Bug #17191: Fixed BaseUrl::isRelative($url) method in yii\helpers\BaseUrl (ggh2e3)
Bug #18469: Fixed Link::serialize(array $links) method in yii\web\Link (ggh2e3)
Bug #19060: Fix yii\widgets\Menu bug when using Closure for active item and adding additional tests in tests\framework\widgets\MenuTest (atrandafir)
Bug #19691: Allow using custom class to style error summary (skepticspriggan)
Bug #19817: Add MySQL Query addCheck() and dropCheck() (@bobonov)
Bug #19855: Fixed yii\validators\FileValidator to not limit some of its rules only to array attribute (bizley)
Bug #19927: Fixed console\controllers\MessageController when saving translations to database: fixed FK error when adding new string and language at the same time, checking/regenerating all missing messages and dropping messages for unused languages (atrandafir)
Bug #20002: Fixed superfluous query on HEAD request in serializer (xicond)
Bug #20005: Fix yii\console\controllers\ServeController to specify the router script (terabytesoftw)
Bug #20040: Fix type boolean in MSSQL (terabytesoftw)
Bug #20165: Adjust pretty name of closures for PHP 8.4 compatibility (@staabm)
Bug: CVE-2024-32877, Fix Reflected XSS in Debug mode (Antiphishing)
Bug: CVE-2024-4990, Fix Unsafe Reflection in base Component class (@mtangoo)
Enh #12743: Added new methods BaseActiveRecord::loadRelations() and BaseActiveRecord::loadRelationsFor() to eager load related models for existing primary model instances (PowerGamer1)
Enh #20030: Improve performance of handling ErrorHandler::$memoryReserveSize (antonshevelev, rob006)
Enh #20032: Added yii\helpers\BaseStringHelper::mask() method for string masking with multibyte support (salehhashemi1992)
Enh #20034: Added yii\helpers\BaseStringHelper::findBetween() to retrieve a substring that lies between two strings (salehhashemi1992)
Enh #20042: Add empty array check to ActiveQueryTrait::findWith() (renkas)
Enh #20087: Add custom attributes to script tags (skepticspriggan)
Enh #20121: Added yiisoft/yii2-coding-standards to composer require-dev and lint code to comply with PSR12 (razvanphp)
New #20137: Added yii\caching\CallbackDependency to allow using a callback to determine if a cache dependency is still valid (laxity7)
2.0.49.2 October 12, 2023
Bug #19925: Improved PHP version check when handling MIME types (schmunk42)
2.0.49.1 October 05, 2023
Bug #19940: File Log writer without newline (terabytesoftw)
Bug #19950: Fix Query::groupBy(null) causes error for PHP 8.1: trim(): Passing null to parameter [#1](https://github.com/yiisoft/yii2-framework/issues/1) ($string) of type string is deprecated (uaoleg)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Updates the requirements on yiisoft/yii2 to permit the latest version.
Changelog
Sourced from yiisoft/yii2's changelog.
... (truncated)
Commits
a90b663release version 2.0.50983f4a4Fix CHANGELOG formattingec52aabMerge pull request from GHSA-qg5r-95m4-mjgjafca29cMerge pull request from GHSA-cjcc-p67m-7qxm7091b68Fix testsaddCheck(),dropCheck()MariaDB. (#20174)177500aFix #19855: Fixedyii\validators\FileValidatorto not limit some of its rul...755463fFix: #20171: Support JSON columns for MariaDB 10.4 or higherc413c7bFix ci lint.01943baFix #20165: Adjust pretty name of closures for PHP 8.4 compatibility4dc1794Minor improvents.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show