CakePHP 5.4.2 Released

The CakePHP core team is happy to announce the immediate availability of CakePHP 5.4.1. This is a maintenance release for the 5.4 branch that fixes community reported issues, regressions.

Bugfixes

You can expect the following changes in 5.4.2. See the changelog for every commit.

  • Http\Client\Response now initializes its reasonPhrase attribute. This fixes TypeError being raised on test doubles.
  • Fatal error backtraces generated by PHP8.5+ are now preserved.
  • Fix the parsing logic in i18n extract to handle class name constants eg. Router::class
  • Cache::pool() now guards against re-entrant construction which can happen when a cache engine logs an error during construction, and the application’s logging uses cache pools.
  • Improved query generation for relations using subquery strategy and filtering queries with order by clauses.
  • Multipart email messages now protect against header injection via the Content-Disposition header. Thank you to mrraul124 for reporting this issue via the security mailing list.
  • Unbuffered queries now generate counts correctly.
  • PostGIS column reflection no longer hardcodes the schema to public.
  • Fixed subquery loading strategy errors related to nested joins.
  • RedisEngine no longer silently drops the tls configuration options when used with persistent connections.
  • Error handling no longer logs missing template errors when the templates do not have a dedicated handler method defined.

Contributors to 5.4.2

Thank you to all the contributors that submitted a pull request:

  • ADmad
  • Andrii Pukhalevych
  • Ishan Vyas
  • Jayden Ireland
  • Mark Scherer
  • Mark Story
  • Nicos Panayides
  • saeideng

As always, we would like to also thank all the contributors that opened issues, or updated the documentation.

Download a packaged release on github.