(
                    H2::tag()->content('Title 1'),
                    P::tag()->content('This is the first slide with text.'),
                ),
        ),
        CarouselItem::to(
            Div::tag()
                ->addClass('bg-success text-white p-5 text-center')
                ->addContent(
                    H2::tag()->content('Title 2'),
                    P::tag()->content('This is the second slide with text.'),
                ),
        ),
        CarouselItem::to(
            Div::tag()
                ->addClass('bg-danger text-white p-5 text-center')
                ->addContent(
                    H2::tag()->content('Title 3'),
                    P::tag()->content('This is the third slide with text.'),
                ),
        ),
    );

Check more examples in the package user guide.

We are very pleased to announce that Yii Framework version 1.1.31 is released. You can download it at yiiframework.com/download/.

Yii 1.1.31 fixes some minor issues and includes a security improvement. See the security advisory for more information.

This release is a release of Yii 1.1, which has reached maintenance mode and will only receive security and compatibility fixes. For the complete list of changes in this release, please see the change log. For upgrading, always make sure to read the upgrade instructions.

We would like to express our gratitude to all contributors who have spent their precious time helping improve Yii and made this release possible.

We have fixed a security issue in 2.0.50 but there were additional issues so complete fix was done in 2.0.52. We have not properly assigned a new CVE for it and considered additional fix as:

Bug #20232: Fix regression introduced in GHSA-cjcc-p67m-7qxm while attaching behavior defined by __class array key (erickskrauch)

That was not correct and now there is a separate advisory: CVE-2024-58136.

Thanks goes to Nicolas Bourras & Thomas Reynolds from Orange Cyberdefense.

Version 2.1 of Yii RBAC package is released.

• Added optional $clock parameter to Manager constructor to get current time.
• Changed PHP constraint in composer.json to 8.1 - 8.4.
• Fixed bug when default roles were not checked in Manager::userHasPermission().

Version 3.10 of Yii HTML package is released. Here are the list of improvements and fixes included in the new version:

• made $content parameter optional in Button factories;
• allowed to pass null to Select::value() method;
• render loading attribute before src;
• changed PHP constraint in composer.json to 8.1 - 8.4;

Version 1.4 of Yii Form package is released.

• Change PHP constraint in composer.json to 8.1 - 8.4.
• Improve "Bootstrap 5 Horizontal" theme for checkbox.
• In PartsFeild class change $beforeInput and $afterInput properties' scope to protected.
• Suppress all extra HTML for "Hidden" field.

Version 12.1 of Yii View package has been released. Here are the list of improvements and fixes included in the new version:

• changed PHP constraint in composer.json to 8.1 - 8.4;
• allowed using ../ in the name of the view to refer to parent directory of the directory containing the view currently being rendered;
• explicitly marked nullable parameters;
• fixed exception message when relative path is used without currently rendered view.

Version 1.6 of Yii Hydrator package has been released. Here are the list of improvements included in the new version:

• added nested mapping support via new ObjectMap class;
• changed PHP constraint in composer.json to 8.1 - 8.4;
• improved psalm annotation in HydratorInterface::create() method.

Version 5.1 of Yii Assets package was released. There a few changes:

• improve static analyze annotations;
• Change PHP constraint in composer.json to ~8.1.0 || ~8.2.0 || ~8.3.0 || ~8.4.0;
• remove unnecessary array_filter call in AssetUtil::extractFilePathsForExport() method;
• fix the nullable parameter declarations for compatibility with PHP 8.4.

Version 3.0 of Yii Session package was released. There a few changes and fixes:

• remove sid_length and sid_bits_per_character options;
• mark SessionException as final;
• change PHP constraint in composer.json to 8.0 - 8.4;
• explicitly mark nullable parameters.

Minor version of Yii Definitions package was released.

• Change PHP constraint in composer.json to ~8.1.0 || ~8.2.0 || ~8.3.0 || ~8.4.0
• Bump minimal required PHP version to 8.1
• Improve definition validation for readonly properties and properties with asymmetric visibility
• Minor performance optimization: use FQN for PHP functions, remove unnecessary conditions

Version 1.1 of Yii Security package was released. There are some improvements and changes:

• Bump minimal required PHP version to 8.1
• Change PHP constraint in composer.json to 8.1 - 8.4
• Use SensitiveParameter attribute to mark sensitive parameters
• Mark readonly properties

Major versions of Yii Router and Yii Routere FastRoute Adapter adapter package were released.

Yii Router

• Change UrlGeneratorInterface contract: on URL generation all unused arguments must be moved to query parameters, if query parameter with such name doesn't exist
• Add debug collector for yiisoft/yii-debug
• Add $hash parameter to UrlGeneratorInterface methods: generate(), generateAbsolute() and generateFromCurrent()
• Replace two RouteCollectorInterface methods addRoute() and addGroup() to single addRoute()

Version 2.3 of Yii User package was released. There are some improvements and changes:

• Add ApiAuth authentication method
• Rename UserAuth to WebAuth, mark UserAuth as deprecated
• Change PHP constraint in composer.json to ~8.1.0 || ~8.2.0 || ~8.3.0 || ~8.4.0
• Improve debug message "Unable to authenticate user…" in LogginMiddleware

Minor version of Yii HTTP Runner were tagged. In this version made several changes.

• Add $temporaryErrorHandler parameter to HttpApplicationRunner constructor. Mark parameter $logger and method withTemporaryErrorHandler() as deprecated.
• Change PHP constraint in composer.json to ~8.1.0 || ~8.2.0 || ~8.3.0 || ~8.4.0.
• Raise the minimum PHP version to 8.1 and minor refactoring.
• Explicitly mark nullable parameters.

Version 2.2 of Yii Validator package has been released. Here is the list of changes included in the new version:

• Add stopOnError parameter to Each rule
• Change PHP constraint in composer.json to ~8.1.0 || ~8.2.0 || ~8.3.0 || ~8.4.0
• Bump yiisoft/strings version to ^2.6
• Minor refactoring with PHP 8.1 features usage