Minor version of Yii HTTP Middleware has been released.

This release adds RemoveBodyMiddleware, which removes the response body for specific HTTP status codes.

We've tagged Yii2 debug extension version 2.1.27. It fixes a bug of unnecessary usage of backticks in UserPanel resulting in inability to work with environments where shell_exec is not available. No security was affected.

It seems, we've also forgot to write about 2.1.26:

• Backtrace for internal PHP functions was added.
• Module::$toolbarPosition was added to configure toolbar position.
• yii\debug\Module::$authManager was added to select RBAC manager used by UserPanel (default is authManager).

We are very pleased to announce the release of Redis extension version 2.0.20.

This version removes logging of AUTH command parameters in non debug mode which may pose security issue. Also, it fixes one PHP 8.4 compatibility issue that was found since last release.

See the CHANGELOG for details.

First stable version of Yii HTTP Middleware was released.

The package provides a collection of PSR-15 middleware focused on HTTP features:

• ContentLengthMiddleware — manages the Content-Length header in the response;
• CorsAllowAllMiddleware — adds CORS headers allowing any request origins in later requests;
• ForceSecureConnectionMiddleware — redirects insecure requests from HTTP to HTTPS and adds headers necessary to enhance the security policy;
• HeadRequestMiddleware — removes body from response for HEAD request;

Version 3.1 of Yii Caching Library is released.

• Added interface SerializerInterface for data serialization, and PhpSerializer implementation.
• Made normalize() method static in CacheKeyNormalizer class.
• Changed PHP constraint in composer.json to 8.1 - 8.4.
• Raised the minimum PHP version to 8.1 and minor refactoring.

Version 1.4 of Yii Dependency Injection container is released.

• Added TagReference::id() method.
• Changed PHP constraint in composer.json to 8.1 - 8.4.
• Made BuildingException and NotFoundException friendly.
• Made $config parameter in Container constructor optional.

First release of Yii PSR Emitter package was done. It provides EmitterInterface that is responsible for sending PSR-7 HTTP responses as well as several implementations of the interface:

• SapiEmitter - sends a response using standard PHP Server API;
• FakeEmiiter - a fake emitter that does nothing, except for capturing response (useful for testing purposes).

Additionally, the package provides EmitterMiddleware PSR-15 middleware that can be used in an application to send a response by any EmitterInterface implementation.

General usage:

/** 
 * @var \Psr\Http\Message\ResponseInterface $response 
 */
$emitter = new \Yiisoft\PsrEmitter\SapiEmitter();
$emitter->emit($response);

Version 12.2 of Yii View package has been released. Here are the list of improvements and fixes included in the new version:

• allowed to pass Stringable objects to WebView::setTitle() method;
• allowed using multiple theme paths in yiisoft/view → theme → pathMap package parameter.

Minor version of Yii Runner RoadRunner package was released.

In this release:

• added temporal support;
• improved RoadRunnerGrpcApplicationRunner: added error handling, bootstrap loading, event checking, and DI container usage;
• raised required version of yiisoft/error-handler to ^4.0;
• changed PHP constraint in composer.json to 8.1 - 8.4;

Version 2.3 of Yii Validator package has been released.

The Uuid validation rule was added in this version.

We are pleased to announce the release of MongoDB extension version 3.0.3.

This version requires minimum of 1.20.1 version of MongoDB PHP Extension and fixes deprecation issue with UTCDateTime and BSON.

See the CHANGELOG for details.

Yii Error Handler package was updated with the following enhancements:

• Add Yiisoft\ErrorHandler\ThrowableResponseFactory that provides a response for Throwable object with renderer provider usage.
• Mark Yiisoft\ErrorHandler\Factory\ThrowableResponseFactory as deprecated.
• Set content type header in renderers.
• Fix dark mode argument display issues.

First stable release of yiisoft/bootstrap5 package was tagged. The package presents Bootstrap 5 UI framework in terms of Yii widgets allowing easy usage in PHP templates, theming and more.

<?php
use Yiisoft\Bootstrap5\Carousel;
use Yiisoft\Bootstrap5\CarouselItem;
use Yiisoft\Html\Tag\Div;
use Yiisoft\Html\Tag\H2;
use Yiisoft\Html\Tag\P;
?>

<?= Carousel::widget()
    ->id('carouselExampleOnlyText')
    ->items(
        CarouselItem::to(
            Div::tag()
                ->addClass('bg-primary text-white p-5 text-center')
                ->addContent(
                    H2::tag()->content('Title 1'),
                    P::tag()->content('This is the first slide with text.'),
                ),
        ),
        CarouselItem::to(
            Div::tag()
                ->addClass('bg-success text-white p-5 text-center')
                ->addContent(
                    H2::tag()->content('Title 2'),
                    P::tag()->content('This is the second slide with text.'),
                ),
        ),
        CarouselItem::to(
            Div::tag()
                ->addClass('bg-danger text-white p-5 text-center')
                ->addContent(
                    H2::tag()->content('Title 3'),
                    P::tag()->content('This is the third slide with text.'),
                ),
        ),
    );

Check more examples in the package user guide.

We are very pleased to announce that Yii Framework version 1.1.31 is released. You can download it at yiiframework.com/download/.

Yii 1.1.31 fixes some minor issues and includes a security improvement. See the security advisory for more information.

This release is a release of Yii 1.1, which has reached maintenance mode and will only receive security and compatibility fixes. For the complete list of changes in this release, please see the change log. For upgrading, always make sure to read the upgrade instructions.

We would like to express our gratitude to all contributors who have spent their precious time helping improve Yii and made this release possible.

We have fixed a security issue in 2.0.50 but there were additional issues so complete fix was done in 2.0.52. We have not properly assigned a new CVE for it and considered additional fix as:

Bug #20232: Fix regression introduced in GHSA-cjcc-p67m-7qxm while attaching behavior defined by __class array key (erickskrauch)

That was not correct and now there is a separate advisory: CVE-2024-58136.

Thanks goes to Nicolas Bourras & Thomas Reynolds from Orange Cyberdefense.

Version 2.1 of Yii RBAC package is released.

• Added optional $clock parameter to Manager constructor to get current time.
• Changed PHP constraint in composer.json to 8.1 - 8.4.
• Fixed bug when default roles were not checked in Manager::userHasPermission().

Version 3.10 of Yii HTML package is released. Here are the list of improvements and fixes included in the new version:

• made $content parameter optional in Button factories;
• allowed to pass null to Select::value() method;
• render loading attribute before src;
• changed PHP constraint in composer.json to 8.1 - 8.4;

Version 1.4 of Yii Form package is released.

• Change PHP constraint in composer.json to 8.1 - 8.4.
• Improve "Bootstrap 5 Horizontal" theme for checkbox.
• In PartsFeild class change $beforeInput and $afterInput properties' scope to protected.
• Suppress all extra HTML for "Hidden" field.

Version 12.1 of Yii View package has been released. Here are the list of improvements and fixes included in the new version:

• changed PHP constraint in composer.json to 8.1 - 8.4;
• allowed using ../ in the name of the view to refer to parent directory of the directory containing the view currently being rendered;
• explicitly marked nullable parameters;
• fixed exception message when relative path is used without currently rendered view.

Version 1.6 of Yii Hydrator package has been released. Here are the list of improvements included in the new version:

• added nested mapping support via new ObjectMap class;
• changed PHP constraint in composer.json to 8.1 - 8.4;
• improved psalm annotation in HydratorInterface::create() method.