CHANGELOG-5.0.md
Phalcon\Contracts\Support\Collection to declare the expanded method surface (column, each, filter, first, getType, isEmpty, keys, last, map, reduce, replace, sort, values, where) so the contract matches the implementation #17000 [doc]Phalcon\Events\Event to be declared final. The class is a value object holding type, source, data, cancelable, and stopped; no subclasses exist in the cphalcon tree and any future typed-event work would add new sibling classes implementing EventInterface rather than extending Event. Marking it final lets the C extension fold the per-fire getters (getType, getSource, getData, isCancelable, isStopped, isPropagationStopped) into direct dispatch. BC note: any userland class MyEvent extends Event now fails #17006 [doc]Phalcon\Events\Manager::attach() to classify the handler kind once at attach time so the dispatch loop can route via a single branch instead of running instanceof Closure / is_callable / typeof per fire per listener. Four kinds are recognized: 0 = Closure (direct invocation via Zephir's {handler}(args) syntax, no arg-array allocation), 1 = [obj, method] array callable (direct dynamic dispatch handler[0]->{handler[1]}(args), no call_user_func_array overhead), 2 = plain object with method named after the event - the classic Phalcon listener pattern (class name is captured at attach time and stored on the tuple to skip get_class() per fire), 3 = generic callable (string function name, invokable object, [class, staticMethod]) routed through call_user_func_array. The subscriber array-form attach paths ([methodName, priority] and [[methodA, priorityA], [methodB, priorityB]]) now route through insertHandlerEntry directly with kind=1, bypassing the classification cascade since the resulting handler shape is already known. methodExistsCache access in the dispatch loop is tightened to a single isset fast path #17006 [doc]Phalcon\Events\Manager::detach() to drop the eventType key entirely when its queue empties (removing the last listener), so hasListeners() and fire()'s short-circuit tell the truth. Previously an emptied queue left the key in place with an empty array value, causing isset($this->events[$eventType]) to return true with no actual listeners to dispatch to. The matching DetachTest expectations are updated to reflect the new contract #17006 [doc]Phalcon\Events\Manager::detachAll(null) to reset events to [] instead of null. The previous null reset broke isset($this->events[$key]) semantics inside attach() and fire() until the next assignment refilled the property; the empty-array form keeps all access paths consistent #17006 [doc]Phalcon\Events\Manager::fire() and Phalcon\Events\Manager::fireAll() to wrap dispatch in try { ... } catch \Throwable, ex { cleanup; throw ex; }. A throwing listener restores stashed responses (if nested) and decrements fireDepth back to its pre-call value before the exception propagates, so manager state stays clean for the next fire - important for long-lived managers (workers, daemons) where a single dirty teardown would poison every subsequent fire #17006 [doc]Phalcon\Events\Manager::fire() to parse the eventType only once per unique string and cache the result ([typePrefix, eventName]) in an internal eventNameCache keyed by the original string. Repeated fires of the same event name (db:beforeQuery × N per request, model lifecycle events on hot save paths) collapse to a single hash lookup after warm-up. The cache never needs invalidation because the parse is deterministic for a given input string. fire() also short-circuits before allocating the Event instance when no listeners match either the type queue or the fully-qualified queue - in production most fires have zero matching listeners (model lifecycle events with no user-attached behavior, DB events without a tracer), so the avoided allocation is significant in hot paths #17006 [doc]Phalcon\Events\Manager::fire(), Phalcon\Events\Manager::attach(), and Phalcon\Events\Manager::fireQueue() to be declared final. The class itself stays open so genuine subclasses that only add new methods continue to work, but the dispatch hot path is locked to enable C-level direct dispatch on the three methods that run per-event. The remaining public surface (addSubscriber, removeSubscriber, detach, detachAll, getListeners, getResponses, getSubscribers, hasListeners, isCollecting, isValidHandler, collectResponses, enablePriorities, arePrioritiesEnabled, isStrict, setStrict, fireAll, clearSubscribers) is left non-final so decorator-style subclasses that wrap these less-hot methods can still override them. BC note: subclasses that override fire, attach, or fireQueue now fail #17006 [doc]Phalcon\Events\Manager::fireQueue() to be a thin BC-preserving wrapper around a new private Phalcon\Events\Manager::dispatch() helper. The public signature fireQueue(array $queue, EventInterface $event) is unchanged; the framework's own fire() path bypasses fireQueue and calls dispatch() directly with hoisted arguments (eventName, source, data, cancelable, collect) so the second dispatch leg of a two-queue fire() (type queue + fully-qualified queue) does not re-extract identical values from the event. The dispatch path also applies a single-handler fast path: when the queue has exactly one listener (very common in unit tests and lightly-instrumented production), the foreach plus per-iteration cancelable/isStopped check is skipped and dispatch goes straight through the type-branch #17006 [doc]Phalcon\Events\Manager dispatch return-value contract to last non-null wins. Previously every listener return overwrote the running status, so a chain of ("value", null) ended with fire() returning null and silently losing the earlier real value. The new contract only updates status when the listener return is non-null - the last meaningful return survives. The stop() determinism rule overrides last-non-null: when a listener calls $event->stop() (and cancelable=true), that listener's return value is what fire() returns - even if null - because the caller asked for the stopping listener's verdict explicitly. Returning false from a listener does not short-circuit the queue; callers wanting to stop downstream listeners must call $event->stop(). Consumers like Phalcon\Mvc\Dispatcher that interpret a false return from fire() as a cancel signal are unaffected because that check happens in their own dispatch logic, not in the events manager #17006 [doc]Phalcon\Events\Manager listener storage from SplPriorityQueue to a sorted array of [handler, type, priority] tuples (with an additional className element on type=2 tuples). The SplPriorityQueue::EXTR_BOTH clone-per-fire and O(n) setExtractFlags() rebuild on detach are eliminated; the "empty heap" warnings produced by SplPriorityQueue on never-fired event types disappear as a side effect. Insert order under the same priority is preserved (FIFO). When enablePriorities is off (the default), insertHandlerEntry short-circuits to a plain append - the sorted-insert loop only runs when priorities are explicitly enabled. When it does run, the insert uses array_splice instead of a per-element rebuild #17006 [doc]Phalcon\Html\Escaper into a façade over five per-context escapers (Phalcon\Html\Escaper\HtmlEscaper, AttributeEscaper, CssEscaper, JsEscaper, UrlEscaper); each is reachable via getXxxEscaper()/setXxxEscaper() so individual contexts can be swapped without subclassing the façade. The legacy setEncoding(), setFlags(), and setDoubleEncode() setters fan out to all sub-escapers so existing code keeps working #16971 [doc]Phalcon\Html\Helper\AbstractSeries::__toString() to ksort() its store before rendering so entries are emitted in position order rather than registration order. #16971 [doc]Phalcon\Html\Helper\Input\Checkbox and Phalcon\Html\Helper\Input\Radio to extend a new shared Phalcon\Html\Helper\Input\AbstractChecked; Radio no longer extends Checkbox. Two paths now render checked="checked": the unconditional opt-ins ["checked" => "checked"] (case-insensitive) and ["checked" => true], and a value-match path comparing the supplied checked attribute against the input's value (== by default for mixed int/string round-tripping, === under strict(true)) #16971 [doc]Phalcon\Html\Helper\Style::add() and Phalcon\Html\Helper\Script::add() now accept an optional int $position = -1 argument that is routed through the new protected pushOrPlace() helper (negative pushes onto the next auto-increment slot, non-negative places at that key, advancing past occupied slots) #16971 [doc]Phalcon\Html\TagFactory to no longer extend Phalcon\Factory\AbstractFactory; the registration pipeline now accepts class-strings, closures/callables, or [className, [depKey, ...]] / [className, [depKey, ...], [extraArg, ...]] tuples, and helpers are lazily cached per name in a separate instances map so set() overrides correctly invalidate the previous instance. has() now reports against the recipe map instead of the resolved-instance map #16971 [doc]Phalcon\Mvc\Model\Resultset\Complex::current() LEFT-JOIN hydration to be controlled by the new orm.resultset_empty_left_join_model ini setting (default true). When the flag is true (default) a LEFT JOIN that matches no row hydrates an empty Model instance whose every column is null - preserving the pre-5.13 behavior so applications upgrading from 5.9.x do not need code changes. Setting the flag to false (via php.ini, .htaccess, or Phalcon\Support\Settings::set('orm.resultset_empty_left_join_model', false)) restores the 5.13.0 contract introduced by #16239, where the unmatched slot is plainly null. The new key is wired into Phalcon\Support\Settings::get() / set() alongside the other orm.* toggles #16960 [doc]Phalcon\Mvc\Url\UrlInterface::get() signature to match the implementation: the previously undeclared var baseUri = null fourth parameter (added to Phalcon\Mvc\Url::get() in 2015 but never propagated to the interface) and the new bool replaceArgs = false fifth parameter are now part of the contract #16986 [doc]Phalcon\Support\Collection::__construct() to accept two additional opt-in parameters - bool $strictNull = false and ?string $type = null. When strictNull is true, get() returns stored null values verbatim instead of substituting the default (previous behavior was unconditional default-substitution); when type is set, every set()/init() runs through the new validateType() guard, which maps the scalar tokens int/string/bool/float/array/object to their is_* checks and treats anything else as a class/interface name compared with instanceof, throwing InvalidArgumentException on mismatch #17000 [doc]Phalcon\Support\Collection::__serialize() to return a structured array ["data", "insensitive", "strictNull", "type"] so a serialize/unserialize round-trip restores the full configuration (previously only data survived). __unserialize() accepts both the new structured format and the legacy flat-array format, so existing serialized blobs keep deserializing without intervention #17000 [doc]Phalcon\Support\Collection::getKeys() and Phalcon\Support\Collection::getValues() to delegate to the new keys() / values() methods and marked the get*-prefixed pair @deprecated; behavior is unchanged but new code should call keys() / values() instead #17000 [doc]Phalcon\Db\Check value object and Phalcon\Db\CheckInterface. Check takes a constraint name (string; empty string means an unnamed constraint, in which case the dialect omits the CONSTRAINT <name> prefix) and a definition array containing the required expression key (the boolean SQL predicate). Phalcon\Db\Dialect\Mysql, Phalcon\Db\Dialect\Postgresql, and Phalcon\Db\Dialect\Sqlite all recognize definition["checks"] (array of CheckInterface) inside createTable() and emit an inline [CONSTRAINT "<name>"] CHECK (<expr>) line alongside the column/index/reference lines. New dialect methods addCheck() and dropCheck() emit the equivalent ALTER TABLE ... ADD CONSTRAINT ... CHECK (...) and ALTER TABLE ... DROP CHECK|CONSTRAINT ... SQL for MySQL 8.0.16+ and PostgreSQL; SQLite throws (CHECK constraints can only be declared at CREATE TABLE time in SQLite, the same limitation that already applies to FK constraints). New adapter methods Phalcon\Db\Adapter\AbstractAdapter::addCheck() and Phalcon\Db\Adapter\AbstractAdapter::dropCheck() provide the symmetric one-call ergonomics already available for addForeignKey() / dropForeignKey(). The new dialect and adapter methods are declared as commented-out @todo v7 stubs on Phalcon\Db\DialectInterface and Phalcon\Db\Adapter\AdapterInterface to avoid breaking third-party implementors during the v5 line #14719 [doc]INVISIBLE index support to Phalcon\Db\Index. The constructor's second parameter is now backward-compatibly overloaded: passing a plain list of column names continues to work (legacy positional form), while passing an associative array containing a columns key activates the new definition-array form (["columns" => [...], "type" => "...", "invisible" => true]). The third positional type argument is honored only when the second argument is the legacy list form; in definition-array mode type comes from the array. Index gains a matching isInvisible(): bool accessor and throws a Phalcon\Db\Exception if the definition-array path is taken but columns is not itself an array. Phalcon\Db\Dialect\Mysql::addIndex and Phalcon\Db\Dialect\Mysql::createTable emit a trailing INVISIBLE keyword for invisible indexes. Phalcon\Db\Adapter\Pdo\Mysql::describeIndexes reverse-engineers the flag from the MySQL 8.0+ Visible column of SHOW INDEXES (absent on 5.7, which defaults to visible). PostgreSQL and SQLite have no equivalent and their dialects ignore the flag. The new method is declared as a commented @todo v7 stub on Phalcon\Contracts\Db\Index to avoid breaking third-party implementors during the v5 line. This definition-array hook is the path that will be reused by upcoming items #8 (descending indexes), #9 (partial indexes), and #10 (functional indexes) so the constructor stays tidy #14719 [doc]INVISIBLE column support to Phalcon\Db\Column. A new boolean definition-array key invisible (default false) is parsed by the constructor; a matching isInvisible(): bool accessor reports the state at runtime. Phalcon\Db\Dialect\Mysql::addColumn, Phalcon\Db\Dialect\Mysql::createTable, and Phalcon\Db\Dialect\Mysql::modifyColumn emit INVISIBLE after the NOT NULL/NULL clause when the flag is set. PostgreSQL and SQLite have no equivalent and their dialects ignore the flag. Phalcon\Db\Adapter\Pdo\Mysql::describeColumns reverse-engineers the flag from the EXTRA column of information_schema.COLUMNS (already in the result set since item #1's switch from SHOW FULL COLUMNS) - substring-matched so the flag is still detected when MySQL concatenates it with other extras like INVISIBLE STORED GENERATED. The new method is declared as a commented @todo v7 stub on