CakePHP Files

The CakePHP core team is happy to announce the immediate availability of CakePHP 5.4.1. This is a maintenance release for the 5.4 branch that fixes community reported issues, regressions.

Bugfixes

You can expect the following changes in 5.4.2. See the changelog for every commit.

• Http\Client\Response now initializes its reasonPhrase attribute. This fixes TypeError being raised on test doubles.
• Fatal error backtraces generated by PHP8.5+ are now preserved.
• Fix the parsing logic in i18n extract to handle class name constants eg. Router::class
• Cache::pool() now guards against re-entrant construction which can happen when a cache engine logs an error during construction, and the application's logging uses cache pools.
• Improved query generation for relations using subquery strategy and filtering queries with order by clauses.
• Multipart email messages now protect against header injection via the Content-Disposition header. Thank you to mrraul124 for reporting this issue via the security mailing list.
• Unbuffered queries now generate counts correctly.
• PostGIS column reflection no longer hardcodes the schema to public.
• Fixed subquery loading strategy errors related to nested joins.
• RedisEngine no longer silently drops the tls configuration options when used with persistent connections.
• Error handling no longer logs missing template errors when the templates do not have a dedicated handler method defined.

Contributors to 5.4.2

Thank you to all the contributors that submitted a pull request:

• ADmad
• Andrii Pukhalevych
• Ishan Vyas
• Jayden Ireland
• Mark Scherer
• Mark Story
• Nicos Panayides
• saeideng

As always, we would like to also thank all the contributors that opened issues, or updated the documentation.