v5.11.1

5.11.1 (2026-04-04)

Changed

Added

• Added Phalcon\Storage\Adapter\RedisCluster adapter to support Redis Cluster connections #16867
• Added Phalcon\Support\Settings to be used for ini settings throughout the framework #16873

Fixed

• Fixed Phalcon\Encryption\Security::computeHmac() to catch \ValueError thrown by PHP 8.1+ when an unknown hashing algorithm is passed #16893

Removed

v5.11.0

5.12.0 (2026-04-03)

Changed

• Changed Phalcon\Filter\Sanitize\IP to optimize the sanatization of IP address #16838
• Changed Phalcon\Encryption\Security\JWT\Builder::setPassphrase() to require digits and special characters #16847
• Changed Phalcon\Encryption\Security\JWT\Builder::getAudience() to return an empty array if not set #16846
• Changed Phalcon\Encryption\Security\Random::base() to use 16 bits by default #16845
• Changed Phalcon\Logger\Logger to use lowercase when reporting log levels (previously uppercase) #16852
• Changed Phalcon\Logger\Adapter\Stream to use a more efficient way to write messages in the logger instead of opening and closing the stream per message #16852
• Changed Phalcon\Logger\Adapter\Syslog to use the Enum instead of Logger constants #16852
• Changed the whole testing suite to run on phpunit only #16860 #16861 #16862

Added

• Added PIE (PHP Installer for Extensions) support #16832
• Added the ability to specify aliases for Phalcon\Di\Di services.#13042
• Added Phalcon\Encryption\Security\JWT\Validator::validateClaim() to validate custom claims #16843

Fixed

• Fixed Phalcon\Forms\Form::isValid() to apply field filters even when no validators are specified #16936
• Fixed Phalcon\Http\Request method getClientAddress() when using trustForwardedHeader #16836
• Fixed Phalcon\Acl\Adapter\Memory::isAllowed() and Phalcon\Mvc\Model\Binder to handle PHP 8.1+ union and intersection types by checking for ReflectionNamedType before calling getName() #16261
• Fixed memory leak in PHQL parser (phql_internal_parse_phql()) during repeated query execution. #16854
• Fixed a deadlock issue when running the db suite #16862

Removed

v5.10.0

5.10.0 (2025-12-25)

Changed

• Changed bind() and validate() method in Phalcon\Filter\Validation and Phalcon\Filter\Validation\ValidationInterface to accept $whitelist array of only allowed fields to be mutated when using entity #16800
• Changed Phalcon\Storage\Adapters\Libmemcached::getAdapter() to use 50ms for \Memcached::OPT_CONNECT_TIMEOUT #16818
• Changed Phalcon\Html\Helper\Input\* to honor Docbloc directives #16778

Added

• Added fails() method helper to Phalcon\Filter\Validation useful for standalone validation #16798

Fixed

• Fixed Phalcon\Config\Adapter\Yaml constructor to handle null return values from yaml_parse_file(), ensuring empty configuration files are treated as empty arrays instead of throwing errors.
• Fixed Phalcon\Http\Request method getClientAddress(true) to return correct IP address from trusted forwarded proxy. #16777
• Fixed Phalcon\Http\Request method getPost() to correctly return json data as well and unified both getPut() and getPatch() to go through the same parsing method. #16792
• Fixed Phalcon\Filter\Validation method bind() and validate() to correctly bind data when using entity as well as skip binding of fields not included in $whitelist #16800
• Fixed Phalcon\Http\Request method getPostData() when Content-Type header is not set #16804
• Fixed Phalcon\Events\ManagerInterface adding priority property #16817
• Fixed Phalcon\Storage\Adapters\Libmemcached::getAdapter() to correctly merge adapter options #16818
• Fixed Phalcon\Encryption\Crypt method checkCipherHashIsAvailable(string $cipher, string $type) to correctly check the cipher or hash type #16822
• Fixed Phalcon\Mvc\Model docblocks #16825

v5.9.3

5.9.3 (2025-04-19)

Changed

• Added Multi-Stage Dockerfile and Github action for release Docker images to ghcr.io and Docker Hub. #16752

Added

• Added Phalcon\Mvc\Router::setUriSource() to allow URI processing from $_GET['url'] or $_SERVER['REQUEST_URI'] as it was in v3 #16741

Fixed

• Fixed Phalcon\Mvc\Router to correctly handle numeric URI parts as it was in v3 #16741
• Fixed Phalcon\Mvc\Model\Binder to use ReflectionParameter::getType() instead of deprecated method, PHP 8.0 or higher issue. #16742
• Fixed Phalcon\Mvc\Model\Query to check if cache entry exists. #16747
• Fixed Phalcon\Mvc\Router to correctly match route when using query string URIs. #16749
• Fixed Phalcon\Mvc\Model::cloneResultset to properly parse fields that do not accept null values #16736

Removed

v5.9.2

5.9.2 (2025-04-03)

Fixed

• Fixed Phalcon\Translate\Adapter\Csv the escape argument is explicitly required in PHP 8.4 #16733
• Fixed Phalcon\Mvc\Model\Query to use the cacheOptions lifetime over the "cache" service lifetime

v5.9.1

5.9.1 (2025-03-31)

Changed

• Changed Phalcon\Storage\Adapter\AbstractAdapter and dropped has() check before receiving the value. #16705