Phalcon\Contracts\Db\Column to avoid breaking third-party implementors during the v5 line #14719 [doc]CREATE INDEX CONCURRENTLY support via a new concurrently definition-array key on Phalcon\Db\Index (default false). Phalcon\Db\Index::isConcurrent(): bool exposes the flag at runtime. Phalcon\Db\Dialect\Postgresql::addIndex now emits CONCURRENTLY between the INDEX keyword and the index name when the flag is set (CREATE INDEX CONCURRENTLY "idx_email" ON "schema"."table" (...)), so the index can be built without taking the strong lock that normally blocks writers. MySQL and SQLite have no equivalent concept and their dialects ignore the flag. No reverse engineering is meaningful (the option is creation-time only - once built, the index is indistinguishable from one built non-concurrently). The new method is declared as a commented @todo v7 stub on Phalcon\Contracts\Db\Index to avoid breaking third-party implementors during the v5 line #14719 [doc]Phalcon\Db\Dialect: createMaterializedView(string $viewName, array $definition, string $schemaName = null): string (definition takes a required sql key, same shape as createView), dropMaterializedView(string $viewName, string $schemaName = null, bool $ifExists = true): string, and refreshMaterializedView(string $viewName, string $schemaName = null, bool $concurrent = false): string (passing $concurrent = true emits REFRESH MATERIALIZED VIEW CONCURRENTLY ... for non-blocking refresh - requires a unique index on the view). Phalcon\Db\Dialect\Postgresql overrides all three to emit the correct SQL; the base implementations throw Phalcon\Db\Exception, which is inherited unchanged by Phalcon\Db\Dialect\Mysql and Phalcon\Db\Dialect\Sqlite (neither engine has a materialized-view concept). Phalcon\Db\Adapter\AbstractAdapter gains three matching createMaterializedView() / dropMaterializedView() / refreshMaterializedView() wrappers that execute the dialect-built SQL and return bool. #14719 [doc]Phalcon\Db\Column and Phalcon\Db\Dialect\Postgresql. Ten new Column::TYPE_* constants are introduced: TYPE_BYTEA (30), TYPE_INET (31), TYPE_CIDR (32), TYPE_MACADDR (33), TYPE_INT4RANGE (34), TYPE_INT8RANGE (35), TYPE_NUMRANGE (36), TYPE_TSRANGE (37), TYPE_TSTZRANGE (38), TYPE_DATERANGE (39). Phalcon\Db\Dialect\Postgresql::getColumnDefinition recognizes the new types and emits the matching keywords (BYTEA, INET, CIDR, MACADDR, INT4RANGE, INT8RANGE, NUMRANGE, TSRANGE, TSTZRANGE, DATERANGE). MySQL and SQLite dialects fall through their existing default branches for these constants - users targeting those engines should pick a portable base type instead. Additionally, a new boolean definition-array key array and a Phalcon\Db\Column::isArray(): bool accessor expose array-column intent; when isArray() is true, the PostgreSQL dialect appends [] to the type (INTEGER[], TEXT[], INET[], etc.). MySQL and SQLite ignore the flag. Phalcon\Db\Adapter\Pdo\Postgresql::describeColumns reverse-engineers the new types by matching the data_type column from information_schema.columns and sets array when data_type reports ARRAY or contains []. The new method is declared as a commented @todo v7 stub on Phalcon\Contracts\Db\Column to avoid breaking third-party implementors during the v5 line #14719 [doc]FOR SHARE shared-lock emission to Phalcon\Db\Dialect\Postgresql::sharedLock(); it previously returned the original query unchanged (silent no-op), so callers had no way to express PostgreSQL's row-level shared lock through the cphalcon dialect API. The method now appends " FOR SHARE" and also accepts the optional string $modifier = "" second argument introduced by item #3, so callers can request FOR SHARE NOWAIT / FOR SHARE SKIP LOCKED via the Phalcon\Contracts\Db\Dialect::LOCK_NOWAIT / LOCK_SKIP_LOCKED constants. The signature change is propagated to Phalcon\Contracts\Db\Dialect::sharedLock, Phalcon\Contracts\Db\Adapter\Adapter::sharedLock, and the SQLite and MySQL impls - SQLite remains a no-op regardless of the modifier (no row-level locking), and MySQL still emits its legacy LOCK IN SHARE MODE and silently ignores any modifier (the legacy syntax does not support NOWAIT / SKIP LOCKED; users on MySQL 8.0+ who need those modifiers can use forUpdate() instead). Phalcon\Db\Adapter\AbstractAdapter::sharedLock passes the modifier through to the dialect #14719 [doc]NOWAIT / SKIP LOCKED row-lock modifiers to forUpdate(). The dialect and adapter forUpdate() methods now accept an optional second string $modifier = "" argument; pass one of the new contract constants Phalcon\Contracts\Db\Dialect::LOCK_NONE (default), Phalcon\Contracts\Db\Dialect::LOCK_NOWAIT, or Phalcon\Contracts\Db\Dialect::LOCK_SKIP_LOCKED to emit SELECT … FOR UPDATE, SELECT … FOR UPDATE NOWAIT, or SELECT … FOR UPDATE SKIP LOCKED respectively. Recognized by MySQL 8.0+ and PostgreSQL 9.5+; SQLite has no row-level locking and silently ignores the modifier. Signature change is propagated to Phalcon\Contracts\Db\Dialect::forUpdate, Phalcon\Contracts\Db\Adapter\Adapter::forUpdate, Phalcon\Db\Dialect::forUpdate (base), Phalcon\Db\Dialect\Sqlite::forUpdate (override remains a no-op), and Phalcon\Db\Adapter\AbstractAdapter::forUpdate (pass-through). Existing single-argument call sites are unaffected - the second parameter defaults to "" #14719 [doc]ON CONFLICT (...) DO UPDATE SET ... upsert support to the Db dialect and adapter layers. New SQL-transformer method Phalcon\Db\Dialect::onConflictUpdate(string $sqlQuery, array $conflictColumns, array $updateColumns): string appends an upsert clause to the supplied INSERT statement using the SQL-standard form recognized by PostgreSQL 9.5+ and SQLite 3.24+: INSERT INTO ... ON CONFLICT ("col") DO UPDATE SET "other" = excluded."other". The base implementation in Phalcon\Db\Dialect::onConflictUpdate provides the standard emission (inherited by Phalcon\Db\Dialect\Postgresql and Phalcon\Db\Dialect\Sqlite); Phalcon\Db\Dialect\Mysql::onConflictUpdate overrides to throw because MySQL's INSERT ... ON DUPLICATE KEY UPDATE shape is incompatible (deferred to parser item #23). Throws Phalcon\Db\Exception when either the conflictColumns or updateColumns array is empty. Phalcon\Db\Adapter\AbstractAdapter::onConflictUpdate provides the symmetric one-call passthrough. The new method is declared as a commented @todo v7 stub on Phalcon\Contracts\Db\Dialect and Phalcon\Contracts\Db\Adapter\Adapter to avoid breaking third-party implementors during the v5 line #14719 [doc]Phalcon\Contracts\Db namespace housing the canonical contracts for the Db layer: Phalcon\Contracts\Db\Check, Phalcon\Contracts\Db\Column, Phalcon\Contracts\Db\Dialect, Phalcon\Contracts\Db\Index, Phalcon\Contracts\Db\Reference, Phalcon\Contracts\Db\Result, and Phalcon\Contracts\Db\Adapter\Adapter. The legacy interfaces (Phalcon\Db\CheckInterface, Phalcon\Db\ColumnInterface, Phalcon\Db\DialectInterface, Phalcon\Db\IndexInterface, Phalcon\Db\ReferenceInterface, Phalcon\Db\ResultInterface, Phalcon\Db\Adapter\AdapterInterface) are kept as thin extensions of their contract counterparts, marked @deprecated (matching the Phalcon\Support\Collection\CollectionInterface migration pattern), so existing implementors and typehints continue to work in the v5 line. The @todo v7 commented-out stubs for the generated-column API (item #1) and CHECK-constraint API (item #2) live in the canonical contract files, which is where they will be uncommented when v7 ships #14719 [doc]Phalcon\Contracts\Events\Stoppable - a Phalcon-owned mirror of PSR-14's StoppableEventInterface with the single isPropagationStopped(): bool method. Phalcon\Events\Event implements it and routes the call through the same internal stopped flag as isStopped(), so existing $event->stop() callers automatically expose the PSR-14-shaped accessor without changing their code. Keeps PSR types out of the extension while letting a future phalcon/events-psr14-bridge package map Phalcon ↔ PSR-14 in PHP land #17006 [doc]Phalcon\Contracts\Events\Subscriber - a subscriber contract requiring a single static getSubscribedEvents(): array method. Supported shapes per entry: ['event:name' => 'methodName'] (plain string), ['event:name' => ['methodName', priority]] (method with priority), or ['event:name' => [['methodA', priorityA], ['methodB', priorityB]]] (multiple listeners per event). Replaces the magic-method-only routing as the primary discoverability mechanism while keeping that path intact for BC #17006 [doc]Phalcon\Contracts\Forms\Schema interface defining a single load(): array method for objects that supply a normalized list of form-element definitions #16996 [doc]Phalcon\Contracts\Mvc\Model\Relation\CacheKeyProvider with a single getUniqueKey(): string method; when a model implements this interface and a relation is marked reusable => true, the Model Manager uses the return value of getUniqueKey() as the cache key instead of the object-identity-based unique_key() builtin, allowing different PHP object instances that represent the same database row to share the same reusable record cache entry #16993 [doc]Phalcon\Di\Di::hasShared(string $name): bool and Phalcon\Di\Di::removeShared(string $name): void (also declared on Phalcon\Di\DiInterface) to operate on the shared-instance cache independently of the service-definition registry. hasShared() reports whether getShared() has already materialized an instance for the given name (in contrast to has(), which reports on the definition registry). removeShared() drops the cached instance - both from Di::$sharedInstances and from the Service object's internal sharedInstance field - without removing the service definition, so the next getShared() call rebuilds a fresh instance. Use case: fork-based multi-process workers that need to discard the parent's inherited resource handle (DB connection, etc.) without re-registering the service. Both methods are alias-aware #13440 [doc]Phalcon\Encryption\Security::setAutoRefresh(bool) and Phalcon\Encryption\Security::refreshToken() to make CSRF-token rotation opt-out. When setAutoRefresh(false) is called, getToken() and getTokenKey() reuse the existing session values instead of generating a new pair on every call, eliminating the per-request session write that backend session stores billed per-write (DynamoDB, Redis-with-billing, etc.) would otherwise incur on read-only requests. refreshToken() provides an explicit, atomic rotation of both the token and the token key (used after login or any other state change where rotation is appropriate). The default autoRefresh = true preserves the existing one-time-use behavior; opt-in only #14413 [doc]Phalcon\Events\Manager::addSubscriber(), Phalcon\Events\Manager::removeSubscriber(), Phalcon\Events\Manager::getSubscribers(), and Phalcon\Events\Manager::clearSubscribers() to register and unregister Subscriber instances. The subscriber's getSubscribedEvents() map is parsed once at attach time and each entry is routed through the regular listener pipeline; the result is cached per class name in a new internal subscriberEventsCache so repeated add/remove of the same subscriber class doesn't re-invoke the static method. removeSubscriber() is idempotent; clearSubscribers() iterates a snapshot of registered subscribers so the underlying property can be mutated safely during the walk. Subscribers are keyed by spl_object_id() so the same instance cannot be double-registered #17006 [doc]Phalcon\Events\Manager::fireAll(string $eventType, object $source, mixed $data = null, bool $cancelable = true): array returning every listener's return value as an indexed array. Independent of collectResponses(); the caller's collected state on $this->responses is stashed on entry and restored on exit so a fireAll() call from inside a collect-mode fire() does not pollute the outer accumulator #17006 [doc]Phalcon\Events\Manager::halt(), Phalcon\Events\Manager::resume(), and Phalcon\Events\Manager::isHalted(): bool - a manager-level kill switch separate from $event->stop(). stop() only stops the current dispatch chain; halt() survives across fire() calls and makes every subsequent fire() / fireAll() / fireQueue() call return immediately (null or []) without dispatching, until resume() clears the flag. Use case: a security check or initialization-failure path that needs to abort all downstream event activity for the rest of the request #17006 [doc]Phalcon\Events\Manager::setStopOnFalse(bool) / Phalcon\Events\Manager::isStopOnFalse(): bool - an opt-in per-event short-circuit. When setStopOnFalse(true) has been called and the fire's cancelable flag is on, a listener returning literal false stops the dispatch loop for that event and pins the fire() return as false; later listeners cannot overwrite the cancel. Default off, preserving the pre-5.13 last-wins return-value semantics so existing codebases are unaffected. Independent of halt() and $event->stop() - only governs how the dispatch loop reacts to a literal false listener return #17006 [doc]Phalcon\Events\Manager::setStrict(bool) / Phalcon\Events\Manager::isStrict(): bool to enable strict mode. When strict mode is on, fire() and fireAll() throw Phalcon\Events\Exception on dispatch of an event with zero matching listeners - useful in development for catching typos in event names. Default off; opt-in only #17006 [doc]Phalcon\Forms\Element\CheckGroup and Phalcon\Forms\Element\RadioGroup form elements that render multiple <input type="checkbox"> / <input type="radio"> inputs from a single registered form-element entry. CheckGroup auto-suffixes the name with [] when not already present so PHP collects checked values into an array on submission; both elements bind cleanly because they live under a single key #16996 [doc]Phalcon\Forms\Form::load(Schema $schema, FormsLocator $locator) that consumes element definitions from any Schema source and resolves their type strings through the supplied locator, allowing custom element types via FormsLocator::setElement() #16996 [doc]Phalcon\Forms\FormsLocator, a closure-based registry for named forms (get/has/set) and element-type factories (getElement/hasElement/setElement); entity-less form lookups are lazily cached, while entity-aware lookups always rebuild. The default element registry seeds factories for check, checkgroup, date, email, file, hidden, numeric, password, radio, radiogroup, select, submit, text, and textarea #16996 [doc]Phalcon\Forms\Loader\ArrayLoader, Phalcon\Forms\Loader\JsonLoader, and Phalcon\Forms\Loader\YamlLoader - three Schema implementations that feed Form::load() from a PHP array, a JSON string/file, or a YAML string/file (pecl/yaml) respectively #16996 [doc]Phalcon\Forms\Manager::loadForm(string $name, Schema $schema, ?object $entity = null) and Phalcon\Forms\Manager::getLocator(); loadForm() builds a form from a Schema, registers it in the manager, and also registers a factory in the locator so subsequent entity-aware retrievals via FormsLocator::get($name, $entity) rebuild fresh instances. Manager::__construct(FormsLocator $locator = null) accepts a nullable locator and instantiates a default FormsLocator when omitted (BC: pre-existing new Manager() calls continue to work) #16996 [doc]Phalcon\Html\Escaper\AbstractEscaper, Phalcon\Html\Escaper\AttributeEscaper, Phalcon\Html\Escaper\CssEscaper, Phalcon\Html\Escaper\HtmlEscaper, Phalcon\Html\Escaper\JsEscaper, and Phalcon\Html\Escaper\UrlEscaper as the per-context building blocks behind Phalcon\Html\Escaper #16971 [doc]Phalcon\Html\Helper\Input\AbstractGroup, Phalcon\Html\Helper\Input\CheckboxGroup, and Phalcon\Html\Helper\Input\RadioGroup; the base resolves option entries (scalar label or [label, ...attrs] map) into <input> + <label> pairs sharing a single HTML name, with auto-generated id per value ({name}_{value}) and per-item attribute pass-through. CheckboxGroup matches against an array (or scalar coerced into one) for checked; RadioGroup matches against a single scalar. Registered in Phalcon\Html\TagFactory as inputCheckboxGroup and inputRadioGroup #16996 [doc]Phalcon\Html\Helper\Input\Generic and Phalcon\Html\Helper\Input\AbstractChecked; Generic accepts the HTML5 type via the constructor (with setType() to change it after construction), letting TagFactory register a single class for all type-string-only inputs and differentiate them through the recipe map #16971 [doc]Phalcon\Html\Helper\Input\Select::placeholder(string $text) to inject a <option value="" disabled selected>$text</option> first entry, and Phalcon\Html\Helper\Input\Select::strict(bool $flag = true) to opt the option/selected comparison from the new loose default into strict (===) matching #16971 [doc]Phalcon\Html\Helper\Script::beginInternal() and endInternal(array $attributes = [], int $pos = -1) to capture inline JavaScript via output buffering and append it to the asset stack as a <script>...