All pull requests

Pull requests

• Fix Entity::toRawArray() returning a Time instance for assigned date attributes

  needs templatestale
  #10772·kushkrg opened Nov 12, 2026·

  ·
  1

  1

• docs: warn against passing user input to orderBy() and groupBy()

  documentation
  #10771·michalsn opened Nov 12, 2026Member·2 of 5 tasks·

  ·

• fix(HTTP): fix query string truncation in SiteURIFactory::parseRequestURI()

  bug
  #10769·gr8man opened Nov 12, 2026Contributor·4 of 5 tasks·

  ·

• fix(Database): reset pretend mode in BaseConnection::prepare() on exception

  bug
  #10768·gr8man opened Nov 12, 2026Contributor·3 of 5 tasks·

  ·
  1

• fix(Cache): reject directory traversal sequences and separators in FileHandler::validateKey()

  bug
  #10766·gr8man opened Nov 11, 2026Contributor·4 of 5 tasks·

  ·

• fix(Helpers): escape attributes and unsupported messages in HTML media tags

  bug
  #10765·gr8man opened Nov 11, 2026Contributor·4 of 5 tasks·

  ·

• fix(API): prevent TypeError and handle integer overflow in paginate()

  bug
  #10764·gr8man opened Nov 11, 2026Contributor·4 of 5 tasks·

  ·

• chore: bump laminas/laminas-escaper to ^2.19 as minimum

  4.8
  #10763·ddevsr opened Nov 11, 2026Collaborator·2 of 5 tasks·

  ·
  3

• fix(Router): fix back-reference regex in replaceBackReferences() for 9+ placeholders

  bug
  #10762·banghamid opened Nov 11, 2026Contributor·4 of 5 tasks·

  ·
  4

• fix(Router): handle {locale} placeholder in redirect routes

  bug
  #10761·banghamid opened Nov 11, 2026Contributor·4 of 5 tasks·

  ·
  2

• fix(Session): release lock state on close and check session ID in MemcachedHandler

  bug
  #10760·banghamid opened Nov 11, 2026Contributor·4 of 5 tasks·

  ·
  6

• fix(Session): sync Request cookie global when unsetting invalid session cookie

  bug
  #10759·banghamid opened Nov 11, 2026Contributor·4 of 5 tasks·

  ·

• fix(Cache): use __ci_value field in PredisHandler::increment() and decrement()

  bug
  #10758·banghamid opened Nov 10, 2026Contributor·4 of 5 tasks·

  ·
  2

• fix(Helpers): handle zero key and non-array intermediate values in ArrayHelper::dotKeyExists()

  bug
  #10757·banghamid opened Nov 10, 2026Contributor·5 tasks done·

  ·
  2

• fix(Helpers): prevent TypeError in excerpt() when phrase is not found or radius is odd

  bug
  #10756·banghamid opened Nov 10, 2026Contributor·5 tasks done·

  ·
  7

• fix(Helpers): handle array POST values when inferring selected options in form_dropdown()

  bug
  #10755·banghamid opened Nov 10, 2026Contributor·4 of 5 tasks·

  ·

• perf: reduce closure invocation overhead in DataConverter::reconstruct() for plain objects

  enhancement
  #10754·gr8man opened Nov 9, 2026Contributor·4 of 5 tasks·

  ·

• perf: cache type keys in DataConverter to avoid repeated array_keys calls

  enhancement
  #10753·gr8man opened Nov 9, 2026Contributor·4 of 5 tasks·

  ·

• chore(deps-dev): update rector/rector requirement from 2.8.3 to 2.8.4 in the composer-dependencies group

  dependenciesphp
  #10752·dependabot[bot] opened Nov 9, 2026Bot·

  ·

• fix(Session): send SameSite attribute in BaseHandler::destroyCookie()

  bug
  #10748·gr8man opened Nov 8, 2026Contributor·3 of 5 tasks·

  ·
  1

• fix(Database): escape table, constraint, and schema in Forge::_dropKeyAsConstraint()

  bug
  #10747·gr8man opened Nov 8, 2026Contributor·3 of 5 tasks·

  ·
  1

• fix(Images): handle unsupported or missing extension in ImageMagickHandler::save()

  bug
  #10746·gr8man opened Nov 8, 2026Contributor·3 of 5 tasks·

  ·
  3

• fix(Security): improve regex and quote handling in strip_image_tags()

  bug
  #10745·gr8man opened Nov 8, 2026Contributor·3 of 5 tasks·

  ·
  6

• feat: Merging Attributes During Injection

  4.8enhancement
  #10738·neznaika0 opened Nov 6, 2026Contributor·5 tasks done·

  ·
  21

• fix(Session): use query binding for session lock in PostgreHandler

  bug
  #10737·gr8man opened Nov 5, 2026Contributor·3 of 5 tasks·

  ·
  2