Added

• Added Phalcon\Html\Helper\Breadcrumbs component to replace the old Phalcon\Html\Breadcrumbs component. #16727

Fixed

• Fixed Phalcon\Mvc\Micro\LazyLoader::callMethod to prevent Unknown named parameter error #16724

Removed

v5.9.0

5.9.0 (2025-03-08)

Changed

• Changed Phalcon\Filter\Validation\Validator\Email to allow UTF8 in local part. #16637
• Changed Phalcon\Cache\Cache::getMultiple() to use mget() when the Phalcon\Cache\Adapter\Redis is used. #16689
• Changed Storage\Adapter\Redis to accept ssl in the options for secure connections. #16711

Added

• Added dispatch:beforeCallAction and dispatch:afterCallAction to last-minute modifications to handler and method (mostly for debugging).

Fixed

• Fixed Phalcon\Forms\Form and Phalcon\Filter\Validation to correctly handle the validate() response when using validation class beforeValidate() #16702
• Fixed Phalcon\Support\Debug to use correct passed arguments in set_error_handler callback. PHP v7.2.0 deprecated errcontext and has been removed since php v8.0.0 #16649
• Fixed Phalcon\Http\Response\Cookies, Phalcon\Http\Response\CookiesInterface and Phalcon\Http\Cookie to use correct cookie default arguments, avoid deprecated null assign warning when trying to assign the same cookie twice #16649
• Fixed Phalcon\Encryption\Crypt to use strlen instead of mb_strlen for padding calculations #16642
• Fixed Phalcon\Filter\Validation\Validator\File\MimeType::validate to close the handle when using finfo #16647
• Fixed Phalcon\Mvc\Model\Manager::getRelationRecords to explicitly set the referencedModel in the conditions along with the referencedFields #16655
• Fixed Phalcon\Image\Adapters\AbstractAdapter::watermark to correctly calculate the Y offset #16658
• Fixed Phalcon\Dispatcher\AbstractDispatcher when calling action methods that do not define parameters to prevent Unknown named parameter error.
• Fixed Phalcon\Di\Injectable to reference the correct instance of Phalcon\Di\Di in the docblock property #16634
• Fixed Phalcon\Filter\Filter to have the correct docblock for IDE completion
• Fixed Phalcon\Mvc\Model\Query to use the lifetime in the "cache" service if none has been supplied by the options #16696
• Fixed Phalcon\Session\Adapter\Stream::gc() to throw an exception if something is wrong with glob() #16713
• Fixed Phalcon\Http\Request::getBasicAuth() to return a null password if not defined on the server #16668

v5.8.0

5.8.0 (2024-07-09)

Changed

• Changed Phalcon\Mvc\Model, Phalcon\Support\Collection and Phalcon\Support\Registry to correctly implement \Serializable interface. #16591
• Changed the Phalcon\Mvc\Router\Group::getHostname() to return null also. #16601
• Changed Phalcon\Mvc\View\Engine\Volt\Compiler::compileSource to also return array #16608

Added

• Added events and Phalcon\Events\Manager for Phalcon\Storage\Adapter\Apcu,
  Phalcon\Storage\Adapter\Redis,
  Phalcon\Storage\Adapter\Memory,
  Phalcon\Storage\Adapter\Libmemcached,
  Phalcon\Storage\Adapter\Stream,
  Phalcon\Storage\Adapter\Weak,
  Phalcon\Cache\Adapter\Apcu,
  Phalcon\Cache\Adapter\Redis,
  Phalcon\Cache\Adapter\Memory,
  Phalcon\Cache\Adapter\Libmemcached,
  Phalcon\Cache\Adapter\Stream,
  Phalcon\Cache\Adapter\Weak
Phalcon\Cache\AbstractCache. #16606

Fixed

• Fixed Phalcon\Support\Helper\PascalCase causing memory leak by anonymous function #16593
• Fixed Phalcon\Mvc\Model\Query to rollback failed transactions and re-throw exception for data consistency #16604

Removed

v5.7.0

5.7.0 (2024-05-17)

Changed

• Changed Phalcon\Support\HelperFactory to use the internal mapper for better memory management #16571

Added

• New ini setting phalcon.form.strict_entity_property_check for Phalcon\Forms\Form to enable strict entity property checking. #16567

Fixed

• Fixed Phalcon\Mvc\Cli\Router to extend the Phalcon\Mvc\Cli\RouterInterface #16551
• Fixed Phalcon\Filter\Validation\Validator\StringLength::validate() to correctly use the include parameter #16560
• Fixed Phalcon\Db\Column::TYPE_BINARY and Phalcon\Db\Column::TYPE_TINYINTEGER to have unique values #16532
• Fixed Phalcon\Forms\Form to bind only existing properties on entities, based on phalcon.form.strict_entity_property_check setting. #16567
• Fixed Phalcon\Filter\Sanitize\BoolVal to correctly handle integers. #16582

Removed

v5.6.2

5.6.2 (2024-03-14)

Changed

• Changed Phalcon\Mvc\View\Engine\Volt\Compiler::filter to use the helper with upper and lower for UTF-8 characters #16543
• Changed Phalcon\Di\AbstractInjectionAware to extend stdClass for PHP 8.2 deprecation warnings #16543