</script> block #16971 [doc]Phalcon\Html\Helper\Tag (open tag) and Phalcon\Html\Helper\VoidTag (self-closing tag) as escape hatches for arbitrary tag names without a dedicated helper; available via TagFactory as tag and voidTag #16971 [doc]Phalcon\Mvc\Router::getMethodRoutes(): array - returns the internal HTTP-method index (routes bucketed by method string, unconstrained routes under "*"). handle() now builds a candidate list from only the matching-method bucket plus the unconstrained bucket and iterates that subset in reverse, eliminating the O(n) per-route HTTP-method check that previously ran against every registered route on each request #17015 [doc]Phalcon\Mvc\Router::loadFromConfig(array|ConfigInterface $config): RouterInterface - initializes the router from a data structure, accepting the top-level keys defaultRoutes, removeExtraSlashes, defaults, notFound, routes, and groups. Each routes entry supports method (one of connect, delete, get, head, options, patch, post, purge, put, trace; omitted = any method), pattern, paths, name, and hostname. Each groups entry supports prefix, hostname, paths, and a nested routes array, then is mounted via mount() #15050 [doc]Phalcon\Mvc\Router\RouterFactory with load(array|ConfigInterface $config): RouterInterface and newInstance(bool $defaultRoutes = true): RouterInterface, mirroring the idiomatic ConfigFactory/LoggerFactory pattern; load() honors the optional top-level defaultRoutes key (defaulting to true) and delegates route assembly to Router::loadFromConfig() #15050 [doc]Phalcon\Paginator\Adapter\QueryBuilderCursor - a keyset (cursor-based) pagination adapter that accepts a QueryBuilder, a limit, and a cursorColumn (the column used as the cursor key, typically a primary key). Each paginate() call fetches limit + 1 rows using cursorColumn > :cursor: to skip already-seen rows; the extra row is used only to detect whether a next page exists and is never returned. getNext() returns the last visible row's cursor value, or 0 when no further page exists. setCursor(int|null $cursor) advances or resets the position. getTotalItems() and getLast() return 0 by design - no COUNT query is issued. Registered in PaginatorFactory as "queryBuilderCursor" #14754 [doc]Phalcon\Support\Collection:column(string $propertyOrMethod): array (lift a single property/method off every item, keyed by the original collection key) #17000 [doc]Phalcon\Support\Collection:each(callable $callback) (run the callback for side effects and return $this for chaining) #17000 [doc]Phalcon\Support\Collection:filter(callable $callback) (new collection of items where the callback returns truthy) #17000 [doc]Phalcon\Support\Collection:first() / last() (head/tail value or null on empty) #17000 [doc]Phalcon\Support\Collection:isEmpty(): bool, getType(): string|null (the type guard configured at construction) #17000 [doc]Phalcon\Support\Collection:keys(bool $insensitive = true) and values() (the non-get-prefixed names, with getKeys/getValues retained as deprecated wrappers) #17000 [doc]Phalcon\Support\Collection:map(callable $callback) (new collection of transformed values, keys preserved) #17000 [doc]Phalcon\Support\Collection:reduce(callable $callback, mixed $initial = null): mixed (callback signature ($accumulator, $value, $key)) #17000 [doc]Phalcon\Support\Collection:replace(array $data): void (clear then init in one call) #17000 [doc]Phalcon\Support\Collection:sort(?callable $callback = null, int $order = SORT_ASC) (uasort when a callback is supplied, otherwise asort/arsort keyed by $order) #17000 [doc]Phalcon\Support\Collection:where(string $propertyOrMethod, mixed $value) (strict-equality filter via extractValue) #17000 [doc]Phalcon\Time\Clock\Exception with the invalidModifier() named constructor; FrozenClock::adjust() throws this exception uniformly across PHP versions when the modifier string cannot be parsed (catching DateMalformedStringException on PHP 8.3+ and trapping the E_WARNING plus false return on earlier versions, leaving the clock state untouched on failure) #16965 [doc]Phalcon\Time\Clock namespace with ClockInterface, SystemClock, and FrozenClock to wrap clock functionality for the application; SystemClock returns the current time as a DateTimeImmutable in a configurable timezone (with fromUTC() and fromSystemTimezone() named constructors), while FrozenClock returns a fixed instant for deterministic testing and exposes set() and adjust() to move the clock in place (returning $this for fluent chaining) #16965 [doc]RETURNING clause support to the Db dialect and adapter layers. New SQL-transformer method Phalcon\Db\Dialect::returning(string $sqlQuery, array $columns): string appends a RETURNING clause to an INSERT / UPDATE / DELETE statement; pass ["*"] for RETURNING * or a list of column identifiers for RETURNING "col1", "col2". Phalcon\Db\Dialect\Postgresql::returning and Phalcon\Db\Dialect\Sqlite::returning provide the emission (SQLite requires 3.35+). The base implementation in Phalcon\Db\Dialect::returning throws Phalcon\Db\Exception, which is inherited unchanged by Phalcon\Db\Dialect\Mysql since MySQL has no RETURNING construct. An empty columns array throws on PgSQL and SQLite. Phalcon\Db\Adapter\AbstractAdapter::returning provides the symmetric one-call passthrough so users can do $connection->query($connection->returning($sql, ["id"])). The new method is declared as a commented @todo v7 stub on Phalcon\Contracts\Db\Dialect and Phalcon\Contracts\Db\Adapter\Adapter to avoid breaking third-party implementors during the v5 line #14719 [doc]Raw factory variants aRaw, buttonRaw, elementRaw, labelRaw, olRaw, and ulRaw to Phalcon\Html\TagFactory, each backed by a tuple recipe that pins raw = true on the constructor of the underlying helper #16971 [doc]bool $replaceArgs = false fifth parameter to Phalcon\Mvc\Url::get(); when true and the supplied $uri already contains a query string, the existing query is parsed via parse_str() and merged under array_merge($existing, (array) $args) so user-supplied keys override colliding ones (e.g. $url->get('http://example.com?page=1', ['page' => 5], null, null, true) now returns http://example.com?page=5 instead of http://example.com?page=1&page=5). The default (flag omitted) preserves the legacy append-with-& behavior to keep existing callers working #16986 [doc]generate_pecl workflow job and package.xml, restoring publication of a phalcon-pecl.tgz artifact (also attached to GitHub releases) for a few more versions to give downstream users time to migrate to PIEPhalcon\Db\Index. Entries inside the columns array can now be Phalcon\Db\RawValue instances; string entries continue to be treated as column identifiers and escaped. The base Phalcon\Db\Dialect::getIndexColumnList() helper detects RawValue entries and per-dialect renders them - MySQL and PostgreSQL wrap each expression in its own parentheses (KEY idx ((LOWER(col))) and CREATE INDEX ON t ((lower(col))) respectively), while SQLite emits the expression verbatim (its grammar accepts expr directly as an indexed-column). The helper gains an optional bool $wrapExpressions = true flag - defaults are tuned per dialect at the call site so users do not need to think about it. Expressions compose with the descending direction (#8) and partial-index predicate (#9) without any additional API surface. Reverse-engineering of expressions is deferred (PostgreSQL via pg_get_expr(pg_index.indexprs, ...), SQLite via sqlite_master.sql parsing - same conservative cutoff used in item #1). No new accessor method is needed - Index::getColumns() continues to return the entries (now of mixed string / RawValue type) #14719 [doc]Phalcon\Db\Column via two new definition-array keys: generated (the SQL expression as a string; null keeps the column non-generated) and generationStored (bool, false → VIRTUAL, true → STORED; PostgreSQL ignores the flag and always emits STORED). Three new public methods report the state at runtime - getGenerationExpression(): string | null, isGenerated(): bool, isGenerationStored(): bool. The class enforces that a generated column cannot also declare default or autoIncrement. All three dialects (Mysql, Postgresql, Sqlite) emit GENERATED ALWAYS AS (<expr>) VIRTUAL\|STORED from addColumn(), createTable(), and (where supported) modifyColumn(), and skip the DEFAULT / AUTO_INCREMENT / AUTOINCREMENT clauses for generated columns. Reverse-engineering through describeColumns() is also wired up: MySQL switches from SHOW FULL COLUMNS to an equivalent information_schema.COLUMNS query that additionally returns GENERATION_EXPRESSION; PostgreSQL extends its information_schema.columns query with is_generated and generation_expression; SQLite switches from PRAGMA table_info to PRAGMA table_xinfo so the hidden flag (2 → VIRTUAL, 3 → STORED) can populate isGenerated() / isGenerationStored(). SQLite cannot expose the generation expression through any pragma, so getGenerationExpression() round-trips as an empty string for SQLite-introspected generated columns (documented limitation). The new methods are declared as commented @todo v7 stubs on Phalcon\Db\ColumnInterface to avoid breaking third-party implementors during the v5 line #14719 [doc]Phalcon\Mvc\Url::get(): when a named route carries a setHostname() restriction the returned URL is now protocol-relative (//hostname/path) so it works transparently under both HTTP and HTTPS #17007 [doc]Phalcon\Encryption\Security namely Phalcon\Contracts\Encryption\Security\Security, CryptoUtils, CsrfProtection, and PasswordSecurity and tied them to the component #16991 [doc]Phalcon\Db\Index via a new where definition-array key (string). Phalcon\Db\Index::getWhere(): string exposes the configured predicate (empty string when none). Phalcon\Db\Dialect\Postgresql::addIndex and Phalcon\Db\Dialect\Sqlite::addIndex append WHERE <expr> to the emitted CREATE INDEX statement. MySQL has no partial-index feature and its dialect ignores the value. Reverse-engineering of the predicate is deferred for both PostgreSQL (requires pg_get_expr(pg_index.indpred, pg_index.indrelid)) and SQLite (requires sqlite_master.sql parsing) - same conservative cutoff used for SQLite generation expressions in item #1. Throws Phalcon\Db\Exception if the definition-array where key is supplied with a non-string value. The new method is declared as a commented @todo v7 stub on Phalcon\Contracts\Db\Index #14719 [doc]ASC / DESC) support on Phalcon\Db\Index via a new directions definition-array key. The array is parallel to columns; trailing positions absent from directions default to ASC at emission time. Phalcon\Db\Index::getDirections(): array exposes the configured list (empty array means "no per-column direction declared" - preserves the legacy plain (col1, col2) rendering exactly). A new protected Phalcon\Db\Dialect::getIndexColumnList(IndexInterface) helper centralizes the direction-aware emission and is now used by Phalcon\Db\Dialect\Mysql::addIndex / createTable, Phalcon\Db\Dialect\Postgresql::addIndex / createTable, and Phalcon\Db\Dialect\Sqlite::addIndex / createTable. Phalcon\Db\Adapter\Pdo\Mysql::describeIndexes reverse-engineers directions from the Collation column of SHOW INDEXES (A = ASC, D = DESC, NULL = ASC); the resulting Index only carries a non-empty directions array when at least one column is DESC, so existing introspection workflows that don't expect direction metadata see no diff. PostgreSQL and SQLite reverse-engineering of directions is deferred (pg_index.indoption and sqlite_master.sql parsing respectively - same conservative cutoff used for SQLite generation expressions in item #1). The new method is declared as a commented @todo v7 stub on Phalcon\Contracts\Db\Index to avoid breaking third-party implementors during the v5 line #14719 [doc]Phalcon\Html\Helper\Input\Select data-provider path: Phalcon\Html\Helper\Input\Select\SelectDataInterface now also exposes getAttributes() returning [optionValue => [attrName => stringValue, ...]]; ArrayData accepts a second constructor argument with the resolved per-value attribute map, and ResultsetData accepts a third attributesMap argument (htmlAttr => string|callable) whose closures receive the current row. Resolution happens once in the providers (with false/null results dropped); rendering continues to flow through the existing AbstractHelper attribute pipeline #16983 [doc]ubuntu-22.04-arm runner) and macOS (macos-14, Apple Silicon) to the release artifacts. The build_extension CI matrix now produces phalcon-php<ver>-<ts>-ubuntu-gcc-arm64.zip and phalcon-php<ver>-<ts>-macos-clang-arm64.zip alongside the existing x64 builds, and the macOS composite action installs pcre2/re2c via Homebrew, points CPPFLAGS/LDFLAGS at the keg-only pcre2 headers, and enables the extension in PHP's PHP_CONFIG_FILE_SCAN_DIR so php --ri phalcon succeeds #16553Phalcon\Db\Column and the MySQL and PostgreSQL dialects. Eight new Column::TYPE_* constants land: TYPE_GEOMETRY (40), TYPE_POINT (41), TYPE_LINESTRING (42), TYPE_POLYGON (43), TYPE_MULTIPOINT (44), TYPE_MULTILINESTRING (45), TYPE_MULTIPOLYGON (46), TYPE_GEOMETRYCOLLECTION (47). Phalcon\Db\Dialect\Mysql::getColumnDefinition and Phalcon\Db\Dialect\Postgresql::getColumnDefinition emit the matching keywords (MySQL recognizes them natively from 5.7; PostgreSQL needs PostGIS installed, which interprets the keywords). SQLite has no native spatial type and its dialect leaves these constants in the default branch. Phalcon\Db\Adapter\Pdo\Mysql::describeColumns reverse-engineers the new types by starts_with-matching the column type - order in the switch was chosen so the longer multi-* / geometrycollection variants are matched before their shorter prefixes (linestring before polygon, etc.). PostgreSQL reverse-engineering for spatial types is deferred because information_schema.data_type does not consistently expose PostGIS type names without joining pg_type - users introspecting PostGIS schemas should query metadata directly until then. Caveat - read-side WKB hydration is not part of this change. A POINT selected directly with SELECT location FROM items still returns raw WKB bytes (cphalcon issues #14769 and #13670); the workaround is to project ST_AsText(location) / ST_AsBinary(location) / ST_AsGeoJSON(location) server-side. The DDL/describe support shipped here is the schema-level prerequisite for any future result-set hydration helper #14719 [doc]DEFAULT clauses by recognizing Phalcon\Db\RawValue instances passed as definition["default"]. Previously each dialect quoted any non-numeric, non-CURRENT_TIMESTAMP, non-NULL default as a string literal - preventing legitimate expression defaults like MySQL 8.0.13+ DEFAULT (UUID()), PostgreSQL DEFAULT gen_random_uuid() / DEFAULT nextval('seq'), or SQLite 3.31+ DEFAULT strftime('%s','now'). Phalcon\Db\Dialect\Mysql::addColumn / createTable / modifyColumn, Phalcon\Db\Dialect\Postgresql::castDefault (used by all three of its DDL paths), and Phalcon\Db\Dialect\Sqlite::addColumn / createTable now detect RawValue defaults and emit DEFAULT <raw> verbatim. Plain-scalar and CURRENT_TIMESTAMP / NULL keyword defaults continue to take the existing whitelist path unchanged. Column::hasDefault() already treats a RawValue as a non-null default, so isAutoIncrement() semantics and the generated-column "no default allowed" guard from item #1 remain correct #14719 [doc]Phalcon\Contracts\Events namespace: Phalcon\Contracts\Events\Event (replaces Phalcon\Events\EventInterface), Phalcon\Contracts\Events\EventsAware (replaces Phalcon\Events\EventsAwareInterface), and Phalcon\Contracts\Events\Manager (replaces Phalcon\Events\ManagerInterface). The legacy Phalcon\Events\*Interface types are kept as thin extensions of their canonical counterparts, marked @deprecated, matching the migration pattern used for Phalcon\Support\Collection\CollectionInterface. Existing implementors and typehints continue to work in the v5 line #17006 [doc]dropColumn() on the SQLite dialect to emit ALTER TABLE ... DROP COLUMN ... instead of throwing unconditionally - SQLite 3.35+ natively supports ALTER TABLE DROP COLUMN, and pre-empting it at the cphalcon dialect level prevented modern users from using the feature. On engines older than 3.35 the server itself rejects the statement at execution time, with a clearer "near 'DROP': syntax error" message than the previous cphalcon-side throw. Phalcon\Db\Adapter\Pdo\Sqlite::dropColumn already passes through the dialect output via AbstractAdapter, so users now get a one-call $connection->dropColumn(...) on SQLite #14719 [doc].ci/release-notes.sh failing intermittently with grep: write error: Broken pipe once CHANGELOG-5.0.md grew past the pipe-buffer threshold; the grep ... | head -n N pipelines (with set -o pipefail active) gave grep SIGPIPE when head closed the FD before grep finished writing, aborting the step. Replaced both pipelines with single-pass awk programs that exit on the matching line, eliminating the broken-pipe race entirely while keeping the original "extract from the latest ## heading down to one line above the next # heading" behaviorPhalcon\Annotations\AnnotationsFactory::newInstance("memory") segfaulting the PHP process #16962 [doc]Phalcon\Cli\Console::handle() and Phalcon\Mvc\Application::handle() not propagating the configured defaultModule to the dispatcher when the router returned no module name; both methods resolved a local moduleName (router value, falling back to $this->defaultModule) for the module-loading path but then called $dispatcher->setModuleName($router->getModuleName()), discarding the fallback. As a result, dispatcher events such as dispatch:beforeDispatchLoop saw an empty module name even when setDefaultModule() had been called. Both call sites now pass the resolved moduleName to the dispatcher #17013 [doc]Phalcon\Db\Dialect::getSqlExpression() not propagating the outer bindCounts map into the recursive select() call rendered for nested sub-SELECTs, so an array placeholder ({name:array}) inside a sub-SELECT kept the parse-time times count baked into the cached PHQL intermediate; a second execution of the same outer PHQL with the same bind name but a different bind-array size fell back to the stale count and PDO raised "Invalid parameter number: number of bound variables does not match number of tokens" (workaround was Phalcon\Mvc\Model\Query::clean() between calls). The select branch now seeds the nested definition's bindCounts from the outer bindCounts on a local copy of the nested intermediate so the runtime placeholder-count override fires at every nesting level without mutating the cached intermediate #17004 [doc]Phalcon\Events\Manager::fireQueue() segfaulting when invoking a Closure listener whose declared parameter count is less than the three arguments the manager passes ($event, $source, $data). The previous handler->__invoke(...) form routed through PHP's strict C-level method-call path which sets up a 3-slot frame that the closure's own 2-slot (or fewer) frame cannot accept, producing undefined behavior and a process crash. The dispatch path now uses Zephir's {handler}(args) callable-invocation syntax, which routes through zend_call_function and handles closure arity mismatch correctly #17006 [doc]Phalcon\Forms\Form::bind() leaving the entity property untouched when a Check element's key was absent from submitted data (the browser behavior for an unchecked checkbox), so a previously-true field could never be reset by re-submitting the form. Phalcon\Forms\Element\Check gains opt-in setUncheckedValue() / getUncheckedValue() / hasUncheckedValue(); when an unchecked value has been registered and the element's data key is missing from the bind payload, bind() injects the registered value into $data before the main loop so it flows through whitelist, filters, and entity setters identically to a submitted value. Checks without an explicit setUncheckedValue() preserve the previous behavior (entity untouched) #16982 [doc]Phalcon\Forms\Form::bind() silently dropping data for Radio elements registered under distinct form-element identifiers but sharing the same HTML name attribute (e.g. new Radio('r0', ['name' => 'banned']), new Radio('r1', ['name' => 'banned']) bound from ['banned' => 'yes']); the bind loop only looked up $this->elements[$key] and skipped the value when no element matched, so the entity property was never set. The lookup now falls back to scanning registered elements for one whose HTML name attribute matches the data key #15957 [doc]Phalcon\Html\Helper\Input\AbstractInput::__invoke() always assigning an id attribute equal to the element name, producing invalid markup like id="tags[]" when the name contained brackets (array names or indexed names like roles[0]). The auto-id is now skipped when the name contains [, matching the behavior of the corresponding helper in the PHP-side phalcon/phalcon libraryPhalcon\Mvc\Model::__set() not clearing the cached related record when a belongsTo relation alias is assigned null; calling a getter before setting the relation to null caused preSaveRelatedRecords() to overwrite the FK back to its previous value on save #16611 [doc]Phalcon\Mvc\Model::assign() and Phalcon\Mvc\Model::writeAttribute() silently dropping values for columns whose name maps to a reserved internal setter (source, schema, dirtyState, connectionService, readConnectionService, writeConnectionService, eventsManager, transaction, snapshotData, oldSnapshotData); Phalcon\Mvc\Model::possibleSetter() returned true for these reserved names while skipping both the setter call and the property assignment, so the value never landed on the model. It now returns false for reserved setters, letting the caller fall through to direct property assignment while still preventing the reserved internal setter from being hijacked by the column #16617 [doc]Phalcon\Mvc\Model::cloneResultMap() and Phalcon\Mvc\Model::possibleSetter() throwing TypeError during hydration when a model setter has a strict type hint (e.g. ?array) and the raw database value is incompatible; the ORM now catches TypeError and falls back to direct property assignment #16956 [doc]Phalcon\Mvc\Model::doLowInsert() throwing Unable to insert into <table> without data when saving a model whose only column is an auto-increment primary key; on dialects where useExplicitIdValue() is false (MySQL, SQLite) the identity branch produced an empty values array. The identity column is now added with the connection's default identity value when the resulting values array would otherwise be empty #156 [doc]Phalcon\Mvc\Model::find() return type regression introduced in 5.7.0 (PR #16578) that removed the : ResultsetInterface runtime declaration while adding @template T generic docblocks for IDE autocompletion. Subclass overrides that narrowed the return type to : ResultsetInterface and call sites that assigned the result to a typed property (private ResultsetInterface $robots = Robots::find(...)) broke on upgrade from 5.6.x. The runtime return type is restored, and the docblock claim was tightened from T[]|\Phalcon\Mvc\Model\Resultset<int, T> to \Phalcon\Mvc\Model\Resultset<int, T> so it is a strict subtype of the runtime declaration - Psalm previously raised MismatchingDocblockReturnType on the generated ide-stubs because T[] resolves to array<int, T>, which is not a ResultsetInterface (the T[] half of the union was always false; find() never returns a plain PHP array, even under HYDRATE_ARRAYS). Modern IDEs and static analyzers continue to resolve element-type T through the surviving generic annotation. findFirst() is unchanged - it has always returned var | null because it can legitimately return a ModelInterface, a Row, or null depending on the projection #16633 [doc]Phalcon\Mvc\Model::findFirst() docblock claim that diluted the generic return type. The annotation was @return T|\Phalcon\Mvc\ModelInterface|\Phalcon\Mvc\Model\Row|null (introduced by PR #16578), but since @template T of static and every Model subclass implements ModelInterface, the ModelInterface union member is a supertype of T and Psalm/PHPStan collapsed the union to its widest member - losing T and forcing user code that called child-class-specific methods on findFirst()'s result to assert instanceof self first. The redundant ModelInterface member is removed; the annotation is now @return T|\Phalcon\Mvc\Model\Row|null, preserving T for static analyzers while keeping Row (returned when the query projects scalar columns) and null (no match) honest #16661 [doc]Phalcon\Mvc\Model::preSaveRelatedRecords() skipping doSave() for belongsTo parents whose dirtyState was DIRTY_STATE_PERSISTENT; modifications made to an existing parent (loaded via findFirst()) and then attached to a new child were silently dropped on save, while only the FK was written. The dirtyState short-circuit (originally added to break circular hasMany ⇄ belongsTo recursion) is removed and recursion is now prevented by the visited collection already enforced inside doSave() #16222 [doc]Phalcon\Mvc\Model\Query::executeUpdate() and Phalcon\Mvc\Model::doLowUpdate() for PHQL UPDATE ... SET <expr> expressions with placeholders (e.g. col = col + :inc:): named placeholders embedded in expression SQL are now resolved before creating RawValue to avoid PDO "mixed named and positional parameters", and dynamic-update comparisons now always treat RawValue assignments as changed so updates are not skipped when the current numeric value is 0 #16976 [doc]Phalcon\Mvc\Model\Query::parse() returning a cached intermediate representation with the model's original schema/source baked into the tables slot, so subsequent find()/findFirst()/findBy*() calls for the same PHQL string kept emitting SQL pointing at the original schema after the model changed its schema at runtime (e.g. via a wrapper calling setSchema()); the cache-hit branch now refreshes the tables entries from the live model->getSchema()/getSource() before returning, preserving the parse-cache benefit while keeping the rendered FROM clause in sync with current model state #17020 [doc]Phalcon\Mvc\Router::handle() leaving unmatched optional named parameters (e.g. {id:(/[0-9]+)?}{slug:(/.+)?}) in the resulting params with their raw regex group positions (id => 1, slug => 2) instead of unsetting them; the unset branch was nested under else of typeof converters === "array", but Route::$converters defaults to [] so the branch was unreachable. The check is now flattened so an unmatched positional parameter is removed when no per-part converter exists #16559 [doc]Phalcon\Mvc\View::getActiveRenderPath() returning only the first candidate path as a string when a single viewsDir was configured with multiple registered render engines and the view was not found; the method now collapses the internal activeRenderPaths array to a string only when it contains exactly one element, returning the full array of candidate paths in all other cases #16614 [doc]Phalcon\Mvc\View\Engine\Volt\Compiler rejecting single-quoted Volt string literals containing an escaped single quote (e.g. {{ 'Let\'s Encrypt' }}) with a downstream PHP T_STRING parse error; the Volt scanner already preserves the user-written \' verbatim in expr["value"], so the compiler's str_replace("'", "\\'", expr["value"]) step double-escaped it into Let\\'s Encrypt, producing PHP source 'Let\\'s Encrypt' that PHP read as Let\ followed by an unexpected identifier. Dropped the redundant str_replace; the scanner's regex ((['] ([\\][']|[\\].