Skip to content
Edit this page

Version 4.1.6

Release Date: January 3, 2022

4.1.6 release of CodeIgniter4

SECURITY

  • Deserialization of Untrusted Data found in the old() function was fixed. See the Security advisory for more information.

BREAKING

  • Multiple table names will no longer be stored in BaseBuilder::$tableName - an empty string will be used instead.

Validation changes

  • The previous version of the Validation could not handle an array item. Because of the bug fix, the validation results may be different, or validation may raise a TypeError. But the previous version's results are probably incorrect.
  • The Validation separates the validation process of multiple fields like contacts.*.name and of a single field. When a single field had array data, the previous version validated each element of the array. The validation rule got an element of the array as the parameter. On the other hand, the current version passes the array to the validation rule as a whole.

Enhancements

  • Full support for PHP 8.1.
  • Database pane on debug toolbar now displays the location where the query was called from. Also displays the full backtrace.
  • Subqueries in QueryBuilder can now be an instance of the BaseBuilder class.
  • Kint was updated from ^3.3 to ^4.0.

Changes

  • The process of sending cookies has been moved to the Response class. Now the Security and CookieStore classes don't send cookies, but set them on the Response.

Deprecations

  • Seeder::faker() and Seeder::$faker are deprecated.
  • BaseBuilder::cleanClone() is deprecated.

Sending Cookies

The process of sending cookies has been moved to the Response class. And the following methods are deprecated:

  • CookieStore::dispatch()
  • CookieStore::setRawCookie()
  • CookieStore::setCookie()
  • Security::sendCookie()
  • Security::doSendCookie()

Bugs Fixed

See the repo's CHANGELOG_4.1.md for a complete list of bugs fixed.