|...) ['])) guarantees expr["value"] is already valid PHP single-quoted string content #17002 [doc]Phalcon\Support\Collection::get() returning the wrapping object's mangled property table when called with $cast = 'array' on a stored object (e.g. a nested Phalcon\Config\Config, which Config::setData() wraps around every array value). The previous implementation called settype($value, 'array') unconditionally, which on an object exposes PHP's null-prefixed internal protected-property names ("\0*\0data", "\0*\0lowerKeys", etc.) instead of the intended array form, so $config->get('outKey', [], 'array')['inKey'] raised Notice: Undefined index. The cast branch now special-cases 'array' for objects exposing a toArray() method and delegates to that method; scalar casts (int, bool, float, string, null, object) and 'array' on a plain stdClass (no toArray()) are unchanged #17005 [doc]Phalcon\Tag\Select::optionsFromArray() not escaping option label text, allowing XSS injection via malicious values; labels are now escaped with escapeHtml() and option values with escapeHtmlAttr() via the escaper service, consistent with optionsFromResultset() #16660 [doc]Phalcon\Events\Manager::fire() calls clobbering the outer caller's collected $this->responses state. Previously the inner fire would reset $this->responses = [] and append its own listener returns there, so after the nested fire returned the outer caller's getResponses() saw the inner fire's results instead of its own. fire() now tracks re-entrancy depth via a new internal fireDepth counter and, on a nested call with collect=true, stashes the outer's responses on entry and restores them on exit so the outer accumulator is preserved across the inner dispatch. fireAll() applies the same stash-and-restore pattern unconditionally so it never pollutes outer collected state regardless of the manager's collectResponses() setting #17006 [doc]version_compare that led to pre PHP 8.0 code #16966Phalcon\Html\Helper\Input\Color, Date, DateTime, DateTimeLocal, Email, File, Hidden, Image, Input, Month, Numeric, Password, Range, Search, Submit, Tel, Text, Time, Url, and Week; their TagFactory service names (inputColor, inputDate, ...) now resolve to Phalcon\Html\Helper\Input\Generic with the appropriate type baked into the recipe, so callers using the factory keep working unchanged #16971 [doc]Phalcon\Db\Column::TYPE_UUID constant (value 29) and added support for PostgreSQL native uuid column type in Phalcon\Db\Adapter\Pdo\Postgresql and Phalcon\Db\Dialect\Postgresql #16840 [doc]Phalcon\Mvc\Url static base URI in Phalcon\Assets\Manager; when a DI container is set and a url service is available, local asset paths are now resolved via getStatic() instead of a bare / prefix #16570 [doc]Phalcon\Mvc\Model\MetaDataInterface::readMetaDataIndex() and Phalcon\Mvc\Model\MetaData::readMetaDataIndex() declaring return type as array|null when the method can also return a string (e.g. for MODELS_IDENTITY_COLUMN), causing a PHP fatal error on PHP 8+ #16613 [doc]Phalcon\Mvc\View\Engine\Volt\Compiler::statementList() returning null instead of string when processing templates that consist entirely of block-mode statements, causing a PHP fatal error on PHP 8+ #16613 [doc]Phalcon\Forms\Element\Select::render() multiselect regression introduced in v5.12.0 (#16894) by reverting to Phalcon\Tag\Select::selectField(); the new Html\Helper\Input\Select only supports a single selected value and does not handle array values required for multiselect #16946 [doc]Phalcon\Html\Helper\Input\AbstractInput::setValue() ignoring empty string "" as a valid value, causing Checkbox and Radio inputs with value="" to never render checked="checked" even when the checked attribute matched #16648 [doc]Phalcon\Http\Response\Cookies::get() throwing an opaque fatal error when no DI container has been set; it now throws Phalcon\Http\Cookie\Exception with a descriptive message before accessing the container #16650 [doc]Phalcon\Mvc\Model\MetaData::writeMetaDataIndex() prematurely initializing a child model's metadata with the parent's source table when skipAttributes() (or skipAttributesOnCreate()/skipAttributesOnUpdate()) is called inside a parent model's initialize() and the child calls parent::initialize() before setting its own source, corrupting the child's attribute list and breaking relationship resolution #16544 [doc]Phalcon\Storage\Serializer\Json::serialize() rejecting plain objects (e.g. stdClass) that do not implement JsonSerializable; json_encode() handles such objects natively and the guard was unnecessary #16630 [doc]Phalcon\Mvc\Model\Manager retaining a model instance in lastInitialized after initialization and Phalcon\Mvc\Model not clearing the reusable-records cache after save(), causing memory to grow unboundedly in long-running processes #16566 [doc]Phalcon\Paginator\Adapter\QueryBuilder::paginate() returning wrong total item count when the query uses DISTINCT columns; the count now uses COUNT(DISTINCT ...) for a single column and a subquery for multiple columns #16581 [doc]Phalcon\Mvc\Model\Query\Builder::autoescape() incorrectly wrapping function expressions (e.g. DATE_PART(...)) in brackets when used in groupBy(), causing a "Column does not belong to any of the selected models" exception #16599 [doc]Phalcon\Mvc\Model - saving a model with multiple fields relations threw "Not implemented" #16029 [doc]Phalcon\Assets\Manager filter type check from is_object() to typeof and updated the error message to "The filter is not valid" #16889 [doc]Phalcon\Cache\AbstractCache::doDeleteMultiple() to delegate to the storage adapter's deleteMultiple() instead of looping over individual delete() calls #16859 [doc]Phalcon\Di\Exception message for missing services from "was not found in the dependency injection container" to "is not registered in the container" #16889 [doc]Phalcon\Di\Service\Builder error messages for service parameters to use double quotes instead of single quotes #16889 [doc]Phalcon\Forms\Element\AbstractElement::getLocalTagFactory() to throw Phalcon\Forms\Exception instead of silently creating a new TagFactory when neither setTagFactory() nor a parent Form provides one #16894 [doc]Phalcon\Forms\Element\Select::render() to use TagFactory-based Html\Helper\Input\Select instead of the deprecated Phalcon\Tag\Select #16894 [doc]Phalcon\Html\TagFactory to accept an optional ResponseInterface in the constructor (useful for preload) #16892 [doc]Phalcon\Mvc\Controller and Phalcon\Mvc\View\Engine\AbstractEngine to be events aware #16890 [doc]Phalcon\Mvc\View\Engine\Volt\Compiler::setOptions to return $this now #16891 [doc]globals_get and globals_set in the code with Phalcon\Support\Settings::get()/set() #16884 [doc]"does not" instead of "doesn't" for consistency #16889Phalcon\Encryption\Security\Uuid factory and versioned adapters (Version1–Version7) with a UuidInterface carrying standard RFC 4122 namespace constants; each version is a singleton cached by the factory, invoked via v1()–v7() #16326 [doc]Phalcon\Html\Helper\FriendlyTitle - available via TagFactory as friendlyTitle [#16892(https://github.com/phalcon/cphalcon/issues/16892) [doc]Phalcon\Html\Helper\Input\Select::fromData() to populate select options from a SelectDataInterface provider, with optgroup support #16894 [doc]Phalcon\Html\Helper\Input\Select\SelectDataInterface, Phalcon\Html\Helper\Input\Select\ArrayData, and Phalcon\Html\Helper\Input\Select\ResultsetData as data providers for the Select helper #16894 [doc]Phalcon\Html\Helper\Preload - available via TagFactory as preload; TagFactory now accepts an optional ResponseInterface as its third constructor parameter [#16892(https://github.com/phalcon/cphalcon/issues/16892) [doc]Phalcon\Mvc\Model\Resultset::refresh() to re-execute the underlying query and update the resultset with fresh data from the database #16409 [doc]deleteMultiple() to Phalcon\Storage\Adapter\* to delete multiple keys in a single operation using native batch capabilities per adapter #16859 [doc]Phalcon\Cache\AbstractCache::doDeleteMultiple() throwing InvalidArgumentException for keys containing invalid characters #16859 [doc]Phalcon\Forms\Exception::tagFactoryNotFound() and Phalcon\Forms\Exception::usingParameterRequired() #16894 [doc]Phalcon\Db\Dialect\Postgresql::modifyColumn() to generate correct SQL when changing a boolean column's default value: replaced empty check with hasDefault() to avoid treating false as "no default", removed the boolean-only branch that omitted the ALTER TABLE prefix, and fixed castDefault() to return PostgreSQL literals true/false instead of raw PHP booleans #15829 [doc]Phalcon\Db\Result\PdoResult::$rowCount to use null as the uninitialised sentinel instead of false, preventing a count of 0 rows being confused with "not yet counted" #16409 [doc]Phalcon\Dispatcher\AbstractDispatcher::dispatch() to refresh the local eventsManager and hasEventsManager variables after initialize() returns, so that an events manager attached to the dispatcher inside initialize() is honoured for all subsequent dispatch events (afterInitialize, afterExecuteRoute, afterDispatch, afterDispatchLoop, etc.) #16440 [doc]Phalcon\Filter\Validation::bind() to skip the dependency injection container lookup when data is empty, preventing unnecessary Di\Exception errors #16889 [doc]Phalcon\Filter\Validation\AbstractValidator::allowEmpty() to support a value-list array (e.g. [null, '']) in addition to the per-field map syntax, using strict === comparison so that '0' is never silently treated as empty #15491 [doc]Phalcon\Filter\Validation\AbstractValidator::messageFactory() to pass the joined field string to Phalcon\Messages\Message instead of the raw array when multiple fields are provided #16889 [doc]Phalcon\Filter\Validation\Validator\Alpha::validate() to return false when allowEmpty is explicitly set to false and the submitted value is null or an empty string #16200 [doc]Phalcon\Forms\Form::isValid() to apply field filters even when no validators are specified (again) #16830 [doc]Phalcon\Html\Escaper::css() and Phalcon\Html\Escaper::js() to return an empty string instead of false when the input is empty or contains only a null codepoint #16889 [doc]Phalcon\Html\Helper\AbstractHelper::renderAttributes() to emit boolean HTML5 attributes (e.g. async, defer) as standalone attribute names instead of async="1" when the attribute value is true #16304 [doc]Phalcon\Html\Helper\Breadcrumbs to support subdirectory installs: added getPrefix()/setPrefix() for a manual string prefix, and an optional UrlInterface constructor parameter that resolves links through url->get() (including base URI prepending and double-slash normalisation); TagFactory accepts an optional fourth UrlInterface argument and passes it to Breadcrumbs automatically #14957 [doc]Phalcon\Http\Response::setStatusCode() exception message from "Non-standard statuscode given without a message" to "Non-standard status-code given without a message" #16889 [doc]Phalcon\Image\Adapter\AbstractAdapter::crop() to correctly handle offsetX = 0 and offsetY = 0 by changing the parameter types from int to var; the previous int typing caused Zephir to compile the null check as 0 == offset in C, making explicit zero offsets indistinguishable from omitted (center) offsets #16156 [doc]Phalcon\Image\Adapter\Gd::processResize() to preserve PNG alpha channel transparency by replacing imagescale() with imagecreatetruecolor() + imagealphablending(false) + imagesavealpha(true) + imagecopyresampled() #16316 [doc]Phalcon\Image\Adapter\Imagick::processPixelate() to explicitly cast division result to int to prevent implicit float-to-int deprecation #16889 [doc]Phalcon\Mvc\Model::__get() to return the already-loaded related record instead of re-fetching from the database, preventing modifications to relation properties from being discarded #15554 [doc]Phalcon\Mvc\Model::__unserialize() and Phalcon\Mvc\Model::unserialize() to call onConstruct() after deserialization, so typed properties initialized in onConstruct are correctly set when a model is restored from cache #15906 [doc]Phalcon\Mvc\Model::__unserialize() and Phalcon\Mvc\Model::unserialize() to restore snapshot as the current attributes (instead of null) when a model is deserialized with no pending changes, preventing getChangedFields() from throwing after cache retrieval #15837 [doc]Phalcon\Mvc\Model::cloneResultMap() to call model setter methods (e.g. setName()) during ORM hydration when orm.disable_assign_setters is false, making hydration behaviour consistent with assign(); setters in localMethods (Phalcon internals) are excluded #14810 [doc]Phalcon\Mvc\Model::collectRelatedToSave() to skip unmodified hasOne/hasMany related records that have snapshot data, preventing spurious INSERT/UPDATE statements when a relation is read but not changed #16000 [doc]Phalcon\Mvc\Model::doLowInsert() to also reset uniqueKey (in addition to uniqueParams) after an auto-increment INSERT so that a subsequent has() call on the same record rebuilds the primary-key condition from current attribute values; previously, uniqueParams was cleared but uniqueKey was kept, causing has() to query with a null parameter and return false, which made SoftDelete attempt to INSERT an already-existing belongsTo related record instead of updating it #16453 [doc]Phalcon\Mvc\Model::doLowUpdate() to skip columns whose string value matches the column's function-call DB default (e.g. gen_random_uuid()) in the non-dynamic update path, preventing the function name from being passed as a bound string parameter and causing a DB type error #15828 [doc]Phalcon\Mvc\Model::doSave() to capture the model snapshot before the INSERT/UPDATE and restore it when postSaveRelatedRecords fails and rolls back the transaction; previously, with orm.update_snapshot_on_save enabled, the snapshot was permanently updated inside doLowInsert/doLowUpdate even when the transaction was rolled back, causing Dynamic Update to silently skip the write on the next save attempt #16410 [doc]Phalcon\Mvc\Model::getRelated() to return already-fetched relations from the internal cache (dirtyRelated first, then related) instead of always querying the database; cache is cleared after save() and delete() to prevent stale results #16409 [doc]Phalcon\Mvc\Model::toArray() to catch Error thrown by a getter that accesses an uninitialized typed PHP property (can occur when cloneResultMap() skips a null value for a NOT NULL column, e.g. via a LEFT JOIN), returning null instead of propagating the error #15711 [doc]Phalcon\Mvc\Model::unserialize() to catch TypeError when assigning a serialised null back to a typed non-nullable PHP property, preventing a crash on the second request when the model is loaded from a cache like APCu #15711 [doc]Phalcon\Mvc\Model\Manager::getRelationRecords() to apply reusable caching for hasManyToMany and hasOneThrough relations; reusable: true was previously ignored for through-relations #15934 [doc]Phalcon\Mvc\Model\Query::executeSelect() to embed Phalcon\Db\RawValue bind parameters directly in the SQL string instead of passing them to PDO #16350 [doc]Phalcon\Mvc\Model\Query::executeSelect() to use the write connection when the query contains a FOR UPDATE clause, instead of always using the read connection #16032 [doc]Phalcon\Mvc\Model\Query::getExpression() to emit NOT BETWEEN instead of BETWEEN NOT for the PHQL_T_BETWEEN_NOT token, producing valid SQL #16812 [doc]Phalcon\Mvc\Model\Query::getSelectColumn() to use the full model class name as the balias key in a complex resultset when the model is namespaced (e.g. App\Models\Users), instead of incorrectly applying lcfirst() to the fully-qualified name; non-namespaced models (e.g. Robots) retain the existing lcfirst() behaviour (robots) #16052 [doc]Phalcon\Mvc\Model\Query\Builder::getPhql() to use a named bind parameter (:APK0:) instead of embedding the raw primary-key value in the PHQL string when findFirst() is called with a numeric or numeric-string argument; this prevents unbounded growth of the internal PHQL AST cache (Query::$internalPhqlCache) in long-running CLI processes #14656 [doc]Phalcon\Mvc\Model\Resultset\Complex::current() to return null instead of an empty model instance when a LEFT JOIN produces no matching row (all column values are null) #16239 [doc]Phalcon\Mvc\Model\Transaction\Manager::collectTransaction() to keep the correct transactions when rebuilding the list after removal #16522 [doc]Phalcon\Mvc\Model\Transaction\Manager::commit() to remove each transaction from the pool after committing so that subsequent get() calls return a fresh transaction #16522 [doc]Phalcon\Mvc\Model to handle the `lastInsertId correctly under Postgres #16920 #16436 #15775 [doc]Phalcon\Mvc\Router\Annotations::handle() to strip the controllerSuffix from the class name when a fully-qualified class name already includes it (e.g. App\Controllers\InvoicesController), preventing the doubled suffix InvoicesControllerController #16238 [doc]Phalcon\Paginator\Adapter\QueryBuilder::paginate() to correctly count groups when groupBy() receives a multi-column array, using a SELECT DISTINCT subquery instead of the PostgreSQL-incompatible COUNT(DISTINCT col1, col2) form #15912 [doc]Phalcon\Paginator\Adapter\QueryBuilder::paginate() to use the columns option as the COUNT(DISTINCT ...) argument when a GROUP BY is present, allowing NULL-safe expressions to be supplied #15266 [doc]Phalcon\Storage\Adapter\Libmemcached, Phalcon\Storage\Adapter\Redis and Phalcon\Storage\Adapter\Weak to call initSerializer() during construction #16889 [doc]Phalcon\Storage\Adapter\Redis to initialize lifetime from options during construction #16889 [doc]Phalcon\Support\Helper\Json\Encode to prefix the InvalidArgumentException message with "json_encode error: " for consistency #16889 [doc]Phalcon\Storage\Adapter\RedisCluster adapter to support Redis Cluster connections #16867Phalcon\Support\Settings to be used for ini settings throughout the framework #16873Phalcon\Encryption\Security::computeHmac() to catch \ValueError thrown by PHP 8.1+ when an unknown hashing algorithm is passed #16893Phalcon\Translate\Adapter\Gettext::setLocale() to call setlocale when it is available, removing warnings in PHP 8.5 #16886Phalcon\Filter\Sanitize\IP to optimize the sanatization of IP address #16838Phalcon\Encryption\Security\JWT\Builder::setPassphrase() to require digits and special characters #16847Phalcon\Encryption\Security\JWT\Builder::getAudience() to return an empty array if not set #16846Phalcon\Encryption\Security\Random::base() to use 16 bits by default #16845Phalcon\Logger\Logger to use lowercase when reporting log levels (previously uppercase) #16852Phalcon\Logger\Adapter\Stream to use a more efficient way to write messages in the logger instead of opening and closing the stream per message #16852Phalcon\Logger\Adapter\Syslog to use the Enum instead of Logger constants #16852Phalcon\Di\Di services.#13042Phalcon\Encryption\Security\JWT\Validator::validateClaim() to validate custom claims #16843Phalcon\Forms\Form::isValid() to apply field filters even when no validators are specified #16830 [doc]Phalcon\Http\Request method getClientAddress() when using trustForwardedHeader #16836Phalcon\Acl\Adapter\Memory::isAllowed() and Phalcon\Mvc\Model\Binder to handle PHP 8.1+ union and intersection types by checking for ReflectionNamedType before calling getName() #16261Phalcon\Storage\Adapter\Redis::clear() and Phalcon\Storage\Adapter\Stream::clear() to only delete keys belonging to the current prefix instead of flushing the entire storage #16806bind() and validate() method in Phalcon\Filter\Validation and Phalcon\Filter\Validation\ValidationInterface to accept $whitelist array of only allowed fields to be mutated when using entity #16800Phalcon\Storage\Adapters\Libmemcached::getAdapter() to use 50ms for \Memcached::OPT_CONNECT_TIMEOUT #16818Phalcon\Html\Helper\Input\* to honor Docbloc directives #16778fails() method helper to Phalcon\Filter\Validation useful for standalone validation #16798Phalcon\Config\Adapter\Yaml constructor to handle null return values from yaml_parse_file(), ensuring empty configuration files are treated as empty arrays instead of throwing errors.Phalcon\Http\Request method getClientAddress(true) to return correct IP address from trusted forwarded proxy. #16777Phalcon\Http\Request method getPost() to correctly return json data as well and unified both getPut() and getPatch() to go through the same parsing method. #16792Phalcon\Filter\Validation method bind() and validate() to correctly bind data when using entity as well as skip binding of fields not included in $whitelist #16800Phalcon\Http\Request method getPostData() when Content-Type header is not set #16804Phalcon\Events\ManagerInterface adding priority property #16817Phalcon\Storage\Adapters\Libmemcached::getAdapter() to correctly merge adapter options #16818Phalcon\Encryption\Crypt method checkCipherHashIsAvailable(string $cipher, string $type) to correctly check the cipher or hash type #16822Phalcon\Mvc\Model docblocks #16825Phalcon\Mvc\Router::setUriSource() to allow URI processing from $_GET['url'] or $_SERVER['REQUEST_URI'] as it was in v3 #16741Phalcon\Mvc\Router to correctly handle numeric URI parts as it was in v3 #16741Phalcon\Mvc\Model\Binder to use ReflectionParameter::getType() instead of deprecated method, PHP 8.0 or higher issue. #16742Phalcon\Mvc\Model\Query to check if cache entry exists. #16747Phalcon\Mvc\Router to correctly match route when using query string URIs. #16749Phalcon\Mvc\Model::cloneResultset to properly parse fields that do not accept null values #16736Phalcon\Translate\Adapter\Csv the escape argument is explicitly required in PHP 8.4 #16733Phalcon\Mvc\Model\Query to use the cacheOptions lifetime over the "cache" service lifetimePhalcon\Storage\Adapter\AbstractAdapter and dropped has() check before receiving the value. #16705Phalcon\Html\Helper\Breadcrumbs component to replace the old Phalcon\Html\Breadcrumbs component. #16727 [doc]Phalcon\Mvc\Micro\LazyLoader::callMethod to prevent Unknown named parameter error #16724Phalcon\Filter\Validation\Validator\Email to allow UTF8 in local part. #16637Phalcon\Cache\Cache::getMultiple() to use mget() when the Phalcon\Cache\Adapter\Redis is used. #16689Storage\Adapter\Redis to accept ssl in the options for secure connections. #16711dispatch:beforeCallAction and dispatch:afterCallAction to last-minute modifications to handler and method (mostly for debugging).Phalcon\Forms\Form and Phalcon\Filter\Validation to correctly handle the validate() response when using validation class beforeValidate() #16702Phalcon\Support\Debug to use correct passed arguments in set_error_handler callback. PHP v7.2.0 deprecated errcontext and has been removed since php v8.0.0 #16649Phalcon\Http\Response\Cookies, Phalcon\Http\Response\CookiesInterface and Phalcon\Http\Cookie to use correct cookie default arguments, avoid deprecated null assign warning when trying to assign the same cookie twice #16649Phalcon\Encryption\Crypt to use strlen instead of mb_strlen for padding calculations #16642Phalcon\Filter\Validation\Validator\File\MimeType::validate to close the handle when using finfo #16647Phalcon\Mvc\Model\Manager::getRelationRecords to explicitly set the referencedModel in the conditions along with the referencedFields #16655Phalcon\Image\Adapters\AbstractAdapter::watermark to correctly calculate the Y offset #16658Phalcon\Dispatcher\AbstractDispatcher when calling action methods that do not define parameters to prevent Unknown named parameter error.Phalcon\Di\Injectable to reference the correct instance of Phalcon\Di\Di in the docblock property #16634Phalcon\Filter\Filter to have the correct docblock for IDE completionPhalcon\Mvc\Model\Query to use the lifetime in the "cache" service if none has been supplied by the options #16696Phalcon\Session\Adapter\Stream::gc() to throw an exception if something is wrong with glob() #16713Phalcon\Http\Request::getBasicAuth() to return a null password if not defined on the server #16668Phalcon\Di\Injectable to reference the correct instance of Phalcon\Di\Di in the docblock property #16634Phalcon\Mvc\Model, Phalcon\Support\Collection and Phalcon\Support\Registry to correctly implement \Serializable interface. #16591Phalcon\Mvc\Router\Group::getHostname() to return null also. #16601Phalcon\Mvc\View\Engine\Volt\Compiler::compileSource to also return array #16608Phalcon\Events\Manager for Phalcon\Storage\Adapter\Apcu,
Phalcon\Storage\Adapter\Redis,
Phalcon\Storage\Adapter\Memory,
Phalcon\Storage\Adapter\Libmemcached, [doc]
Phalcon\Storage\Adapter\Stream,
Phalcon\Storage\Adapter\Weak,
Phalcon\Cache\Adapter\Apcu,
Phalcon\Cache\Adapter\Redis,
Phalcon\Cache\Adapter\Memory,
Phalcon\Cache\Adapter\Libmemcached,
Phalcon\Cache\Adapter\Stream,
Phalcon\Cache\Adapter\Weak
Phalcon\Cache\AbstractCache. #16606Phalcon\Support\Helper\PascalCase causing memory leak by anonymous function #16593Phalcon\Mvc\Model\Query to rollback failed transactions and re-throw exception for data consistency #16604Phalcon\Support\HelperFactory to use the internal mapper for better memory management #16571phalcon.form.strict_entity_property_check for Phalcon\Forms\Form to enable strict entity property checking. #16567Phalcon\Mvc\Cli\Router to extend the Phalcon\Mvc\Cli\RouterInterface #16551Phalcon\Filter\Validation\Validator\StringLength::validate() to correctly use the include parameter #16560Phalcon\Db\Column::TYPE_BINARY and Phalcon\Db\Column::TYPE_TINYINTEGER to have unique values #16532Phalcon\Forms\Form to bind only existing properties on entities, based on phalcon.form.strict_entity_property_check setting. #16567Phalcon\Filter\Sanitize\BoolVal to correctly handle integers. #16582Phalcon\Mvc\View\Engine\Volt\Compiler::filter to use the helper with upper and lower for UTF-8 characters #16543Phalcon\Di\AbstractInjectionAware to extend stdClass for PHP 8.2 deprecation warnings #16543Phalcon\Cli\Router::setDefaultAction and Phalcon\Cli\Router::setDefaultModule to return the object back for a fluent interface #16328Phalcon\Db\Adapter\Pdo\Postgresql::describeColumns() to return the correct string back #16371Phalcon/Filter/Validation::validate() and Phalcon/Filter/Validation/ValidationInterface::validate() to return also bool #16337Phalcon\Mvc\Model::toArray to ignore getters when the field name is source. #16514Phalcon\Http\Request::getPut to correctly get form encoded data #16519Use of "static" in callables is deprecated for PHP 8.2+ #16263Phalcon\Db\Adapter\Pdo\Mysql to not use specific flags for PDO (PDO::ATTR_EMULATE_PREPARES or PDO::ATTR_STRINGIFY_FETCHES) for performance reasons #16474Phalcon\Db\AbstractDb with Phalcon\Db\Adapter\AbstractAdapter since the former was not used #16474resetColumns(), resetFrom(), resetWhere(), resetGroupBy(), resetHaving(), resetOrderBy(), resetLimit(), resetFlags() to the Phalcon\Datamapper\Query\AbstractQuery to allow resetting query filters.Phalcon\Mvc\Model::count to ignore the order parameter (needed for Posgresql) #16471Phalcon\Mvc\Model::toArray added parameter to ignore getters in order not to break serialize. #16490Phalcon\Mvc\Model::toArray changing the conditionals for population to remove segfault. #16498Phalcon\Mvc\Model::toArray to use getters if present #16320int|false in Phalcon\Session\Adapter\*::gc() #16477Phalcon\Config\Adapter\Ini::cast() to mixed #16477Phalcon\Filter\Validation\Validator\Numericality to return false when input has spaces #16461Phalcon\Mvc\Model\ResultsetSimple::toArray to ignore numeric indexes in case results come as not fetch_assoc #16467Phalcon\Mvc\Model::getMessages() to also filter with an array of fields #16265Phalcon\DataMapper\Query\Select::columns() to accept an array of columns (keys as aliases) instead of func_get_args #16451Phalcon\Html\Helper\AbstractSeries::__invoke() to no longer clear the internal store when called #16441Phalcon\Logger\Formatter\Line #16430Phalcon\Html\Helper\AbstractSeries::reset() to clear the internal store when needed #16441Phalcon\Filter\Validation\Validator\Size\* validators to correctly detect the size of uploaded files #16390Phalcon\Mvc\Model::save() #16395Phalcon\Mvc\Router::handle() #16431Phalcon\Mvc\Model::doLowUpdate and Phalcon\Mvc\Model::postSaveRelatedRecords for better code logic and a clearer separation of behavior, although it lead to partially repeated code. #16391Phalcon\Mvc\Model\Metadata::initialize #16393Phalcon\Mvc\Model::appendMessagedFrom for code consistency and to add messages from another model #16391Phalcon\Autoload\Loader::isRegistered for debugging purposes #16391Phalcon\Mvc\Model\Metadata::initializeMetadata #16393Phalcon\Mvc\Model\Metadata::getMetaDataUniqueKey #16393Phalcon\Mvc\Model\Metadata::getColumnMapUniqueKey #16393Phalcon\Encryption\Security\JWT\Builder::addHeader() to allow adding custom headers #16396routeId in Phalcon\Mvc\Router\Route to always return a string #16414getAdapter() in Phalcon\Mvc\Model\Metadata to retrieve the internal cache adapter if necessary. #16244Phalcon\Storage\Adapter\Weak implemented with WeakReference has a cache/retrieval solution for objects not yet collected by the Garbage Collection. #16372Phalcon\Di\Injectable from stdClass to remove the deprecation warning (dynamic properties) for PHP 8.2 #16308Phalcon\Mvc\View::getVar() so that stubs can be accurate. #16276encode/decode methods for JSON to use the Phalcon\Support\Helper\Json\* classes. #15608Phalcon\Support\Helper\Json\* classes to clear up json_last_error() before doing any conversions. #15608Phalcon\Http\Request::getJsonRawBody to protect from empty body #16373Encryption\Crypt::checkCipherHashIsAvailable to allow proper setting of the hash #16314unlikely from if statements from the Stream storage adapter and Json serializer #16339Storage\Adapter\Stream::get()/set() to correctly calculate the path if the prefix is present in the key #16348Html\Helper\Input\Checkbox to correctly process empty values #15959Phalcon\Html\Helper\Title::prepend to correctly prepend text in subsequent calls #16283Phalcon\Acl\Adapter\Memory::isAllowed to not use the deprecated ReflectionType::getClass #16255Phalcon\Mvc\Micro::handle to type check an object for the finish #16240Phalcon\DI\Service::resolve to not call the get() from the container and cause an infinite loop #15032Phalcon\Support\Debug to correctly calculate the documents URL for the hyperlinks #16223Phalcon\Html\TagFactory docblock for autocompletion (https://github.com/phalcon/cphalcon/commit/0129658f3ac468dcc5294d401403e166302a8069)Phalcon\Db\Profiler by correctly calculating the seconds (reapplied changes) #15822Phalcon\Html\TagFactory to the Phalcon\Di\FactoryDefault\Cli #16233Phalcon\Filter::sanitize to return correct data when noRecursive is true #16199Phalcon\Html\Escaper::html to not return null when a zero string is passed #16202Phalcon\Http\Request::getPatch() to get a value from a PATCH request #16188Phalcon\Http\Request::getFilteredPatch() to get a value filtered from a PATCH request #16188Phalcon\Http\Request::hasPatch() to check if a value exist in a PATCH request #16188Phalcon\Mvc\View\Engine\Volt\Compiler::isTagFactory to correctly detect a TagFactory object without throwing an error #16097Phalcon\Cli, Phalcon\Dispatcher and Phalcon\Application components to ensure not null values are passed to methods #16186Phalcon\Form::clear to correctly clear the elements and not recurse #15956Phalcon\Config\Config::setData to pass the insensitive flag to child objects #16171Phalcon\Config\Adapter\Groupped::__construct to pass the insensitive flag to child objects #16171Phalcon\Session\Manager::setName, removing the regex check for the name for custom adapters to work with create_sid() #16170PdoResult::fetchAll when passed class name in 2nd argument #16177Forms\Form::label to accept an array as a default variable #16180Phalcon\Encryption\Security to take into account the workFactor in the cost calculation #16153Phalcon\Db\Adapter\Pdo\Mysql::describeIndexes to assign an empty string in the index type of null and remove warnings #16157Phalcon\Db\Adapter\Pdo\Sqlite::describeIndexes to assign an empty string in the index type of null and remove warnings #16157Phalcon\Mvc\Model\Manager::notifyEvent to return true instead of null on success #16161Phalcon\Encryption\Security\JWT\Validator::validateExpiration to correctly validate the exp claim #16166Phalcon\Filter\Sanitize\StringVal to accept flags for htmlspecialchars() #16135Phalcon\Html\Escaper::attributes() to honor the $flags set for htmlspecialchars() #16134Phalcon\Html\Escaper::attributes() to accept any value and transform it to string #16123Phalcon\Logger\AbstractLogger::getLevelNumber() to better check for string levels #16123Phalcon\Encryption\Security\JWT\Validator::get() and Phalcon\Encryption\Security\JWT\Validator::set() for validation data #16115Phalcon\Encryption\Security\JWT\Token\Token::validate() to correctly call validator methods #16115Phalcon\Logger\Adapter\Stream::process to open the log file, check for locks, write contents and close the stream #16072array in Phalcon\Annotations\Reflection class methods #16106Phalcon\Html\Escaper::attributes() to also accept an array of attributes #16108Phalcon\Encryption\Security\JWT\Token::validate() to validate a token's claims #16094Phalcon\Encryption\Security\JWT\Token::verify() to verify a token's signature #16094Phalcon\Encryption\Security\JWT\Validator::getErrors() to return any errors with the validation as an array #16094object & ?object #16023Phalcon\Filter\Validation\Validator\Digit to use only strings for ctype_* calls #16064Phalcon\Flash\AbstractFlash::outputMessage to return the message (implicitFlush) #16063Phalcon\Filter\Validation\Validator\Numericality to correctly detect illegal characters within string numbers #16070Phalcon\Mvc\Model class #16080tag helpers only accept parameters with double quotesPhalcon\Tag::form() to Phalcon\Tag::formLegacy (helper form_legacy) #16019Phalcon\Cli\Router::getMatchedRoute()Phalcon\Cli\RouterInterface::getMatchedRoute()Phalcon\Mvc\Router::getMatchedRoute()Phalcon\Mvc\RouterInterface::getMatchedRoute() to return RouterInterface or null #16030Phalcon/Storage/Serializer/Base64::unserialize()Phalcon/Storage/Serializer/Igbinary::unserialize()Phalcon/Storage/Serializer/Igbinary::serialize()Phalcon/Storage/Serializer/Php::unserialize() to reset isSuccess value #16040Phalcon\Paginator\Adapter\Model::paginate() fix group parameter breaking total items #16042Phalcon\Mvc\Model::doLowUpdate() prevent RawValue getting overwritten #16037Phalcon\Image\*
getInternalImImage() (same as getImage()) for Phalcon\Image\Adapter\Imagickwebp images for Phalcon\Image\Adapter\Gd #15977Phalcon\Mvc\Model\ManagerInterface::getBuilder() to return the existing builder (created by createBuilder()) #15966Phalcon\Mvc\Model\Manager::getBuilder() to return the existing builder (created by createBuilder()) #15966Phalcon\Tag::textArea() to check if the value is null before calling htmlspecialchars #15992Phalcon/Filter/Validation/Validator/AlnumPhalcon/Filter/Validation/Validator/AlphaPhalcon/Filter/Validation/Validator/ConfirmationPhalcon/Filter/Validation/Validator/CreditCardPhalcon/Filter/Validation/Validator/StringLength/MaxPhalcon/Filter/Validation/Validator/StringLength/Min to check if the value is null before calling internal PHP methods #15992Phalcon\Html\Helper\Title to properly use indent and delimiter #15984Phalcon\Html\Helper\Doctype to properly use indent and delimiter #15984Phalcon\Mvc\View\Engine\Volt::isIncluded() and Phalcon\Mvc\View\Engine\Volt::length() to check for null values before calls to php methods #15984Phalcon\Mvc\View\Engine\Volt\Compiler::expression() to use double quotes instead of single ones #15984Phalcon\Support\Version::getPart() to always return string values #15984Phalcon\Dispatcher\DispatcherInterface::setModuleName() to accept null #15997Phalcon\Dispatcher\AbstractDispatcher::setModuleName() to accept null #15997Phalcon\Dispatcher\AbstractDispatcher::getModuleName() to also return null #15997StringVal filter to now use htmlspecialchars() #15978StringValLegacy filter using filter_var() for PHP < 8.1 #15978Phalcon\Http\Response::getQualityHeader() to check if the server variable is null before performing preg_split #15984Phalcon\Session\Bag::__construct() to accept a Phalcon\Session\Manager as the first parameter and name as the second one #15904Phalcon\Logger\Logger to no longer depend on PSR interfaces #15925Phalcon\Cache\Cache to no longer depend on PSR interfaces #15927Phalcon\Html\Link to no longer depend on PSR interfaces #15930Phalcon\Encryption\Crypt::isValidDecryptLength($input) to allow checking for the length of the decryption string #15879Phalcon\Di\InitializationAwareInterface to allow auto calling the initialize method when accessing service through DIC #15916Phalcon\Storage\Serializer\MemcachedIgbinaryPhalcon\Storage\Serializer\MemcachedJsonPhalcon\Storage\Serializer\MemcachedPhpPhalcon\Storage\Serializer\RedisIgbinaryPhalcon\Storage\Serializer\RedisJsonPhalcon\Storage\Serializer\RedisMsgpackPhalcon\Storage\Serializer\RedisNonePhalcon\Storage\Serializer\RedisPhp to be used if adapter serialization is required #15904Phalcon\Logger\LoggerInterfacePhalcon\Logger\AbstractLogger to be used in the logger class but also the proxy-psr3 repo #15925Phalcon\Cache\CacheInterfacePhalcon\Cache\AbstractCache to be used in the cache class but also the proxy-psr16 repo #15927Phalcon\Html\Link\Interfaces\EvolvableLinkInterfacePhalcon\Html\Link\Interfaces\EvolvableLinkProviderInterfacePhalcon\Html\Link\Interfaces\LinkInterfacePhalcon\Html\Link\Interfaces\LinkProviderInterfacePhalcon\Html\Link\AbstractLinkPhalcon\Html\Link\AbstractLinkProvider to be used in the link class but also the proxy-psr13 repo #15930Phalcon\Translate\Adapter\Csv::toArray() and Phalcon\Translate\Adapter\NativeArray::toArray() to return the translation array back #15902Phalcon\Html\Helper\Input\Numeric to produce correct elements #15896Phalcon\Storage\Adapter\* to correctly store null values #15904Phalcon\Container\Container and moved its contents to the proxy-psr11 repo #15928Phalcon\Http\Message\* and Phalcon\Http\Server\* classes. This removes PSR from Phalcon. PSR-7 available in v6 #15929Phalcon\Db\Result\Pdo to Phalcon\Db\Result\PdoResult to avoid collisions with \PDO #15874 [doc]Phalcon\Validation to Phalcon\Filter\ValidationPhalcon\Html\Helper\Title:setSeparator to allow setting the separator independently #15866Phalcon\Logger\AbstractAdapter::getFormattedItem() to not add PHP_EOL at the end of the message and added it to the Phalcon\Logger\Adapter\Stream #14547Phalcon\Html\Helper\Title:__invoke() to not use the $separator as parameter - no need to redefine it in a view #15866Phalcon\Support\Helper\SnakeCase and Phalcon\Support\Helper\KamelCase #15850Phalcon\Mvc\Router\Route::getName() and Phalcon\Mvc\Router\Route::getHostname() to also return null #15880Phalcon\Mvc\Router\RouteInterface::getName() and Phalcon\Mvc\Router\RouteInterface::getHostname() to also return null #15880Phalcon\Mvc\Model::findFirst() to return mixed or null #15883Phalcon\Mvc\Model::belongsTo() parameter options array by default #15971Phalcon\Mvc\Model::hasMany() parameter options array by default #15971Phalcon\Mvc\Model::hasOne() parameter options array by default #15971Phalcon\Mvc\Model::hasOneThrough() parameter options array by default #15971Phalcon\Mvc\Model\Manager::addHasMany() parameter options array by default #15971Phalcon\Mvc\Model\Manager::addHasManyToMany() parameter options array by default #15971Phalcon\Mvc\Model\Manager::addHasOne() parameter options array by default #15971Phalcon\Mvc\Model\Manager::addHasOneThrough() parameter options array by default #15971Phalcon\Mvc\Model\Manager::addBelongsTo() parameter options array by default #15971Phalcon\Support\Helper\Str\KebabCase, Phalcon\Support\Helper\Str\PascalCase and Phalcon\Support\Helper\Str\SnakeCase helpers #15850Phalcon\Mvc\View\Engine\Volt\Compiler::functionCall() to check for container presence before checking the tag service #15842Phalcon\Di\FactoryDefault() to set assets and tag as shared services #15847Phalcon\Forms\Element\AbstractElement::getLocalTagFactory() to return the tagFactory from itself, the form, the DI or a new instance #15847 [doc]sha1 with hash("sha256", $data) to ensure that there are no collisions from the hashing algorithm #15844Phalcon\Support\Helper\Str\Camelize to accept a third boolean parameter indicating whether the result will have the first letter capitalized or not #15850Phalcon\Mvc\Model::existsBelongsTo()Phalcon\Mvc\Model::existsHasMany()Phalcon\Mvc\Model::existsHasOne()Phalcon\Mvc\Model::existsHasOneThrough()Phalcon\Mvc\Model::existsHasManyToMany()Phalcon\Translate\Adapter\Csv::exists()Phalcon\Translate\Adapter\Gettext::exists()Phalcon\Translate\Adapter\NativeArray::exists() #15785Phalcon\Container to Phalcon\Container\Container #15796Phalcon\Support\Collection::get() to return the default value if the key does not exist or the value is null to mirror the behavior of v3. #15370Phalcon\Registry to Phalcon\Support\Registry #15802Phalcon\Url to Phalcon\Mvc\Url #15798Phalcon\Loader to Phalcon\Autoload\Loader #15797Phalcon\Autoload\Loader:
registerClasses() to setClasses()registerDirectories() to setDirectories()registerExtensions() to setExtensions()registerFiles() to setFiles()registerNamespaces() to setNamespaces() #15797Phalcon\Di to Phalcon\Di\Di #15799Phalcon\Tag from the framework in favor of Phalcon\Html\TagFactory #15801Phalcon\Forms\Form requires a Phalcon\Html\TagFactory to be set before it can render elements #15801Phalcon\Di\FactoryDefault will now return a Phalcon\Html\TagFactory for the tag service #15801Phalcon\Mvc\Model::hasBelongsTo()Phalcon\Mvc\Model::hasHasMany()Phalcon\Mvc\Model::hasHasOne()Phalcon\Mvc\Model::hasHasOneThrough()Phalcon\Mvc\Model::hasHasManyToMany()Phalcon\Translate\Adapter\Csv::has()Phalcon\Translate\Adapter\Gettext::has()Phalcon\Translate\Adapter\NativeArray::has() #15785filter, camelize, dynamic and uncamelize in Phalcon\Support\HelperFactory #15805Phalcon\Autoload\Loader::getDebug() to collect debugging information from the loader (enabled from the constructor) #15797Phalcon\Logger\LoggerFactory::load() to correctly use the key of the adapters array as the name of the adapter #15831Phalcon\Dispatcher\Dispatcher::setParams() not updating local params during dispatch() loop #15603belongsTo() relation #15148Phalcon\Exception; replaced by \Exception #15800Phalcon\Acl:
Phalcon\Acl\ComponentAware to Phalcon\Acl\ComponentAwareInterfacePhalcon\Acl\RoleAware to Phalcon\Acl\RoleAwareInterface #15691require to require_once in Phalcon\Loader to avoid conflicts with other loaders #15489require to require_once in Phalcon\Cli\Console and Phalcon\Mvc\Application for a bit of extra performance #15489Phalcon\Collection has been moved under the Support namespace:
Phalcon\Collection to Phalcon\Support\CollectionPhalcon\Collection\Exception to Phalcon\Support\Collection\ExceptionPhalcon\Collection\ReadOnly to Phalcon\Support\Collection\ReadOnlyPhalcon\Collection to Phalcon\Support\Collection #15700Phalcon\Session\Bag:
Phalcon\Session\Bag::construct to accept a container instead of internally calling the defaultPhalcon\Session\Bag::construct to throw an exception if the container is not specifiedPhalcon\Session\Bag::init to store the data in the session #15494Phalcon\Events\Event::construct() to allow source to be nullable #15133Phalcon\Crypt
Phalcon\Crypt\Exception to Phalcon\Crypt\Exception\ExceptionPhalcon\Crypt\Mismatch to Phalcon\Crypt\Exception\MismatchauthTag with the encryption string and process it with the decryption string #15717Phalcon\Encryption
Phalcon\Crypt to Phalcon\Encryption\CryptPhalcon\Security to Phalcon\Encryption\SecuritySecurity namespace under Encryption
Security\JWT\Exceptions\UnsupportedAlgorithmException to Encryption\Security\JWT\Exceptions\UnsupportedAlgorithmExceptionSecurity\JWT\Exceptions\ValidatorException to Encryption\Security\JWT\Exceptions\ValidatorExceptionSecurity\JWT\Signer\AbstractSigner to Encryption\Security\JWT\Signer\AbstractSignerSecurity\JWT\Signer\Hmac to Encryption\Security\JWT\Signer\HmacSecurity\JWT\Signer\None to Encryption\Security\JWT\Signer\NoneSecurity\JWT\Signer\SignerInterface to Encryption\Security\JWT\Signer\SignerInterfaceSecurity\JWT\Token\AbstractItem to Encryption\Security\JWT\Token\AbstractItemSecurity\JWT\Token\Enum to Encryption\Security\JWT\Token\EnumSecurity\JWT\Token\Item to Encryption\Security\JWT\Token\ItemSecurity\JWT\Token\Parser to Encryption\Security\JWT\Token\ParserSecurity\JWT\Token\Signature to Encryption\Security\JWT\Token\SignatureSecurity\JWT\Token\Token to Encryption\Security\JWT\Token\TokenSecurity\JWT\Builder to Encryption\Security\JWT\BuilderSecurity\JWT\Validator to Encryption\Security\JWT\ValidatorSecurity\JWT\Validator to Encryption\Security\JWT\ValidatorSecurity\Exception to Encryption\Security\ExceptionSecurity\Random to Encryption\Security\Random #15729Phalcon\Crypt\Crypt::getHashAlgo() to Phalcon\Crypt\Crypt::getHashAlgorithm()Phalcon\Crypt\Crypt::getAvailableHashAlgos() to Phalcon\Crypt\Crypt::getAvailableHashAlgorithms()Phalcon\Crypt\Crypt::setHashAlgo() to Phalcon\Crypt\Crypt::setHashAlgorithm() #15717Phalcon\Factory\AdapterFactory::getAdapters() to Phalcon\Factory\AdapterFactory::getServices() #15717Phalcon\Crypt\Crypt::__construct() to have useSigning set to true by default #15717Phalcon\Config
Phalcon\Config to Phalcon\Config\ConfigPhalcon\Config\Config::path by making the delimiter parameter a stringPhalcon\Config\Adapter\Ini::__construct to not accept null as the mode. The default is now INI_SCANNER_NORMAL (2)Phalcon\Db\Adapter\AdapterInterface::getInternalHandler() and Phalcon\Db\Adapter\Pdo\AbstractPdo::getInternalHandler() to return var instead of \PDO for custom adapters with different engines #15119Phalcon\Filter to Phalcon\Filter\Filter; added more tests #15726Phalcon\Mvc\Model::getPreparedQuery() to return QueryInterface instead of Query #15562Phalcon\Cache to Phalcon\Cache\Cache #15728Phalcon\Factory\AdapterFactory to define the factory exception in getExceptionClass() instead of a property. #15728Phalcon\Db\Adapter\AbstractAdapter::getSqlVariables() to Phalcon\Db\Adapter\AbstractAdapter::getSQLVariables() to align with the rest of the getSQL* methods #15637Phalcon\Logger to Phalcon\Logger\Logger #15727Phalcon\Escaper
Phalcon\Escaper to Phalcon\Html\EscaperPhalcon\Escaper\EscaperInterface to Phalcon\Html\Escaper\EscaperInterfacePhalcon\Escaper\Exception to Phalcon\Html\Escaper\ExceptionescapeCss() becomes css()escapeJs(), becomes js()escapeHtml() becomes html()escapeHtmlAttr() becomes attributes()escapeUrl() becomes url()setHtmlQuoteType() becomes setFlags() #15757Phalcon\Encryption\Security::hash() to also use password_hash() and accept ARGON2* algorithms #15731realClassName in Phalcon\Mvc\Router\Route::getRoutePaths() if definition is string to make processing same as if array definition #15067Phalcon\Validation::getValue() behavior to get value from data if not found in entity. #14203Phalcon\Forms\Form::isValid() signature: added whitelist argument. #14203Phalcon\Support\Collection\ReadOnly to Phalcon\Support\Collection\ReadOnlyCollection to avoid conflicts with the read-only feature in PHP 8.1 #15767Phalcon\Text - replaced by Phalcon\Support\Helper\Str\* #15776Phalcon\Helper\Arr - replaced by Phalcon\Support\Helper\Arr\* #15776Phalcon\Helper\File - replaced by Phalcon\Support\Helper\File\* #15776Phalcon\Helper\Json - replaced by Phalcon\Support\Helper\Json\* #15776Phalcon\Helper\Number - replaced by Phalcon\Support\Helper\Number\* #15776Phalcon\Helper\Str - replaced by Phalcon\Support\Helper\Str\* #15776Phalcon\Text, Phacon\Helper\* from the code replacing it with Phalcon\Support\Helper\* #15776phalcon/phalcon thus increasing coverage #15776Phalcon\Assets\Manager to require a Phalcon\Html\TagFactory in its constructor #15776Phalcon\Events\AbstractEventsAware class to handle the Events Manager when necessary #15691Phalcon\Acl\Adapter\AdapterInterface::getInheritedRoles() and Phalcon\Acl\Adapter\Memory::getInheritedRoles() that returns the inherited roles based on a passed role name (or all if no parameter supplied) #15154Phalcon\Crypt
Phalcon\Crypt\Padding\PadInteface and padding adapters
Phalcon\Crypt\Padding\AnsiPhalcon\Crypt\Padding\Iso10126Phalcon\Crypt\Padding\IsoIekPhalcon\Crypt\Padding\NoopPhalcon\Crypt\Padding\PadInterfacePhalcon\Crypt\Padding\Pkcs7Phalcon\Crypt\Padding\SpacePhalcon\Crypt\Padding\ZeroPhalcon\Crypt\PadFactory to easily create padding adaptersPhalcon\Cache\Adapter\*::setForever() and Phalcon\Storage\Adapter\*::setForever() to allow storing a key forever #15485Phalcon\Encryption\Security::getHashInformation() to return information for a hash #15731Phalcon\Encryption\Security::CRYPT_ARGON2I and Phalcon\Encryption\Security::CRYPT_ARGON2ID #15731allowEmpty checks to common validators #15515Phalcon\Forms\Form::getFilteredValue() to get filtered value without providing entity #15438Phalcon\Forms\Form::setWhitelist() and Phalcon\Forms\Form::getWhitelist() #14203dirtyState serialization in Phalcon\Mvc\Model #15571Phalcon\Html\TagFactory (call service as a method) #15776Phalcon\Support\HelperFactory (call service as a method) #15776Phalcon\Html\Helper\Doctype helper for doctype generation #15776style or link tag option for Phalcon\Html\Helper\Style #15776Query::getExpression() return type #15553Phalcon\Mvc\Model::getRelated() to correctly return relationships (cached or not) when the foreign key has changed #15649 [doc]Phalcon\Db\Adapter\Pdo\*, Phalcon\Mvc\Model and Phalcon\Mvc\Model\MetaData\Strategy\Annotations to treat BIGINT numbers as string #15632Phalcon\Crypt\Crypt::decrypt() to correctly calculate the hash when using signed mode #15717Phalcon\Mvc\Model\Manager::isVisibleModelProperty() to correctly check if setting property is visible #15276Phalcon\Config\Config::merge to retain numeric indexes in deep merges #14705phpinfo() #15269Phalcon\Storage\Adapter\Redis::getAdapter() and Phalcon\Cache\Adapter\Redis::getAdapter() to accept the connection timeout in the constructor options #15744Phalcon\Db\Adapter\AbstractAdapter::getSQLVariables() to return an empty array when initialized #15637Phalcon\Cache\Adapter\* and Phalcon\Storage\Adapter\* to delete a key when set() is called with a zero or negative TTL #15485Phalcon\Db\Adapter\Pdo\Mysql to not use PDO::ATTR_EMULATE_PREPARES and PDO::ATTR_STRINGIFY_FETCHES by default. This allows numbers to be returned with resultsets instead of strings for numeric fields #15361Phalcon\Validation\Validator\File to use messageFileEmpty #14928Phalcon\Db\RawValue usage bugs in Phalcon\Mvc\Model::doLowUpdate() #15413type attribute for stylesheet links #15776Phalcon\Debug to not throw an exception if a URL service is not present #15381Phalcon\Kernel - obsolete #15776Phalcon\Storage\Adapter\* and Phalcon\Cache\Adapter\* to allow an empty key prefix to be set if needed. #15480Phalcon\Db\Adapter\AdapterInterface:lastInsertId() to be identical as Pdo:lastInsertId()Phalcon\Db\Adapter\AdapterInterface:close() now returns void instead of boolPhalcon\Db\Adapter\AdapterInterface:connect() now returns void instead of bool and 1st argument default value is empty array instead of null #15659Phalcon\Security\JWT\Builder::addClaim for custom JWT claims. #15656Phalcon\Support\Helper namespace:
Phalcon\Support\HelperFactory, a handy factory to help with string, array and other manipulationshelper service in Phalon\Di\FactoryDefault and Phalcon\Di\FactoryDefault\Cli to point to the Phalcon\Support\HelperFactoryPhalcon\Support\Helper\Arr\BlacklistPhalcon\Support\Helper\Arr\ChunkPhalcon\Support\Helper\Arr\FirstPhalcon\Support\Helper\Arr\FirstKeyPhalcon\Support\Helper\Arr\FlattenPhalcon\Support\Helper\Arr\GetPhalcon\Support\Helper\Arr\GroupPhalcon\Support\Helper\Arr\HasPhalcon\Support\Helper\Arr\IsUniquePhalcon\Support\Helper\Arr\LastPhalcon\Support\Helper\Arr\LastKeyPhalcon\Support\Helper\Arr\OrderPhalcon\Support\Helper\Arr\PluckPhalcon\Support\Helper\Arr\SetPhalcon\Support\Helper\Arr\SliceLeftPhalcon\Support\Helper\Arr\SliceRightPhalcon\Support\Helper\Arr\SplitPhalcon\Support\Helper\Arr\ToObjectPhalcon\Support\Helper\Arr\ValidateAllPhalcon\Support\Helper\Arr\ValidateAnyPhalcon\Support\Helper\Arr\WhitelistPhalcon\Support\Helper\File\BasenamePhalcon\Support\Helper\Json\Encode [doc]Phalcon\Support\Helper\Json\DecodePhalcon\Support\Helper\Number\IsBetweenPhalcon\Support\Helper\Str\CamelizePhalcon\Support\Helper\Str\ConcatPhalcon\Support\Helper\Str\CountVowelsPhalcon\Support\Helper\Str\DecapitalizePhalcon\Support\Helper\Str\DecrementPhalcon\Support\Helper\Str\DirFromFilePhalcon\Support\Helper\Str\DirSeparatorPhalcon\Support\Helper\Str\DynamicPhalcon\Support\Helper\Str\EndsWithPhalcon\Support\Helper\Str\FirstBetweenPhalcon\Support\Helper\Str\FriendlyPhalcon\Support\Helper\Str\HumanizePhalcon\Support\Helper\Str\IncludesPhalcon\Support\Helper\Str\IncrementPhalcon\Support\Helper\Str\InterpolatePhalcon\Support\Helper\Str\IsAnagramPhalcon\Support\Helper\Str\IsLowerPhalcon\Support\Helper\Str\IsPalindromePhalcon\Support\Helper\Str\IsUpperPhalcon\Support\Helper\Str\LenPhalcon\Support\Helper\Str\LowerPhalcon\Support\Helper\Str\PrefixPhalcon\Support\Helper\Str\RandomPhalcon\Support\Helper\Str\ReduceSlashesPhalcon\Support\Helper\Str\StartsWithPhalcon\Support\Helper\Str\SuffixPhalcon\Support\Helper\Str\UcwordsPhalcon\Support\Helper\Str\UncamelizePhalcon\Support\Helper\Str\UnderscorePhalcon\Support\Helper\Str\Upper#15738build/phalcon/32bits, build/phalcon/64bits and build/phalcon/safe) into single universal inside build/phalcon #15647build/ directory #15647composer.json to use PSR 1.1.x #15504Phalcon\Di\Injectable:getDI() to set default DI when no DI is set #15629Phalcon\Flash\Direct::setCssIconClasses and Phalcon\Flash\Session::setCssIconClasses to allow setting icons in the flash messages (bootstrap related) #15292Phalcon\Http\Message\RequestMethodInterface and Phalcon\Http\Message\ResponseStatusCodeInterface that contain constants to be used for any HTTP implementations (see PHP-FIG) #15615Phalcon\Container interface to abide with Psr\Container\ContainerInterface after the upgrade to PSR 1.1.x #15504Phalcon\Forms\Form when no entity is passed with isValid(), it uses the entity set in the form #15567Phalcon\Logger\Adapter\* to not allow serialization of the object. Added an exception when destroying the object while in transaction mode #15638Phalcon\Mvc\Model\Resultset\Complex::__construct now accepts Psr\SimpleCache\CacheInterface for the cachePhalcon\Mvc\Model\Resultset\Simple::__construct now accepts Psr\SimpleCache\CacheInterface for the cachePhalcon\Mvc\Model\Resultset::__construct now accepts Psr\SimpleCache\CacheInterface for the cachePhalcon\Mvc\Model\Resultset::getCache now returns Psr\SimpleCache\CacheInterface #15471Phalcon\Db\Adapter\AbstractAdapter:delete() signature of optional parameters. #15363bindCounts argument to array type in:
Phalcon\Db\Dialect:getColumnList()Phalcon\Db\Dialect:getSqlColumn()Phalcon\Db\Dialect:getSqlExpression()Phalcon\Db\Dialect:getSqlExpressionBinaryOperations()Phalcon\Db\Dialect:getSqlExpressionCase()Phalcon\Db\Dialect:getSqlExpressionCastValue()Phalcon\Db\Dialect:getSqlExpressionConvertValue()Phalcon\Db\Dialect:getSqlExpressionFunctionCall()Phalcon\Db\Dialect:getSqlExpressionGroupBy()Phalcon\Db\Dialect:getSqlExpressionHaving()Phalcon\Db\Dialect:getSqlExpressionJoins()Phalcon\Db\Dialect:getSqlExpressionLimit()Phalcon\Db\Dialect:getSqlExpressionList()Phalcon\Db\Dialect:getSqlExpressionObject()Phalcon\Db\Dialect:getSqlExpressionOrderBy()Phalcon\Db\Dialect:getSqlExpressionScalar()Phalcon\Db\Dialect:getSqlExpressionUnaryOperations()Phalcon\Db\Dialect:getSqlExpressionWhere()Phalcon\Db\DialectInterface:getSqlExpression()Phalcon\Db\Adapter\AbstractAdapter:delete() when bindTypes argument is passed. #15363Phalcon\Storage\Adapter\Redis::getAdapter to use passed connectionTimeout, retryInterval and readTimeout options for the connection #15484Phalcon\Mvc\View\Engine\Volt\Compiler for a use case when a block will return null vs an array for statementList in PHP 8 #15556Phalcon\Translate\Adapter\Gettext::setLocale signature to allow the category and an array of locales #14764Phalcon\Version is now moved to Phalcon\Support\Version
_getSpecialVersion and _getVersion have been removed (marked deprecated in v4)Phalcon\Debug and the Volt compiler have been adjusted #15422Phalcon\Debug is now moved to Phalcon\Support\Debug; CSS/JS references updated #14817Phalcon\Logger:
Phalcon\Logger\Item::getName to Phalcon\Logger\Item::getLevelNamePhalcon\Logger\Item::getType to Phalcon\Logger\Item::getLevelDateTimeImmutable on a per item basis - more accurate timingPhalcon\Logger to accept a DateTimeZone in the constructor%type% to %level% to align with the variables #15411Phalcon\Mvc\Model::getSchema(), Phalcon\Mvc\ModelInterface::getSchema(), Phalcon\Mvc\Model\Manager::getModelSchema() Phalcon\Mvc\Model\ManagerInterface::getModelSchema() to return string | null so as to abide with the latest Zephir #15411Phalcon\Support\Helper\Str\Interpolate #15411Phalcon\Mvc\Model\ManagerInterface:getRelationByAlias() return type from Relation|bool to RelationInterface|bool #15343Phalcon\Paginator\Repository:getItems() return type from array to ResultsetInterface #15074BINARY and VARBINARY support for Phalcon\Db\Adapter\Mysql #14927Phalcon\Db\Profiler\Item::getTotalElapsedNanoseconds() and Phalcon\Db\Profiler\Item::getTotalElapsedMilliseconds() for more precision #15249Phalcon\Http\Response\Cookies::isSent() and Phalcon\Http\Response\Headers::isSent(); Added logic to not send the headers or cookies twice. #15334Phalcon\Validation\Validator\File\AbstractFile::checkIsUploadedFile() method to allow overriding when adding files to the $_FILES array directly (not uploading). #15051Phalcon\Support\Helper\Str\Interpolate to be used throughout the code for interpolation (Logger/Translator) %type% to %level% to align with the variables #15411Phalcon\Support\HelperFactory for an easier creation/access of helpers #15411Phalcon\Db\Profiler\Item calculation for seconds #15249Phalcon\Http\Message\ServerRequestFactory to populate with superglobals #15286Phalcon\Mvc\Model\Query\BuilderInterface::orderBy to use var instead of string #15415Phalcon\Db\Adapter\Pdo\AbstractPdo::connect to take into account the persistent option for relevant connections #15241Phalcon\Image\Adapter\Gd::processText to correctly call imagettfbbox when a font is specified #15188Phalcon\Cache to cast keys as strings before sending them to adapters #15249Logger\Log::log() log to recognize all log levels #15214setClaims to be protected so that the Phalcon\Security\JWT\Builder class can be properly extended. #15322Phalcon\Mvc\Model::average() to return float value when is string #15287Phalcon\Storage\Serializer\Igbinary to store is_numeric and bool values properly #15240Phalcon\Validation\Validator\Confirmation was failing to compare cases such as 000123 = 123 #15347Phalcon\Storage\Adapter failing to retrieve empty like stored data (such as [], 0, false) 15125function getEventsManager() to allow null return 15010Phalcon\Flash\Session::has() to properly check if any messages are existing 15204Phalcon\Forms\Element\Select::__construct()Phalcon\Assets\Manager::addCss()Phalcon\Assets\Manager::addJs()Phalcon\Db\Adapter\AdapterInterface::execute(), Phalcon\Db\Adapter\AdapterInterface::fetchOne() and Phalcon\Db\Adapter\AdapterInterface::query()Phalcon\Annotations\Reader::parse() to return constants annotations #15919Phalcon\Annotations\Reflection::getConstantsAnnotations() method that returns constants annotations #15919Phalcon\Annotations\Adapter\AdapterInterface:
getConstant() method that returns class constant annotations collectiongetConstants() method that returns class constants annotations array list